Solved

Hey, I’m trying to better understand this AMAPI release (May 2026), we currently have issues with our corporate owned personally enabled devices where if a users personal gmail account is added to the personal profile of the device if the device is reset via recovery mode the users pin / personal gmail account is required.We started using EFRP admin emails to bypass this so we could get back into our own devices, we’re a large organisation so users generally don’t reset devices before handing them back or hand them back to their manager who is unaware of our process.What I’d like to understand is what the below change did as after testing this it still seems to be the same that when setting the FRP admin emails setting to be not configured a recovery mode wipe still triggers consumer FRP.AMAPI improves Factory Reset Protection (FRP) policy handling on COPE devices by explicitly disabling FRP and clearing account lists when no admin emails are configured, preventing unexpected lockouts

My Google Pixel is showing “This device is managed” and says Google LLC has configured this device to be fully managed. I am the current owner/user of the device and do not have access to the organization that enrolled it. The device is scheduled to automatically reset. How can I get this device removed from organization/zero-touch enrollment.

Hello,I'm trying to configure a corporate Wi-Fi network with certificate-based authentication.The connection works fine on an Android smartphone enrolled in Intune in COPE mode, but I can't get it to work on a smartphone enrolled in BYOD mode.I have a fleet of Samsung smartphones, both COPE and BYOD.The certificate is installed on the BYOD smartphones via an Intune PKCS profile, and I followed the recommendations (user-type certificate, Subject name = CN={{UserPrincipalName}}, and adding the SAN: User principal name (UPN) = {{UserPrincipalName}}, I published the CA that issued the certificate).The certificate is correctly installed on the BYOD smartphone and visible in the work profile, but the Wi-Fi connection fails.When I check the Wi-Fi configuration on the BYOD smartphone, there's no client certificate, which can explain the connection failure.Has anyone successfully configured a corporate Wi-Fi network with certificate authentication on a smartphone enrolled in BYOD mode on Intune

Hi Google TeamMy name is Fernando from Kueski Pay. We're currently expanding our mobile phone financing business in MexicoIn the past, we used Android DPC for device management. Recently, Springdel approached us with a solution based on the Android Management APIBefore moving forward, we’d like to confirm whether their implementation complies with Google’s policies and licensing requirements for our use case.Thanks in advance for your supportBest regardsFernandoKueski Pay

Allow my device to install other apps and uninstall 

Good to know for some of u!I did raise this question:Several of our clients are reporting an issue on their Chromebooks affecting various Google Sheets. Notably, this does not affect every user, even among those using the exact same Chromebook model.When opening a Sheet, the content appears blurry and unreadable. We have already tried resetting the zoom level to default, disabling hardware acceleration, and verifying the text wrapping settings, but the issue persists.Has anyone encountered this problem before, or could anyone suggest a potential solution? Luckely there is a temp fix for this:Adjust Canvas AccelerationIn the Chrome browser on an affected device, navigate to chrome://flags/#disable-accelerated-2d-canvas Set the flag to Disabled (or toggle to your system's default state). Click Relaunch at the bottom of the screen to restart the browser. Reload Google Sheets to verify that text and numbers render clearlyIf u having this issues, please raise a ticket with Google support to

Hi everyone, I’m trying to enroll a fully managed Android device using the Android Management API. I generate an enrollment token, create the QR code, factory reset the device, and start the QR-based provisioning process. Everything works until the Android Device Policy step, where I get the following error: “Since your organization has reached its usage limits, this device can’t be set up.” I am unable to get past this point. Here is what I have already checked:Listing devices through the API returns an empty list. There are no enrolled devices at all.Billing is active on the cloud project and the Android Management API is enabled.Enterprise creation works, policies return correctly, and I can generate enrollment tokens without any issues.The device is correctly factory reset and the QR scan is working as expected.I tested with both a Workspace-based enterprise and a Gmail-based enterprise. The same limit error appears on both, even though both enterprises have zer

What is the best way to troubleshoot RDP & Native Player connections when the self-hosted server is in AWS We receive the below error message  I think the problem is Cameyo Port Sheild but I am not sure how to troubleshoot this, are there any logs to investigate?Any help would be appreciated

Hi all,I'm giving you a brainteaser about the tablets we manage.The pentest conducted by our red team required us to disable the translation features in Google Chrome.Currently, when the TranslateEnabled policy is set to false, Chrome for Android correctly removes "Translate" from the overflow menu (⋮) and the long-press context menu. However, the Adaptive Toolbar Shortcut (the dynamic button next to the Omnibox) remains active or selectable, allowing users to bypass the restriction.Google Chome Android with Translation button recommandationLogically, if the Toolbar Shortcut was previously set to "Translate" (either manually or via "Based on your usage") before the policy was applied, the button must be hidden or replaced by the default shortcut once the policy is active. Or other behaviour such as should trigger a "Feature disabled by your administrator" message or simply perform no action.Unfortunately, there is no policy for managing the toolbar shortcut. Do you have any idea how to

