Solved

This blog post says it's now generally available but I'm not seeing it live in my tenant yet: What’s new in Microsoft Intune – MayFor those that don't know, Microsoft has been using Company Portal as their custom DPC but is now transitioning to Google’s Device Policy app to get in line with Google’s mandates. This means (among other things), enrollment will happen at http://aka.ms/enrollymyandroid instead of through the Company Portal app.If they've rolled it out to your tenant, it will look like the first image in this other blog post when you go to Devices > Android > Enrollment > Personally-owned work profile.I am curious if this is live for anyone else. Methinks Microsoft has a weird interpretation of "generally available".

Apparently, Google has a new policy that only approved DPCs can be installed through QR Provisioning; otherwise, their installation will be blocked.Link: https://developers.google.com/android/play-protect/warning-dev-guidance#android_enterprise_dpc_enrollment The problem is that I am not able to understand how to apply for DPC approval. I found this page, but still not able to find out where to apply. Your help is appreciated. Thanks 

I’ve been coding and developing my portfolio website and decided to add gifs that loop to a couple of my webpages. When I tested my website using Google Chrome, I got a broken gifs image. But when I tested on other browsers like Safari and DuckDuckGo, the gifs seem to work just fine. I’ve checked the code for errors over and over and have not been able to find any. So I decided to push my website live in hopes that the issue would get resolved. But the issue still persists. I’ve researched and have tried resetting and updating my Google Chrome browser extension and even updated my computer for the latest iOS updates. But none of that has worked, and I’ve come to realize that the gifs don’t work on any of the Google chrome browsers that I’ve used. I’ve used the Google Chrome browser on friends and family desktop computers to see if the gifs work with no success. So I know it’s not my personal Google Chrome browser settings or computer. Can someone please help!?

About two weeks ago, I replaced my work phone, a Samsung A54, with a Samsung A57. On my previous phone, I had a pair of Garmin Vivomove Trend watches connected, and I was receiving notifications from both my personal profile (such as SMS, WhatsApp, Messenger, etc.) and my work profile (such as Outlook, MS Teams, and similar applications).After switching to the Samsung A57, notifications from the work profile stopped appearing on my watch. I have thoroughly checked all Garmin Connect settings, phone settings, and also reviewed the configuration together with our company's administrators to verify whether the issue could be related to the Company Portal settings or any associated policies.The conclusion is that the new Android version appears to block this functionality, and it simply no longer works. I have also found discussions about this issue on various forums.I would like to know whether there are any plans to re-enable or restore this functionality in the future, as receiving work

According to the documentation of the new portal, admins or owners of the portal have the ability to add devices. However, when as a customer of the portal and owner of it, the devices I try to add are not added. I am always forced to go through the reseller. Would it be possible to delegate the addition of devices to the customer?

Hello everyone,We are currently facing an issue where Google Play Protect is blocking our Android application during device provisioning.Context: - It is not distributed via Google Play (but is already published); it is hosted externally and installed during provisioning via QR code.- The app is properly signed, and provisioning works at the system level, but Play Protect blocks the app with the message “App blocked to protect your device.”- This started happening recently on new devices / factory reset devices. We have already submitted the official Play Protect appeal form as recommended in the documentation:The form was completed with all required information (APK, package name, signing certificate, use case, etc.).At this point, we are looking for guidance from the community: - How long does it usually take for the Play Protect appeal form to receive a response or decision?- Is there any additional step or channel recommended for Android Enterprise DPC apps in this s

i would like to finish my registration in androidenteprise portal, but if i fill in the duns number, then i will get message, that something went wrong. Please could help me ?

Before I delve into the adb logs, anyone seeing issues enrolling Samsung devices running Android 14? Since a few weeks now, I and a few other users get the error: “Can’t add work profile”. The only way around it is to reset to factory…I did that yesterday and was able to immediately enroll after and today I unenrolled and re-enrolled and got the same error…

Hello,We are looking to implement the functionality to provision eSIM profiles on devices with Android 15+. However, we encountered a telecom provider that requires the EID of the devices before providing us with the eSIM activation code.In this initial stage, we are simply trying to obtain the EIDs of all devices so that we can send them to the telecom provider and receive the eSIM activation code in return. To obtain the EID, we are using the following approach: `euiccManager.createForCardId(slot).eid` However, we are encountering this issue as noted here:*Must have carrier privileges on subscription to read EID for cardId=0 [java.lang.SecurityException: Must have carrier privileges on subscription to read EID for cardId=0]* The same issue occurs with `euiccManager.eid`.According to the documentation mentioned above, Android 15 introduced the possibility of managing eSIM profiles without requiring carrier privileges. However, it seems that the same should also app

