Product Updates

In today's dynamic work environment, simplifying cloud operations and enhancing user experience are paramount. That's where the Chrome Enterprise Recommended program comes into play, serving as a vital resource for identifying validated partner and third-party solutions that are optimized for ChromeOS devices.   This program is designed to give you confidence in your technology stack. When a solution is Chrome Enterprise Recommended, it means it has been rigorously validated by Google for performance and compatibility. Many of these solutions offer seamless integrations and connectors that plug directly into your existing IT tools, making deployment and management a breeze.   Let's explore some of the key areas where Chrome Enterprise Recommended solutions are making a significant impact:   Fortifying Your Defenses: Security and Trust  Security is a top priority for every IT admin. The Chrome Enterprise Recommended program features robust security solutions designed to protect your organization. Partners like Cisco Duo for access security, CrowdStrike Falcon for security event correlation, Okta for identity and access management, Palo Alto Networks Cortex XDR for enhanced threat hunting, and Ping Identity for zero-trust access controls are all part of this program, offering you a comprehensive suite of tools to build a resilient security posture.   Streamlining Printing: Print Management  Managing printing across a distributed workforce can be a challenge. Chrome Enterprise Recommended offers solutions like Papercut, Pharos Chrome Print, Vasion Print (formerly PrinterLogic SaaS), and Printix cloud print management. These tools are designed to simplify secure printing, reduce costs, and provide a hassle-free experience for your users.   Improving output: Productivity and Collaboration  The program also highlights solutions that empower your teams to work more efficiently. From visual communication with Canva to relationship management with SalesforceCRM and secure agreement signing with DocuSign eSignature, these tools help enhance productivity and foster seamless collaboration within your organization.   Seamless interactivity: Communications  Chrome Enterprise Recommended provides powerful web-based solutions like Zoom and Webex Meetings, designed to keep your employees in sync and highly productive. With these tools, your team can enjoy seamless communication from anywhere, whether it's through voice, video, or text chat.   Beyond these highlights, the Chrome Enterprise Recommended program also encompasses solutions for:   Contact Centers: Optimizing customer interactions. Virtualisation: Delivering flexible and secure access to applications. Kiosk and Signage: Managing dedicated devices for specific purposes. Healthcare: Meeting the unique needs of healthcare environments.   By leveraging Chrome Enterprise Recommended solutions, you can simplify your IT operations, enhance security, and provide your users with an optimized and seamless cloud work experience.   Learn more and stay connected! For more detailed information about the Chrome Enterprise Recommended program and its partners, visit the official website: https://chromeos.google/intl/en_uk/resources/recommended/.   Furthermore you can see compatible peripherals outlined here: https://support.google.com/chrome/a/table/14169095?hl=en

For enterprise organizations, Chromebook Plus is evolving with integrated Google AI, designed to enhance productivity, creativity, and collaboration. New devices, like the Lenovo Chromebook Plus, feature powerful NPUs for on-device generative AI. Learn more.   Key AI features include: Smart Grouping: Organize tabs and apps efficiently. On-Device Image Generation: Create graphics instantly. Help Me Read: Simplify complex text. Text Capture: Extract information from screens. Select to Search with Lens: Quick information retrieval. These features come with built-in IT admin controls, ensuring a secure and intelligent platform for the modern workplace.   For more details, read the full blog post here: Work smarter with Chromebook Plus and Google AI

For IT Admins, the evolving capabilities of ChromeOS Flex offer a powerful way to modernize device fleets, enhance security, and simplify deployment. This update to Flex Remote Deployment enables efficient transformation of existing PCs and Macs into secure, cloud-first ChromeOS devices, regardless of location. Revitalize Your Hardware, Streamline OperationsChromeOS Flex extends the life of your current hardware, reducing e-waste and lowering total cost of ownership. Devices boot quickly and maintain speed, ensuring consistent productivity.The updated Flex Remote Deployment simplifies large-scale deployments, allowing automatic conversion of managed PCs to ChromeOS Flex without complex IT requirements. Deploy across your fleet via USB or network, with cloud profiles syncing settings instantly. Key management benefits include:  Centralized Control: Manage all ChromeOS Flex devices alongside native ChromeOS devices via the Google Admin console. Remote Policy Configuration: Use ChromeOS Enterprise Upgrade for remote updates and policy configuration, ensuring consistent security. Mass Deployment: Integrate with tools like Microsoft SCCM or Windows Deployment Services for efficient rollouts.  Enhanced Security and User ExperienceChromeOS Flex boasts proactive security with sandboxing and blocked executables, minimizing the need for traditional antivirus. IT controls prevent data loss, and automatic background updates keep devices secure and current. Employees benefit from a fast, clutter-free experience with quick access to VDI and web apps. Get Started TodayChromeOS Flex is a no-cost download, offering an accessible path to a cloud-first OS. While it provides most ChromeOS benefits, certain hardware-specific features (like Google security chips and Android app support) are exclusive to native ChromeOS devices. Full management capabilities for ChromeOS Flex require ChromeOS Enterprise Upgrade or Chrome Education Upgrade. To learn more about ChromeOS Flex and its deployment options, including the newly launched remote deployment feature, you can explore the ChromeOS Flex engagement page or review the ChromeOS Flex one-pager. Furthermore, check out the official Google Blog Post.

