Solved

I’m trying to connect Intune with Android Enterprise by following the instructions here: Connect Intune account to managed Google Play account - Microsoft Intune | Microsoft LearnHowever, when I’m prompted to sign up for the Google Admin Account and I enter my work email address as instructed, I get this error: “Email address is associated with an existing consumer account. Please use a different email.”I don’t understand what I am supposed to do here. I don’t have a “different email”. My work email address is my work email address.Thanks!

Hello,We have a managed Google Play store account linked to our Endpoint Manager. This account is a Microsoft one on our domain but we do not have a log of the password. Are we able to reset it without any negative effects on our enrolled devices?

Hello,I hope you are doing well.We would appreciate your guidance regarding our application to join the Android Partner Portal.Our company is a professional reseller and integrator of enterprise mobility solutions, working with leading manufacturers such as Zebra, Datalogic, and Honeywell. We have extensive experience deploying and supporting Android-based devices for enterprise customers across multiple sectors.We are currently engaged in a significant project with a customer who plans to implement Android Zero-Touch enrollment at scale. In this context, access to the Zero-Touch portal is essential for us to properly provision, deploy, and support these devices in line with Android Enterprise best practices.We have submitted multiple applications to join the Android Partner Portal, but unfortunately, they have been declined with the following message:“We would like to inform you that your application to join the Android Partner Portal has been declined.After reviewing the information

In PROFILE_OWNER, when using RequestDeviceInfoParams to request for eid, the device agrees to display eid. Why can't amapi obtain the eid of the device? It can be confirmed that my device has eid and can display it normally in other modes

Hello community,We have Samsung XCover6 Pro Enterprise Edition sent to customer in May this year. (Android v.12)They have started the phone and then didn't enroll it. They have just started the phone and put it on the shelf and battery has died and now they have started the phone. There are two problems:1. They can skip to connect to the Wi-Fi2. Even if they connect to Wi-Fi the phone doesn't get enrolled, the enrollment phase never comes up, you can just continue to setup the normallyIf we remove the phone from Zero Touch Portal, hard wipe the device by connecting it to a PC and then upload it to ZTP and connect it to Wi-Fi. Then it starts with enrollment. So I wanted to test this myself. I took the exact same model of the phone Samsung XCover6 Pro Enterprise Edition from our shelf and started it and to my surprise I COULD NOT skip network connection. Now the only difference between the phone that I tested and the phone that we sent to the customer is that, we sent the phone

Hello,For several weeks now, we are facing an issue in Samsung Contacts app about searching contacts in our Exchange Global Address List.This feature has worked flawlessly for many years, and now when we search for a contact in Exchange GAL, contact is found but when we try to open it Samsung Contacts app fails to open contact and shows “Contact not found”.Thank you for your help.Regards,

We are experiencing an issue where the ImportSavedPasswords Chrome policy set to FALSE with POLICY_MODE_MANDATORY is not disabling the "Import passwords" option in the Chrome Password Manager UI.Steps to Reproduce:1.In Google Admin Console, navigate to Devices > Chrome > Settings > Users & browsers2.Select the Backend OU under Bigfix_MCM_OU > MCM > DEV3.Set Import Saved Passwords → Disable imports of saved passwords4.Set User override → Do not allow users to override this setting5.Save the policy6.On a Chrome browser signed in with an account belonging to the Backend OU, navigate to chrome://policy and click Reload policies7.Navigate to chrome://password-manager/settings Observed Behavior:1.The "Import passwords" row remains fully visible and functional under chrome://password-manager/settings2.The "Select file" button is clickable and opens a file picker dialog3.Passwords can still be imported via CSV despite the policy being set to FALSE with MANDATORY enforcement 

We have configured the chrome.users.AutomatedPasswordChangeSettings policy to enable automated password change and allow importing the AI model required for this feature. However, the "Change password automatically" button/option is not appearing in the Password Checkup flow. Only the standard "Change password" (manual redirect) button is visible.We have configured the chrome.users.AutomatedPasswordChangeSettings policy to enable automated password change and allow importing the AI model required for this feature. However, the "Change password automatically" button/option is not appearing in the Password Checkup flow. Only the standard "Change password" (manual redirect) button is visible. Observed Behavior:1.The compromised password entry is correctly flagged under "Compromised passwords"2.Only the "Change password" button is shown (manual redirect to the site)3.The "Change password automatically" option is completely absent from the UI4.No automated password change flow is triggered 

   Hello,I’m reaching out because I’m trying to understand why my Google Chrome browsers are taking so long to update.I have deployed the ADMX/ADML templates and configured the required policies, but despite this, the update process works poorly.You will find attached some screenshots that may help ?Thanks  PS : The update engine is always up to date, but the browser itself is not.  