Hi, we have a few Zebra devices registered for zero-touch and plan to use zero-touch for all regular mobile devices. the registration and all existing accounts linked to it was created by team members that are unfortunately no longer with us.i do have access to one account with administrator permissions but the account with the "owner" permission was not handed over and credentials are basically lost. which steps are necessary to recover ownership?

I am very concerned about the Enhanced GPP features coming soon that are currently being piloted in other regions. https://security.googleblog.com/2023/10/enhanced-google-play-protect-real-time.html This is not a welcome feature whatsoever for the fully managed space where we have business apps written internally that are being installed on business devices, owned by that business. In no way do we want Google sitting in between deciding whether a very legitimate app written internally for an organization should be installed on devices that are purchased and owned by the same organization on fully managed devices. I would like a way to disable GPP completely, or at a minimum whitelist applications from scanning as we don't want Google interfering in the business operations.  GPP is a helpful consumer protection features but fully managed devices should have the ability to be opted in or out of the program. Otherwise GPP can incorrectly flag a mission critical app and

I am currently developing an EMM using the official AMAPI. For the requirement of "eSIM silently (without user interaction) downloaded to the device and successfully activated", it is required to directly call the interface to download EISM without using an activation code. However, the activation code field in the AddEsimParams field of the AMAPI interface is a mandatory item. How can I implement this feature

Hello, We are a large corporate and mostly use Samsung phones as Android devices. Enrolment is being done via ZT portal to a default profile which is Corporate Owned Work Profile provided via Microsoft Intune. We are noticing an increased amount of cases where users set up their phones (no QR code, no text token) with default configuration added using DPC extras and within first few hours they would reset to a factory default state without any notice. This has become a real issue as it is affecting more and more people. Devices enrolled without ZT do not suffer from this issue, even though they are using the exact same enrolment profile. I saw many posts like this here and elsewhere on the internet, but no actual solution. What is the problem here and is it being actively looked by Google?

Hello,We are partners of your android enterprise portal. As it was complicated to enroll to your program, we have asked to be only We toke the first step only but we need to have access to zero touch resellers. have you any idea how we could have access to the zero touch reseller portal?  Many thanks 

Hi everyone,I'm looking for a way to silently install a local APK (not distributed via managed Google Play) on devices managed through Google EMM (Android Enterprise), without any user interaction.On my devices, the Device Owner is Google's own DPC (CloudDPC). I can install apps via AMAPI, but it requires a signature.Is there any way to install apps without the signature requirement — for example, through my own app instead of going through AMAPI / managed Google Play?In other words: with CloudDPC as the Device Owner, can a third-party app perform a silent install on its own, bypassing the AMAPI signature check?Thanks!

I have raised a support case by following feature request “Clarification Regarding Deprecated Feature 4.7 in EMM Technical Requirements 2025DescriptionDear Team,While reviewing the EMM Technical Requirements 2025 document, I noticed that Feature 4.7 is listed as a required item. However, it is also marked as “(DEPRECATED)” beside the feature description.Could you please clarify whether this feature still needs to be implemented for compliance, or if it is no longer mandatory due to its deprecated status?Your guidance on this matter would be highly appreciated.”but partner support team finished my case and said Private Community Question. What is the reason behind?

I’m trying to connect Intune with Android Enterprise by following the instructions here: Connect Intune account to managed Google Play account - Microsoft Intune | Microsoft LearnHowever, when I’m prompted to sign up for the Google Admin Account and I enter my work email address as instructed, I get this error: “Email address is associated with an existing consumer account. Please use a different email.”I don’t understand what I am supposed to do here. I don’t have a “different email”. My work email address is my work email address.Thanks!

Hello,We have a managed Google Play store account linked to our Endpoint Manager. This account is a Microsoft one on our domain but we do not have a log of the password. Are we able to reset it without any negative effects on our enrolled devices?