Further to the Help Center post, we wanted to bring up an important update regarding Chrome Sign Builder. As part of the ongoing evolution of ChromeOS and the phasing out of Chrome apps in kiosk mode, Chrome Sign Builder will soon be deprecated.   What's Happening?   Chrome Sign Builder, a Chrome app used to schedule and display content on managed ChromeOS kiosk devices, is reaching its end of support. This change is aligned with the broader initiative to transition from Chrome apps to more robust and modern web-based solutions.   Key Dates to Remember   The Chrome Sign Builder app will be removed from the Chrome Web Store at the end of ChromeOS M150. This means it will no longer be available for download or continued use beyond this point.   Your Alternatives for Digital Signage   We understand that digital signage is a crucial part of many organizational setups. To ensure a smooth transition, we recommend the following alternative solutions:   Option 1: Partner with Comeen - Consider leveraging Comeen, a Chrome Enterprise Recommended Partner. Comeen offers a direct replacement with their web-based digital signage application, designed to meet your needs and integrate seamlessly with ChromeOS. Option 2: Manually Deploy a Web App - For those who prefer to manage solutions in-house, you can manually deploy a web app through the Google Admin console. This involves adding the URL of your chosen digital signage web application and, optionally, configuring it to auto-launch on your kiosk devices.   Action Required: Deleting Chrome Sign Builder   To ensure a clean transition and remove the deprecated app from your managed devices, please follow these steps:   Navigate to the Google Admin console. Go to the Apps & extensions page. If Chrome Sign Builder is configured in your organization, you will see a notification banner. Proceed with deleting Chrome Sign Builder from your devices. Please note that deleting the app will also remove any associated user data upon the device's restart.   We encourage you to begin planning your transition to an alternative solution well in advance of the M150 deprecation to avoid any disruption to your digital signage operations.

We wanted to talk about a fantastic way to elevate your expertise and recognition within our community and beyond: the ChromeOS Admin Professional Certification!   What is the ChromeOS Admin Professional Certification? This certification validates an IT professional's ability to configure, deploy, maintain, troubleshoot, secure, and manage ChromeOS environments using the Google Admin console.    A huge shout-out to our certified community members! A massive congratulations to all our community members who have already earned this impressive credential! We are incredibly grateful to have you as part of our community. Your expertise significantly enriches our discussions and provides invaluable insights. For those of you who've earned this, you'll soon see a special badge showcased on your community profile. This badge will instantly highlight your verified expertise, lending even more credibility to your questions and responses.   How Can You Get Certified Too? Ready to join the ranks of certified ChromeOS professionals? Here's how: Understand the Exam: The exam assesses your knowledge of Google Admin console actions, ChromeOS policies, identity management, and core ChromeOS tenets. It's a 2-hour, multiple-choice test. Gain Experience: While no formal prerequisites exist, we recommend at least 12 months of hands-on experience with the Google Admin console. There are some great online resources to check out also and validate your competency. Prepare with Resources: Explore official ChromeOS certification resources and consider courses like "Introduction to ChromeOS Administration" on Google Cloud Skills Boost. Extensive practice within the Google Admin console is crucial. Register for the Exam: Visit the official ChromeOS certification website to register and schedule your exam.  Becoming certified is a fantastic way to validate your skills, boost your career, and become an even more impactful contributor to our community. Check out the certification website and exam guide.

Google I/O 2025 was undeniably an AI-centric event, showcasing a future where artificial intelligence is deeply embedded across Google's ecosystem.    Here's a breakdown of the key areas and their potential relevance for managing your ChromeOS fleet and users:   Pervasive AI Integration Across Google Products The event underscored the "extensive application of AI across Google's products, with major upgrades to the Gemini app, generative AI tools, and AI models." For IT admins, this means: User Experience & Training: As AI becomes more integrated into familiar Google Workspace applications (which are heavily used on ChromeOS devices), your users will experience new functionalities. This may necessitate updated training protocols, or support resources to help users effectively leverage AI-powered features like personalized smart replies in Gmail or new functionalities in NotebookLM. Security and Compliance: The increased use of AI, especially with generative capabilities, brings new considerations for data handling and privacy. IT admins will need to evaluate how these AI features interact with sensitive enterprise data and ensure compliance with organizational security policies on managed devices. AI in User Interaction and Device Capabilities Evolving Google Search and User Interfaces: Features like "AI Mode for Google Search," introducing "Deep Search for thorough responses," and "Live capabilities from Project Astra for real-time interaction using the camera," are transformative. From a device management perspective, this could imply: Network Considerations: More complex AI interactions might demand greater network bandwidth or processing power from devices. Privacy Implications: Features leveraging real-time camera interaction (Project Astra) highlight the importance of device camera management and privacy settings within an enterprise context. IT admins will need to understand and potentially control these capabilities on user devices. Project Astra's "Computer Control" Capabilities: A particularly noteworthy advancement mentioned was Project Astra "evolving into a 'world model' with improved memory, computer control." While still in development, the concept of AI gaining "computer control" capabilities is a significant point for IT administration. This could eventually lead to AI-driven automation of tasks on devices, requiring IT admins to define permissions, monitor actions, and ensure security protocols are in place to manage these powerful new capabilities. Broader Enterprise Relevance Developer Tooling Evolution: Updates to developer tools like Google AI Studio and Colab, along with new open models, are indirectly relevant. If your organization develops custom applications that run on Android (and thus on ChromeOS), or integrates with Google's APIs, advancements in these areas could impact your internal development and deployment processes on managed devices. Conclusion Stick with us to remain informed about these broader AI advancements which appear to be essential for maintaining a secure, efficient, and forward-thinking enterprise environment.   For more details on the announcements, refer to the official Google Blog: Google I/O 2025: 100 things Google announced