We currently have around 100 Chromebooks that we use for exams. I have now been asked to make it possible for participants to change the keyboard layout. Most use the German keyboard, but a few want to write with an English or French layout. What do I need to set in the management console so that participants can change the layout on their devices?

Hello Team,While testing the wallpaper management functionality using the Chrome Policy API, we observed that the wallpaper does not get applied on managed ChromeOS devices, even though the API calls return a successful response.When we upload the wallpaper image using the uploadPolicyFile endpoint, it successfully returns a valid downloadUri.and wallpaper gets applied on device. However, when we attempt to apply this uploaded image as a wallpaper using the Policy API, the request completes successfully (200 OK), but the wallpaper does not apply on the chromebook device.We’d appreciate your help confirming the following points:Are there any additional parameters, permissions, or policy fields required for either of the following?chrome.users.Wallpaperchrome.devices.managedguest.WallpaperAre there any known propagation delays, caching behaviors, or policy refresh constraints that could affect wallpaper deployment on managed devices?

Hi everyone, I’m experiencing an issue on ChromeOS where, after signing in, the session occasionally resets or shows a blank screen before the desktop fully loads. In some cases, the device appears to authenticate successfully, but the expected environment and apps do not initialize correctly. This behavior is inconsistent and seems unrelated to network stability. Basic troubleshooting steps such as restarting the device, checking for system updates, and signing out/in again have already been attempted without resolving the issue. Has anyone encountered similar ChromeOS login or session-loading problems?Any insights on logs to review or settings that might affect session initialization would be greatly appreciated.

I work at a school where we need to enterprise enroll the devices. We have an issue that correlates to how we initiate the enterprise enrollment.  If we use the shortcut keys "ctrl alt E" to initiate the enrollment, wi-fi connection is lost as soon as the user hits <enter> after the password for the account information. Yet if we choose the enrollment button at the bottom of the screen, there are no issues.  In general, knowing what causes our issue would be good to have in our mental toolbox, but the issue also prevents us from using a script which acts similar to Go-Box or Centipede.

We are trying ChromeOS management via EMM where the existing domain account we have works fine i.e we are able to enrol and device sync is also happeneing on EMM side but when I am trying the same with another customer account though the account is showing as enrolled in the Google console, it's not syncing to EMM. There is no error also on backend. Looks like the api to fetch the device list response is empty. We have partner access setting enabled in the customer account still facing same. Is there any other settings on the console we need to check? Note: Customer account has the purchased the Trial Chrome upgrade.

Hi, we are using MS Intune and Google Zero Touch Portal, and a large number of Zebra scanners.We created several profiles in ZTP with DPC extras (JSON) to link the devices to the corresponding Intune enrollment profiles.However, when the scanners are set up and connected to wifi, they will not identify as company devices, but continue setup in "private" mode.I assume there is a problem in our JSON config, but I could not find it. I already checked some other discussions in this forum, but could not yet find a solution. Apologies, if this problem should already be resolved, then I am happy if you point me in the right direction. :) Thanks very much and best regardsTobias

Hello, I have built a device management system using Android Management API. Devices are enrolled in Device Owner mode. After enrolling Samsung devices (especially newer models like Samsung A07), I noticed that Samsung Smart Switch does not work anymore. On older Samsung devices, Smart Switch works even after enrollment. But on newer Samsung devices, Smart Switch does not work once the device is enrolled as Device Owner. I am not using any third-party MDM solutions only Android Management API. My questions:Is Samsung Smart Switch blocked automatically when a device is enrolled in Device Owner mode?Is this expected behavior on newer Samsung devices?Is there any policy configuration that allows Smart Switch to function while still using Device Owner mode?Is this a Samsung restriction or an Android Enterprise restriction? I would appreciate any clarification on this behavior.Thank you.