Hey,Unfortunately there are no settings and/or no chance configure Widgets on COPE in MS Intune. There is specific setting in Intune restrictions config profile to allow/disallow Widgets for BYOD method.Is this problem tied only MS Intune or is this something for Google? Majority of our 10k fleet enrolled as  COPE and it's a big gap not having widgets available for Work Apps.ThanksJarmo 

I tried to create a new account but didn’t finish the process on the first day. When I came back the next day to complete it, I received the error message:ERROR_CREATING_USER – Portal user already exists for contactThis means the system has already linked my contact information to a portal user profile, even though I never fully completed the registration. Because of that, I’m unable to create a new account now. The incomplete registration seems to have locked my contact details, leaving me stuck in the process.

Hi Community Team,I am experiencing an issue with wiinpkrgame.com when users try to access it through Google Chrome on Android devices.The website occasionally fails to load, gets stuck on the loading screen, or displays a connection error. The behavior is inconsistent, as the site may work correctly on other browsers or different network connections. We have also noticed that https://wiinpkrgame.com/ is affected only in certain Chrome environments, making it difficult to determine the root cause.Could this be related to recent Google Chrome updates, Android System WebView, HTTPS/SSL configuration, DNS resolution, browser caching, or any security policies that could impact website accessibility?I would appreciate any suggestions on how to troubleshoot this issue and ensure the website loads consistently for all Android Chrome users.Thank you!

So I have been going round and round in circles trying to understand how the Helper App works and triggers for End Point Verification and official documentation aswell as Gemini seem to say that in order for the Helper App to trigger a prompt for an end user to install it, you first need a rule in place that requires the visibility of signals only the helper app can see. I have been trying AV requirements in  rules etc but nothing seems to trigger the Helper installation. For context, this is required for BYOD extensions and so deploying the app is not possible. 

Hello,We are looking to implement the functionality to provision eSIM profiles on devices with Android 15+. However, we encountered a telecom provider that requires the EID of the devices before providing us with the eSIM activation code.In this initial stage, we are simply trying to obtain the EIDs of all devices so that we can send them to the telecom provider and receive the eSIM activation code in return. To obtain the EID, we are using the following approach: `euiccManager.createForCardId(slot).eid` However, we are encountering this issue as noted here:*Must have carrier privileges on subscription to read EID for cardId=0 [java.lang.SecurityException: Must have carrier privileges on subscription to read EID for cardId=0]* The same issue occurs with `euiccManager.eid`.According to the documentation mentioned above, Android 15 introduced the possibility of managing eSIM profiles without requiring carrier privileges. However, it seems that the same should also app

Apparently, Google has a new policy that only approved DPCs can be installed through QR Provisioning; otherwise, their installation will be blocked.Link: https://developers.google.com/android/play-protect/warning-dev-guidance#android_enterprise_dpc_enrollment The problem is that I am not able to understand how to apply for DPC approval. I found this page, but still not able to find out where to apply. Your help is appreciated. Thanks 

Hello,I’m trying to deploy certificates on Chromebooks for wifi connexion.  I’m lost in Google documentations, it’s a big labyrinth.  They seem to have change the manner to do and doc is not up to date.  I already built a environment PKI with Intune NDES/SCEP server and all is working great.  But for Google it’s another thing.  So if anyone have up to date (2026) docs, it would be appreciated.Here are some questions that might help me:Is Google Cloud Certificate Connector act as an application proxy?  Or we have to put our NDES/GCCC server in DMZ?Is Pub/Sub on Google Cloud Project is mandatory?​​​​​​​How to confiugre SCEP for chromebook, options for SCEP Secure are not available anymore.Is all the config for certificates like device id etc is in the config connector file? Thank you   

As a rsult of the upcoming changes to POP3 compatibility, I’ve been trying to adjust my business email setup. Currently, I have a custom domain from NameCheap which gives me 3 email addresses on one domain for a small amount each year ($40 ish). I then link these domains up to GMail, and mostly manage them and respond to messages through GMail as it’s a much better interface than the native NameCheap Private Email platform. As far as I can tell, the most straightforward way to fully integrate into GMail is to just link the domain and create 3 email addresses, which will cost me around £20/month EACH (so a big markup for me), but I’m somehow justifying that it would be worth it for it all to go through Google and not have to worry about changing systems again if the compatibility changes again for whatever other solution I might find. I’ve got until 12th July before my NameCheap domain renews for another year, so I’ve been trying to make this switch on GMail. I’ve taken family members o