Original Post Date: 29-10-2024   Its Cyber Security Awareness Month so here are three use links for you:     https://threatmap.fortiguard.com/ - Fortinet’s map offers a dynamic, global view of cyber threats by showing live attacks based on its network. It tracks the types of attacks, their origins, and targets, making it a useful tool for understanding the scale and type of threats occurring in real-time.   Forrester research has found businesses could save up to $2.6 million in cybersecurity costs by using Chrome Enterprise Core. You can read the full report in the resources section of the community here: https://chromeos.community/community/396/resources   https://threatmap.checkpoint.com/ - FireEye’s map visualizes live cyber threat activity and provides a filter to see specific types of attacks, like malware or botnets, as well as their geographical locations. This map can also help you understand current cybersecurity trends globally.  

Original Post Date: 17-10-2024   We have an exclusive opportunity to be a beta tester for the new upcoming Chrome Browser certification coming!   This will allow you to gain a competitive edge by getting to know the content. 🤓   You will also get the chance to shape the final exam.   If you are interested, you can sign up here: Sign up here   Registration for this form is open until October 23rd, and all registered beta candidates will receive a follow-up from the team after the registration deadline.

Original Post Date: 08-10-2024   We know that extensions can supercharge productivity, security, and more. Drop a comment below and let us know:   Which Chrome extensions do you and your teams rely on the most?   How do they impact your day-to-day work?   Are there any hidden gems you’ve discovered that others should know about?   Comment below and let us know.

Hello everyone, We're thrilled to announce significant enhancements to the zero-touch customer portal, designed to provide greater control over customer data. The portal's role-based access control has been updated to include three new user roles, ‘Manager’, ‘Assigner’, ‘Viewer’, for greater control of the data and capabilities each portal user has access to.     Read this Help Center guide to learn about these new roles and how to add users to these new roles.    Migration Timeline:  This is now available.    We know many of you are excited to have this new capability, thank you to those of you who provided feedback and input.   It would be fantastic to hear your thoughts, are you planning on using these new roles in your organisation or any additional questions, below.   Thank so much.   *Timeline updated 24 June, 2025

Today’s AI-driven, mobile-first world demands a modern platform to power productivity and collaboration, while keeping security at its core to help mitigate new potential threats.  Android is continually evolving to meet new business needs. As organizations increasingly rely on mobile solutions, the demand for robust security, seamless collaboration, and efficient management have never been higher.    We’ve already released many powerful updates this year, with more on the way. Here’s a look at the latest advancements designed to power modern employee experiences and strengthen your digital defenses:   Resilient security and integrated defense Built-in security businesses can trust.   Advanced Protection1: Safeguard teams from targeted cyberattacks with multi-layered defense against online attacks, harmful apps, and data risks. Turn on Google’s most powerful security features with a single tap for continuous protection. APN Overrides via AMAPI: Precisely manage and secure cellular connectivity by defining and enforcing custom network and APN rules on managed devices, ensuring devices only connect to authorized networks.  Identity Check2: Employees can now protect access to sensitive data outside of trusted locations by enabling required biometric authentication to access sensitive resources outside of trusted locations to defend against account takeovers.  Corporate badges in Google Wallet3: Employees can add their corporate ID badge to their Google Wallet for secure, one-tap access to NFC-enabled work buildings.   Advanced Protection UIIdentity Check UI flowCorporate badges in Google Wallet   Modern experiences built for today’s teams Equip your workforce with new productivity and digital wellbeing tools for more efficiency and a better employee experience.   Material 3 Expressive: Elevate the employee experience across managed and unmanaged devices and apps with customizable UI, smoother movements and better feedback. Teams will be able to access the new UI later this year. Notification Auto-Grouping: Minimize distractions and digital fatigue. Notification Auto-Grouping tackles digital clutter by consolidating multiple notifications from one app into a single, cohesive display. Desktop Windowing: Discover desktop-like multitasking on Android tablets. Teams can open and resize multiple app windows side-by-side, empowering employees to multitask efficiently and collaborate without constant screen-switching.  TaskBar Overflow: Access and organize apps more easily on Android tablets. An expandable panel makes it easy to sort through all open apps, even when the main taskbar is full. Teams can also pin critical apps for instant access, saving time and keeping things organized. Custom Keyboard Shortcuts4: Accelerate workflows and improve efficiency on Android tablets with an attached keyboard. Teams can create personalized shortcuts for frequently used apps to tailor their work experience. Gemini in Google Docs5: Unlock AI-powered productivity as you work from your phone. Gemini is built right into Google Docs, so employees can instantly summarize documents, refine content or create a new draft, without switching apps.  PDF in Chrome on Android: Revamp workflows with in-browser viewing of linked PDFs, which now open directly within a new Chrome tab.   Desktop Windowing UI Flow Scalable control with simplified provisioning and governance Optimize IT operations with streamlined deployment and centralized management across your Android fleet.   Efficient device setup6: Streamline device onboarding and boost productivity from day one. An improved setup workflow for managed Android devices enables IT teams to deploy fleets with fewer screens and reduced issues, freeing up resources and giving quicker access to corporate resources to employees. Device EID access for eSIM Management7: Enable eSIM provisioning at scale. Help streamline provisioning and management by pulling EID values from your managed fleet, including BYOD, to enable seamless provisioning of eSIMs on enrolled devices.  5G Slicing via AMAPI8: Solve network congestion with new AMAPI support for 5G slicing. IT teams can route enterprise app traffic through designated network slices, guaranteeing reliable performance for essential workflows on Android devices. Support for Android App Bundle (AAB) files for private apps: Simplify internal app distribution and management. AAB file support for private apps on Google Play helps IT rapidly deploy, update, and manage proprietary tools, streamlining delivery, and optimizing app size. Zero-touch Customer Portal improvements: Customize permissions and gain more transparency across enrolled devices. Detailed Zero-touch audit logs record account activity, for better user support, abuse prevention and compliance. Plus, new capabilities for administrators to define and assign access levels for admin roles are coming soon. Zero-touch Customer Portal Audit Log UI Flow Dive into the Community   Android is constantly evolving with exciting new features and our community is a great resource for staying informed, discussing what’s next, and sharing best practices to best leverage these updates.    In case you missed them, explore some of our recent articles and discussions: Introducing Device Trust from Android Enterprise Zero-touch Enhancement: Audit Logs Android App Bundle Support in Managed Google Play Signup and Device Enrollment: New features and upcoming plans For a deeper dive into the how-to’s, check out our Help Center article.   In the meantime, share your thoughts - what features are you most excited about? Do any of these new features solve any existing pain points? Let us know what you’d like to see next in the comments below!   1 Available on Android 16+. Some features will launch later this year; Some features may be available only on select devices. Some features require individual user activation and cannot be centrally enforced by IT departments.   2 Available on Android 16+ and on select devices. Some features require individual user activation and cannot be centrally enforced by IT departments.   3 Google Wallet is a trademark of Google LLC.   4 This feature requires a keyboard   5 Rolling out to eligible Google Workspace Business Standard, Plus, Enterprise Standard, and Plus customers, as well as those with specific Gemini Education or Enterprise add-ons. It's available on Android phones and tablets running Android 8+ , with no admin controls, and rollout pace may vary.     6 Available on Android 16+. For devices running on Android 15, please reach out to your OEM for availability.   7 For all devices, eSIM management is conducted via the EMM.  Additionally, for BYOD devices, the device’s owner is responsible for using and activating the eSIM, and the user can delete the eSIM at any point.   8 AMAPI support available on Android 16+. Availability varies by carrier.