Hello,I hope you are doing well.We would appreciate your guidance regarding our application to join the Android Partner Portal.Our company is a professional reseller and integrator of enterprise mobility solutions, working with leading manufacturers such as Zebra, Datalogic, and Honeywell. We have extensive experience deploying and supporting Android-based devices for enterprise customers across multiple sectors.We are currently engaged in a significant project with a customer who plans to implement Android Zero-Touch enrollment at scale. In this context, access to the Zero-Touch portal is essential for us to properly provision, deploy, and support these devices in line with Android Enterprise best practices.We have submitted multiple applications to join the Android Partner Portal, but unfortunately, they have been declined with the following message:“We would like to inform you that your application to join the Android Partner Portal has been declined.After reviewing the information

In PROFILE_OWNER, when using RequestDeviceInfoParams to request for eid, the device agrees to display eid. Why can't amapi obtain the eid of the device? It can be confirmed that my device has eid and can display it normally in other modes

Hello community,We have Samsung XCover6 Pro Enterprise Edition sent to customer in May this year. (Android v.12)They have started the phone and then didn't enroll it. They have just started the phone and put it on the shelf and battery has died and now they have started the phone. There are two problems:1. They can skip to connect to the Wi-Fi2. Even if they connect to Wi-Fi the phone doesn't get enrolled, the enrollment phase never comes up, you can just continue to setup the normallyIf we remove the phone from Zero Touch Portal, hard wipe the device by connecting it to a PC and then upload it to ZTP and connect it to Wi-Fi. Then it starts with enrollment. So I wanted to test this myself. I took the exact same model of the phone Samsung XCover6 Pro Enterprise Edition from our shelf and started it and to my surprise I COULD NOT skip network connection. Now the only difference between the phone that I tested and the phone that we sent to the customer is that, we sent the phone

Hello,For several weeks now, we are facing an issue in Samsung Contacts app about searching contacts in our Exchange Global Address List.This feature has worked flawlessly for many years, and now when we search for a contact in Exchange GAL, contact is found but when we try to open it Samsung Contacts app fails to open contact and shows “Contact not found”.Thank you for your help.Regards,

We are experiencing an issue where the ImportSavedPasswords Chrome policy set to FALSE with POLICY_MODE_MANDATORY is not disabling the "Import passwords" option in the Chrome Password Manager UI.Steps to Reproduce:1.In Google Admin Console, navigate to Devices > Chrome > Settings > Users & browsers2.Select the Backend OU under Bigfix_MCM_OU > MCM > DEV3.Set Import Saved Passwords → Disable imports of saved passwords4.Set User override → Do not allow users to override this setting5.Save the policy6.On a Chrome browser signed in with an account belonging to the Backend OU, navigate to chrome://policy and click Reload policies7.Navigate to chrome://password-manager/settings Observed Behavior:1.The "Import passwords" row remains fully visible and functional under chrome://password-manager/settings2.The "Select file" button is clickable and opens a file picker dialog3.Passwords can still be imported via CSV despite the policy being set to FALSE with MANDATORY enforcement 

Hello,I’m trying to deploy certificates on Chromebooks for wifi connexion.  I’m lost in Google documentations, it’s a big labyrinth.  They seem to have change the manner to do and doc is not up to date.  I already built a environment PKI with Intune NDES/SCEP server and all is working great.  But for Google it’s another thing.  So if anyone have up to date (2026) docs, it would be appreciated.Here are some questions that might help me:Is Google Cloud Certificate Connector act as an application proxy?  Or we have to put our NDES/GCCC server in DMZ?Is Pub/Sub on Google Cloud Project is mandatory?​​​​​​​How to confiugre SCEP for chromebook, options for SCEP Secure are not available anymore.Is all the config for certificates like device id etc is in the config connector file? Thank you   

We have configured the chrome.users.AutomatedPasswordChangeSettings policy to enable automated password change and allow importing the AI model required for this feature. However, the "Change password automatically" button/option is not appearing in the Password Checkup flow. Only the standard "Change password" (manual redirect) button is visible.We have configured the chrome.users.AutomatedPasswordChangeSettings policy to enable automated password change and allow importing the AI model required for this feature. However, the "Change password automatically" button/option is not appearing in the Password Checkup flow. Only the standard "Change password" (manual redirect) button is visible. Observed Behavior:1.The compromised password entry is correctly flagged under "Compromised passwords"2.Only the "Change password" button is shown (manual redirect to the site)3.The "Change password automatically" option is completely absent from the UI4.No automated password change flow is triggered