Howdy all,I’m building an internal MDM tool for our small fleet of 22 Samsung tablets.I think I’ve done everything I need to but I can’t enroll a tablet as I don’t have any quota. The API should be enabled on my cloud project and when I look at the quota page, I only see requests-per0minute quotas. What’s the best course of action to increase the quota for a small deployment? I don’t have a DUNS number so the EMM partner form isn’t applicable. Any help is greatly appreciated!Kind regards, - Luke

Environment:- We have a public-facing SCEP server (RFC 8894 compliant)- SCEP server is accessible via HTTPS from the internet- We successfully use this SCEP server for Intune and JAMF device enrollment- We're trying to extend it to ChromeOS devicesOur Approach:Instead of deploying GCCC (Google Cloud Certificate Connector), we want to:1. Configure SCEP CA Connection in Google Admin Console → directly point to our SCEP endpoint2. Create SCEP Profile Configuration in Google Admin Console3. Have ChromeOS devices call our SCEP server directly (similar to how Intune/JAMF devices do)Our Question:Is it possible for ChromeOS devices to enroll certificates via SCEP directly to an external SCEP server WITHOUT using GCCC? Specifically:- Will ChromeOS devices make direct HTTPS calls to a custom SCEP endpoint?- Are there any security policies or platform limitations that prevent this?- If supported, what's the recommended configuration in Google Admin Console?Context:- Our SCEP server is public-faci

Does Cameyo support applications that are in the Microsoft MSIX format?

I am currently using a Microsoft Intune account to connect with the Managed Google Play Admin Console.Due to a company split, I need to change the domain of my Microsoft account (for example, from linon@abc.com to linon@xyz.com) while keeping the same user account.Since the associated Google account will remain unchanged (linon@abc.com), will I still be able to use the updated Microsoft account (linon@xyz.com) to log in to the Managed Google Play Admin Console? 

Hello everyone,We are currently facing an issue where Google Play Protect is blocking our Android application during device provisioning.Context: - It is not distributed via Google Play (but is already published); it is hosted externally and installed during provisioning via QR code.- The app is properly signed, and provisioning works at the system level, but Play Protect blocks the app with the message “App blocked to protect your device.”- This started happening recently on new devices / factory reset devices. We have already submitted the official Play Protect appeal form as recommended in the documentation:The form was completed with all required information (APK, package name, signing certificate, use case, etc.).At this point, we are looking for guidance from the community: - How long does it usually take for the Play Protect appeal form to receive a response or decision?- Is there any additional step or channel recommended for Android Enterprise DPC apps in this s

This blog post says it's now generally available but I'm not seeing it live in my tenant yet: What’s new in Microsoft Intune – MayFor those that don't know, Microsoft has been using Company Portal as their custom DPC but is now transitioning to Google’s Device Policy app to get in line with Google’s mandates. This means (among other things), enrollment will happen at http://aka.ms/enrollymyandroid instead of through the Company Portal app.If they've rolled it out to your tenant, it will look like the first image in this other blog post when you go to Devices > Android > Enrollment > Personally-owned work profile.I am curious if this is live for anyone else. Methinks Microsoft has a weird interpretation of "generally available".

I’ve been coding and developing my portfolio website and decided to add gifs that loop to a couple of my webpages. When I tested my website using Google Chrome, I got a broken gifs image. But when I tested on other browsers like Safari and DuckDuckGo, the gifs seem to work just fine. I’ve checked the code for errors over and over and have not been able to find any. So I decided to push my website live in hopes that the issue would get resolved. But the issue still persists. I’ve researched and have tried resetting and updating my Google Chrome browser extension and even updated my computer for the latest iOS updates. But none of that has worked, and I’ve come to realize that the gifs don’t work on any of the Google chrome browsers that I’ve used. I’ve used the Google Chrome browser on friends and family desktop computers to see if the gifs work with no success. So I know it’s not my personal Google Chrome browser settings or computer. Can someone please help!?

About two weeks ago, I replaced my work phone, a Samsung A54, with a Samsung A57. On my previous phone, I had a pair of Garmin Vivomove Trend watches connected, and I was receiving notifications from both my personal profile (such as SMS, WhatsApp, Messenger, etc.) and my work profile (such as Outlook, MS Teams, and similar applications).After switching to the Samsung A57, notifications from the work profile stopped appearing on my watch. I have thoroughly checked all Garmin Connect settings, phone settings, and also reviewed the configuration together with our company's administrators to verify whether the issue could be related to the Company Portal settings or any associated policies.The conclusion is that the new Android version appears to block this functionality, and it simply no longer works. I have also found discussions about this issue on various forums.I would like to know whether there are any plans to re-enable or restore this functionality in the future, as receiving work