In today's world, our smartphones and tablets have become essential tools for getting work done, wherever we are. This "mobile-first" reality means that keeping company data secure on these devices is more critical than ever. Traditional security methods, like just having a firewall around the office network, aren't enough anymore.   That's why Android Enterprise supports a Zero Trust security model. Think of it like this: instead of automatically trusting everyone inside the network, Zero Trust assumes nothing and verifies everything before granting access to sensitive information.  With 63% of organizations worldwide having partially or fully implemented a Zero Touch strategy, and 96% of organizations favoring this approach, Zero Trust has become the standard for security across organizations.   Android is making it easier than ever to bring this Zero Trust framework to your mobile workforce with Device Trust from Android Enterprise.*   What exactly is Device Trust from Android Enterprise? Simply put, Device Trust from Android Enterprise helps organizations verify the security status of Android phones and tablets before allowing access to work apps and data. It works across all device ownership models (company-owned or  BYOD), and at any level of device management (enrolled to an EMM or completely unmanaged), acting as a constant security validation for all Android devices used for work.   How does it work? Device Trust from Android Enterprise uses a comprehensive set of over 20 different trust signals to assess a device's security posture. These signals look at things like: The security patch level The security status of the network the device is connected to Whether the OS version is up to date By bundling all these checks together, Device Trust from Android Enterprise provides a reliable way to understand how trustworthy a device is. This makes it simpler for your IT team to manage mobile security while providing a smooth experience for your employees. Plus, it's designed to protect both user and company privacy.   What does this mean?   1. Security you can trust: Protect your data with intelligent and adaptable device security. Device Trust from Android Enterprise works effectively whether company owned and managed by an EMM, employee personal devices are managed by an EMM, using an Android Work Profile, or are unmanaged but utilize a partner security app. Device Trust from Android Enterprise allows businesses to secure the full management spectrum of Android devices used for work. Align with the latest industry standards and best practices around Zero Trust and mobile security, including including ISO/IEC 27001, 27002, 27005, to stay ahead of evolving threats. Ensure ongoing protection with continuous, real-time evaluation and validation of device health at multiple access points. 2. Flexible solutions for diverse use cases: Embrace a security approach that adapts to the diverse ways your employees work. Get direct access to reliable trust signals, empowering you to make informed access decisions and react swiftly to potential risks. Unify and simplify your security management by integrating Android mobile devices into your existing mobile threat defense (MTD), endpoint detection response (EDR), identity provider (IdP), and security information and event management (SIEM) workflows. Leverage our rich ecosystem of security partners, whose solutions integrate seamlessly with Device Trust from Android Enterprise, to create layered protection across different access needs and tailor security to specific use cases. 3. An uninterrupted employee experience: Empower your team to work effectively without unnecessary security hurdles. Enable instant productivity without needing to formally enroll the device - ideal for flexible and casual work arrangements that don’t require full EMM management. Deploy a security solution built with user privacy in mind, utilizing vetted partners and secure data interfaces. Maintain seamless access with continuous, behind-the-scenes security checks that won't disrupt workflows or require constant user interaction.   Who can benefit from Device Trust? Built to be flexible, Device Trust from Android Enterprise benefits businesses of all sizes.    For Large Enterprises: Strengthen your Zero Trust approach with continuous validation of device security, that accommodates varied access requirements, including full-time staff, contractors, and those in casual work scenarios. By seamlessly integrating with your existing security ecosystem (MTD / EDR, IdP, SIEM), you gain comprehensive visibility and can enforce consistent security policies across your diverse fleet of managed and unmanaged Android devices, enhancing your overall security posture at scale. For Small to Medium Businesses (SMBs): Achieve robust, enterprise-grade security without the typical complexity or extensive IT resources. You don't need a full EMM solution to benefit from Device Trust from Android Enterprise. This allows you to cost-effectively protect sensitive business data on employee devices and enable secure remote work, even on personal devices. In a world where mobile devices are our primary work hubs, Device Trust from Android Enterprise offers a robust and reliable way to unify security tools on mobile, and fortify your defenses.   Ready to learn more?  For a more detailed overview, explore our Keyword blog. Don't miss our upcoming digital episode, ‘Android Talks Device Trust,’ where we'll take a deep dive into Device Trust from Android Enterprise and our partner solutions. Register here. Let’s keep the conversation going, we’d love to hear your initial thoughts in the comments below. 👇 How does your organization currently approach securing mobile devices, and where do you see Device Trust potentially fitting in?     *Device Trust from Android Enterprise solutions are built and offered by third-party providers integrating into the Android Management API. Exact features may vary depending on third-party integrations. Access on unmanaged devices requires user consent to use the Android Device Policy app. Device Trust from Android Enterprise is supported on Android 10 and above.  

Hey everyone,   For those of you using private apps, I’m pleased to let you know that the Managed Google Play iframe now supports Android App Bundle uploads - enabling larger app sizes and the full benefits of app bundles.   With this update, you can now create new private apps using app bundles (with Google generated signing key) and can migrate existing apps to the app bundle by enrolling in Play App signing.     For full details on how this works please visit this Help Center article with information on migration of an existing APK to an app bundle. You can also find more information about using app bundles in this FAQ.    We know many of you have requested this feature before and so we hope you find it useful. It would be great to hear your feedback.    Thanks so much, Lizzie

Hey everyone,   We're pleased to announce a significant enhancement to the zero-touch customer portal, designed to provide greater transparency over your data. Comprehensive audit logs, offering a detailed and accessible record of all actions affecting your customer data will soon be available in the customer portal.   Key Improvements: Comprehensive Logging: Captures actions taken from all possible sources eg: zero-touch  customer and reseller portal, customer and reseller API. Tracks all data related to a zero-touch customer, including: Users Devices Resellers Configurations Terms of Service CSV Files Zero-touch customer accounts Easy Access and Analysis: Access audit logs through a user-friendly interface within the portal. Download logs in CSV format for further analysis and reporting.  Benefits: Accessibility and Analysis: Ensures easy access and analysis of logs. Enhanced Security: Provides a detailed record of all activities impacting customer data, enabling better monitoring. Streamlined Troubleshooting: Quickly identify and resolve data-related issues with detailed activity logs. Increased Transparency: Offers greater visibility into how your customer data is being accessed and managed. Important Note: The audit logs are only available via the zero-touch customer portal. There is no change to the zero-touch reseller portal, Reseller API, and Customer API.   Migration Timeline: This feature will be enabled during the next few weeks.    Only logs after March 2025 are available in the zero-touch customer portal. If you require older audit logs, please contact your reseller who can raise a support ticket.   We hope you find this enhancement useful. To learn more, please refer to this Help Center guide.   It would be fantastic to hear your feedback or any questions below.   Thanks so much.

Hey everyone,   To many, this is just a regular week at the start of March, but not if you are in Barcelona for MWC 2025 (Mobile World Congress)!    MWC is arguably the largest mobile technology events of the year and Team Android has been there meeting so many great people from across the ecosystem.   We’ve also announced some cool new features, which I wanted to also highlight to you here in the community. These include Gemini Live video & screen-sharing and AI-powered scam detection for calls and text messages on Android-designed to protect your teams and business from complex fraud and damaging scams. If you are keen to hear more on these or have any questions, please do let us know below.    If you weren’t able to make it to MWC this year, I also thought you might like to see a few photos to get you into the spirit of the event…     If you have attended this year (I know a few of you mentioned you were going), it would be great to hear more about your experience and what your highlights were. Feel free to also share your photos.    Looking forward to hearing from you.    Lizzie   (To take you back to MWC 2024 - he’s a @jasonbayton's community recap)

In today's workplace, making work devices accessible is not just good practice, it's essential. Almost half (45%) of employees with disabilities find the accessibility features of their workplace software barely adequate.1 The reality is that inaccessible workplace software creates a significant challenge for many employees, underscoring the gap in providing truly inclusive tools.   Our new Android Enterprise blog post, "9 Android features to support workplace accessibility", explores how Android is addressing the need for better assistive technology with a robust suite of built-in vision, audio, and mobility accessibility tools—designed by and for people with disabilities.   It covers key topics like:   Supporting a range of visual needs with Android's adaptable vision features: From Braille Display support and the AI-powered Lookout app to TalkBack screen reader, Android offers a range of customizable visual tools. Helping teams amplify what matters at work with Android's hearing tools: Android provides audio features that adapt to a range of hearing needs, including Real-time text (RTT), Sound Amplifier, and seamless hearing aid integration (including the new LE audio support). Unlocking personalized control for employees with motor limitations: Support employees by providing tools that help them own their workday with personalized control such as, Gesture Navigation, Camera Switches, and Action Blocks.   This isn't just about meeting accessibility standards – it's about helping teams interact with their work devices more effectively and independently. Read the full blog post here to learn more.   Now, let's open up the conversation! We want to hear from you. What accessibility challenges are you facing in your organization? Do you use any of the features mentioned? How can we, as a community, advocate for better accessibility in the workplace? Are there any other features you’d like to see in the future? Share your thoughts and experiences below!   1 https://www.capterra.com/resources/technology-accessibility/  

Hello everyone,   As we kickstart a new year, we are pleased to update you on enhancements we’ve made in the areas of signup and device enrollment and give you an advanced look at some features we’ll be adding in the near future.   Background We’ve heard from many customers that they prefer being able to administer Android management capabilities (e.g signing up for Android Enterprise, logging into the Managed Play store, etc.) using their corporate email address rather than a gmail address. This provides increased security, along with better administrative capabilities including self-service fixes for lost account credentials and changing access when team members change. We’ve also heard that for knowledge worker devices, customers prefer being able to log in to their devices with their work email, and being able to have the convenience of shared experiences across their phone and desktop. (More details can be found in this Android Enterprise blog post)   To improve the experience for both IT admins and end users, we’ve been working on changes in signup and enrollment that emphasize the use of work email accounts, and minimize Managed Google Play accounts except for dedicated devices that don't have logged in users.    Here is an update on our recent announcements as well as our plans for the next few quarters:   1) Improved signup Flow (Launched and rolled out to all EMMs)   In Q2 2024, we announced a new signup flow that encourages all new customer IT admins to sign up with their corporate email rather than a gmail account. We also made it possible to bind multiple EMM instances to a customer’s domain to allow for using multiple EMMs simultaneously in testing and in production.  As of July 2024, all of our EMM partners have adopted this new flow so new customer signups should use managed Google Domains by default.   2) New Android Enterprise enrollment flow    In early Q3 2024 for EMM partners with solutions based on Android Management API, we added the ability to enable “Authenticate using Google” which allows managed Google Accounts with work email addresses to be enrolled for end users. In addition, we added a new enrollment method, which is the ability to trigger enrollment by adding managed Google accounts directly from the Settings>Accounts section in Android OS.   Enabling “Authenticate using Google” requires our EMM partners to make some changes to allow userless dedicated devices to enroll without being prompted to add a work account, but all AMAPI partners should be working to adopt these changes and all EMMs will be enabled by Q1  2025.   For EMM Partners that build custom solutions based on Play EMM API, similar new enrollment capabilities will be available to begin development starting in Q1 2025.   3) Upgrade Managed Google Play Enterprises to Managed Google Domains (Q1 2025)   Next, following up on our new signup flow from earlier in the year, we are making it possible for ALL organizations to upgrade their Managed Google Play accounts enterprises, and have their binding moved to their managed Google domain. This will involve switching out the gmail addresses used by IT admins for currently bound enterprises and replacing them with work email addresses associated with a managed Google domain.   4) Upgrading users to Managed Google accounts (later 2025)   Finally, later in 2025, we’re going to be offering the capability to upgrade end user Managed Google Play accounts installed on devices to managed Google accounts corresponding to user email addresses. Stay tuned for more details in the coming quarters.   We extend our thanks to the AE community for your continued support and collaboration. As we continue to enhance the signup and device enrollment experience, we encourage you to stay tuned for more updates and exciting developments in the coming quarters. Plus, feel free to let us know below if you are interested in hearing more about any of the above.   The Android Enterprise Team

Hello everyone,   We're pleased to announce the ability to upgrade Managed Google Play Enterprises (which use Gmail accounts) to Managed Google domains (which use work email addresses) to bring enhanced security. We're looking for customers to provide early feedback on this process where we will perform assisted account upgrades before we make our API-based process available more widely via EMMs in 2025.   Background Customers have told us that administering Managed Google Play Accounts enterprises with a Gmail account doesn't meet their security and governance best practices. Additionally, if access to Gmail accounts is lost, recovery can require the involvement of both the EMM and Google. We're now announcing the ability to upgrade an IT admin Gmail account to a full corporate email address associated with a managed Google domain.   Upgrading an IT admin account from a Gmail account to a managed Google account provides many benefits, including: Admins log in with a corporate email address Allows the same organization to bind multiple EMM instances under their managed Google domain Prevents scenarios where IT admin @gmail.com accounts are accidentally lost or deleted Provides better governance of IT admin accounts and easier ability to change admin accounts when roles change Allows for SSO into IT admin accounts, reducing the number of IT admin passwords (vs using Gmail accounts)   This trusted tester program allows customers who want to take advantage of these benefits to upgrade immediately, before EMM APIs are available.   What We Will Be Testing This change will involve changing the IT admin login account from a Gmail account to a Managed Google domains account corresponding to the IT admin’s corporate email address.    There will be no changes to any users’ individual managed Google Play accounts in use on their Android devices. Upgrading individual user accounts from Managed Google Play accounts to Managed Google Domains accounts will be supported in the future - please stay tuned for additional future announcements in this area.   Customer Requirements Customer must have a Managed Google Domain (e.g., yourcompanyname.com) and must have superadmin privileges on this Managed Google Domain Customers will be asked to provide and verify the following information (more details to be provided at program start): Enterprise ID of Managed Google Play Accounts enterprise Customer ID of the target Managed Google Accounts domain,   Company email address of IT admin after upgrade (which is a domain SuperAdmin) Eligible customers can upgrade Dev and Test accounts first, but we're looking for customers also willing to upgrade the admin accounts for their production instances.    The ideal customers would be organizations of different sizes  whose corporate governance rules require them to move off administration with Gmail accounts as soon as possible. Timing This trusted tester program is targeted to begin in the 2nd half - late November 2024.    Call to Action If you are interested in taking part please reply below and I will be in touch privately with more details.    Thanks so much, Lizzie

*Please visit the latest Android Security paper (2026), here. * ----------Hey Friends, this year's new 2024 Android Security paper is now available, take a look! In today’s modern world, we use mobile devices everywhere – at home, on the go, and at the office.  So, protecting them against cyber threats has never been more important. Mobile devices are attractive targets for bad actors to steal or compromise to gain access to personal and business data.  83% of all phishing sites specifically target mobile devices and render in mobile browsers differently than desktop browsers.   With that in mind, I’m happy to announce the updated Android Security Paper. Here, we detail our latest security measures to help protect your fleet of devices. By combining Zero Trust principles, enhanced privacy features, and advanced security capabilities, Android continues to set the standard for a secure, privacy preserving, and user-friendly mobile platform across use cases. What's new in Android 15 Android 15 brings more robust anti-theft protection capabilities, Private space to help protect users personal apps, and more dynamic audit logging.  Additionally, we have introduced a simplified eSIM management feature, artificial intelligence management capabilities for IT admins, and a host of privacy preserving features.  Plus, you’ll discover improvements to make customer sign-up and account governance easier and more secure.  Finally, we havehardened the OS by enhancing memory safety to help minimize vulnerabilities.  Enjoy! 2024 Android Security Paper

  15th October, 2024     For company-owned devices, Android 15 empowers you with advanced management capabilities to help you take control, optimize your fleet of devices, and safeguard your business – on your terms.   Explore new tools to navigate the modern workplace with Android 15.   Streamline eSIM management for managed devices     Android 15 streamlines adding, removing and provisioning eSIMs on both company-owned devices and managed BYOD devices. Simple eSIM management* on managed devices makes it easier to onboard and offboard employees. This means IT admins can spend less time setting up eSIM devices, and more time on impactful work.   *For all devices, eSIM management is conducted via the EMM.  Additionally, for BYOD devices, the device’s owner is responsible for using and activating the eSIM, and the user can delete the eSIM at any point.   Secure personal profiles and private spaces on COPE devices   Extend your existing personal app policies to the private space on company-owned devices. IT admins have better control over the device’s security posture with a limited set of privacy preserving security restrictions* for selected apps outside the Work Profile on company-owned devices. An additional set of privacy safe security configurations for core apps will be made available at a later date.   *AMAPI managed devices will have the ability from Android 15 onward. Managed configurations apply only to company-owned, personally enabled (COPE) devices.   Enforce the default apps for personal profile on company-owned devices     IT admins can now enforce the default dialer, messaging app, and browser* in the personal profile when setting up company-owned devices to add an extra layer of security without compromising user experience.    * Available only on company-owned, personally enabled (COPE) devices. IT admins can only make an app the default if it’s already in the user’s personal profile. To ensure OEM defaults for dialer and browser are set, this feature should be configured prior to set up.   Enable seamless searching for your teams with Circle to Search      Forget juggling multiple apps. With new admin controls for Circle to Search* on both fully managed devices and within the Work Profile, IT can confidently empower employees to search directly from their work apps. They can simply circle, scribble, or tap content for more information.    *Circle to Search requires internet connection and compatible apps and surfaces. Results may vary depending on visual matches. For Android Enterprise managed devices, the feature is available on fully managed devices and devices with Android Work Profile. For company-owned, personally enabled (COPE) devices, Circle to Search is subject to the IT admin’s ability to turn off screen capture, which will disable the feature. For employee-owned devices with an Android Work Profile, Circle to Search within the personal profile remains unaffected by IT admin policies. Available on Pixel P8, P8 Pro, P6 series, P7 series, Pixel Fold, Pixel Tablet, Samsung S24 series, S23 series (incl. FE), S22 series, S21 series, Z Flip 3/4/5, Tab S9 series, Tab S8 series.   Extend battery life with screen brightness and timeout controls     Android 15 introduces screen brightness and timeout period controls* for company-owned devices. IT admins can adjust settings to optimize device efficiency for frontline staff, extending battery life to help them power through a shift without any device downtime.   *Available on company-owned, personally enabled (COPE) devices, fully managed devices, and dedicated devices.   Read Enhanced employee and device protection with Android 15 for business next. Learn more in our Help Center FAQ.   Register for the community to access and download these images and an Android 15 slide deck.     How helpful will these new features be to your business? We’d love to hear your thoughts and feedback below!  

  15th October, 2024   Flexibility and productivity go hand-in-hand in the era of modern work. But so can security risks.   Designed for the modern workplace, Android 15 introduces new ways to protect company devices and shield sensitive data - for both employees and companies - wherever the working day leads. Here’s how Android 15 can strengthen digital defenses.   Secure stolen devices with Android theft protection     Too often the cost of theft extends beyond hardware. That’s why Android theft protection* focuses on locking down your device should it fall into the wrong hands, helping minimize the impact of stolen devices.   Theft Detection Lock offers automatic protection the moment a device is stolen. It uses machine learning to detect any motion associated with theft, like snatching or driving away, and quickly locks the device to protect device data.   Offline Device Lock is enabled once a device is stolen. If a stolen device is disconnected for a set period of time, the device screen automatically locks to prevent unauthorized access, even when off-grid.   Remote Lock empowers employees to act quickly once their devices are gone. As an extra, immediate precaution when a device is lost or stolen, employees can lock the missing device at android.com/lock using just their phone number.    *Theft Detection Lock, Offline Device Lock, and Remote Lock requires Android 10+ and an internet connection. Android Go devices are not supported. Support may vary based on your device model. The user must be using the phone while it is unlocked. All theft protection features will be available in October.   Offer employees a private space within their personal profile     Personally enabled devices balance convenience and usability, with enhanced controls to protect business data. Now, employees are able to create a private space* for personal profile data - a folder locked with a separate password or biometrics - to store apps containing sensitive information, like banking or healthcare.    Employees can work with peace of mind, knowing that personal apps and activities are hidden and secure when working on the go or when sharing the screen with co-workers.    *Private space on COPE devices are subject to the same security requirements as the personal profile. Admins will be able to block the user from having a Private Space and remove an existing Private Space in COPE.   Review security logs easily with the latest NIAP logging requirements   Android 15 is enhancing device security with new logging capabilities that meet the latest NIAP regulations. Administrative changes are logged and stored in the SecurityLog - and data backup events are migrated from Logcat to the SecurityLog for easier upload and streamlined management. Now IT teams can more easily identify and address potential security threats.      Read Stronger management of company-owned devices with Android 15 next. Learn more about what’s new in our Help Center FAQ.   Register for the community to access and download these images and an Android 15 slide deck.       Enjoyed this introduction? Feel free to drop a kudos and join the discussion below - we’d love to know how these new features might impact your business strategy.  

*[Updated 17th, September 2024 -enhancements are now live]   Hello everyone,   We're excited to let you know about some upcoming enhancements to the Zero-touch enrollment process that will give resellers greater flexibility over device registration.   Key Improvement: Multi-Identifier Registration Soon, your reseller will be able to register a device using multiple identifiers: Serial number, manufacturer, and model combination Up to two hardware IDs of the same type (either MEID or IMEI) This change will bring several benefits: Improved provisioning reliability by reducing the risk of registration failures due to identifier mismatches. Enhanced inventory management with the ability to track devices using multiple identifiers.   Important Note: These changes will be reflected on the zero-touch customer API.   Timeline and Next Steps   These change are now live. Please contact your reseller to discuss this further.   We hope these improvements will greatly enhance your experience with Zero-touch enrollment. As always, we'd love to hear your feedback. If you have any questions about this announcement please comment below.    Thank you.

Hello everyone,   We know there are a few Android Enterprise developers in our community here, or you have developers in your team, so we wanted to make you aware of some upcoming Play policy changes. Please note, all developers should also have received a direct email notification and a Play Console inbox message.    To read the Policy announcement, please view this article in the Google Play Developer Help Center. You can view a list of the policy chances in this Policy Deadlines page, together with resources to give developers the support you need to comply. If you are a developer and have follow-up questions we recommend exploring the Google Play Developer Community.   I hope this is helpful.    Thanks, Lizzie

 Hello everyone, I hope you are doing well. AI is a topic on many people's minds at the moment - did you know in a recent workplace technology survey, 50% of employees said they improved productivity and quality of work with AI tools(1)? Android Enterprise is launching a new digital series called Android Talks, focusing on Google AI on Android and we are pleased to officially invite you to the first episode 😀: Android Talks AIJune 5, 20248:30-8:50am PDT Together with special guests from Samsung and Pixel, we’ll talk about how you and your employees can make the most of AI, no matter where work takes them, while demonstrating some of the most groundbreaking business features in action. Join us to learn how you and your employees can radically reduce the time spent on everyday tasks, boost creativity, and improve knowledge – all with the added bonus of more control and stronger security.  To register for this event, please visit the event page here.  (1) CCS Insight Employee Workplace Technology Survey | January 2023

Updated: July 2024 to include link to blog article* Hello everyone, We’re excited to announce improvements to our signup process for new Android Enterprise users. With this new signup experience, we've made it easier and more intuitive for businesses to deploy multiple Google products alongside Android Enterprise.  Key benefits include:Simplified IT Admin Experience: IT admins can now sign up using their corporate email address, eliminating the need for Gmail accounts. This streamlined process reduces the risk of lost or deleted accounts and improves the overall management of credentials. Centralized Setup: Setup tasks, such as syncing users and configuring single sign-on (SSO), can now be performed centrally through the Google Admin console. These changes apply to multiple Google product deployments, saving you time and ensuring consistency across your IT environment. Seamless Upgrade Process: If you wish to add additional Google products (e.g ChromeOS Enterprise Upgrade for Chromebooks, Chrome Browser Cloud Management, Google Workspace) to your existing deployment, you can do so seamlessly without the need for separate registrations. Simply select the products you want to enable in Google Admin Console, and the products will be automatically enabled to your organization’s account. Enhanced flexibility and control: This improved signup experience allows you to bind multiple EMM instances to your customer account. This enables parallel testing of pre-production environments or phased migrations to a new EMM, providing greater flexibility and control over your IT infrastructure. As we continue our commitment to delivering exceptional customer experiences, this improved signup process is designed to help your organization get the most out of Google’s enterprise products. Stay tuned for further updates from your EMM partner as this enhancement is rolled out for new Android Enterprise customers over the coming months. *Learn more about this new sign-up flow in this Android Enterprise blog article: How we are making Android Enterprise signup and access to Google services better Thanks,The Android Enterprise Team