Hello,We use WorkspaceONE UEM as our MDM. We sometimes use provisioning profiles to deploy commands to devices run-intents, but I'm not an expert on this subject by any means. I am curious if it is possible to use our MDM to deploy an API command to disable Factory Reset Protection. The command information is here: https://developer.android.com/reference/android/app/admin/FactoryResetProtectionPolicy I realize what a specific question this is. If I can provide more information, please let me know. Thanks in advance!

Regarding the function of configuring the login URL, I have configured the signUrl for the enterprise, and then obtained the signinEnrollmentToken of the enterprise through get, and placed its qrcode into the QR code. When I configure the device, my device redirects to the configured signUrl page, and then after successfully logging in by entering the account and password, I need to call enrollmentTokens.create. However, how can I obtain my enterprise id? Is there any good suggestion

Hello, we have observed a regression in location tracking for third party applications after updating ChromeOS on HP Chromebook G1m 11 inch. Device details are ChromeOS version 144.0.7559.108 with previous working version 131.x on the stable channel. After upgrading from version 131 to 144.0.7559.108, third party applications are no longer able to detect or receive location data while Google Maps continues to report the correct location. This behavior was working as expected prior to the OS update, which indicates a possible regression or policy change introduced in ChromeOS 144 affecting third party application access to location services. Thanks Vishal

Hi everyone,I'm a developer who helps enterprises build custom DPC (Device Policy Controller) Reference Documentation apps to manage Android devices based on their unique requirements.Recently, Play Protect has started blocking the installation of custom DPC apps, even when these apps are signed and used internally. The warning claims the app may pose a risk due to access to sensitive data - even though it's strictly for enterprise use. To make things more difficult:Google is no longer accepting registration of custom DPC apps with Android Enterprise, which limits official distribution and management options.Android Management APIs don’t support all use cases, and also have quote limit.I’ve applied twice to join the Android Enterprise portal to build a SaaS-based device management platform, but both requests were rejected without a clear reason. My questions for the community:Is there any official way to get a custom DPC app approved or whitelisted by Play Protect?Are there a

Our product is for AI security and one of the main challenges we have is how do we make sure the extension will always run even in Incogntio mode.I'm talking about the Chrome browser.There is a flag that seems to be not supported MandatoryExtensionsForIncognitoNavigation while Edge do support this. This is very critical to us and I assume all enterprises that would like to keep Incognito mode but still keep security.If this is no an option can we at least have a formal way to check from command line if an extension is allowed in Incognito mode so we can disable Incognito for these users if our ext isn't allowed?  

  Hey Android Enterprise community,I'm trying to understand what the "Enable third-party Android mobile management" checkbox in Google Admin does. How does this affect situations where multiple Android Enterprises are bound to multiple EMM solutions? Will both Android Enterprise continue working if they are bound to different EMM solutions, even if only one is selected on the screen above?If I use the Enrollment token link method to provision a device and have no users in my Google Workspace, will switching the EMM provider in the dropdown below the checkbox have any effect? Also, does Authenticate Using Google affect provisioning if there are no users in Google Workspace?Thanks,Marko

Hi today we raised a case with Microsoft for a specific work profile issue with their current Outlook and MS Teams implementation. I wanted to share this here, maybe there are some other customers/admins facing this issue. Our org started to move from Cisco to MS Teams PSTN calling some month ago and everything was fine, but I assume an update to either Outlook or Teams app was published and the issue started. Scenario: COPE or BYODMS Teams and MS Outlook in work profileMS Teams has a PSTN line configured (either mobile or landline) Open Outlook, search for any contact and try to start a call to a mobile or desk number. The OS does not ask whether you like to use the phone on personal profile (as it did the last couple of years 😅) - it will hand over the call request to MS teams! You cannot decide to make the phone call with your Phone app :-( This breaks almost all use cases for our users. Even worse: A phone number like +49 123 828282 is transfered to M

Hi All,I'm trying to remove completly the option of AI mode in Google chrome.I was able to use these settings. AIModeSettings=1 GenAiDefaultSettings=2 How ever it doesn't remove the AI mode from the Google.com search bar that is inside the page. Any formal way to remove this option?  

Have purchased the Trial Chrome upgrade on our existing workspace account. Our backend api failing with below error:Request call: POST https://chromedevicemanagement.googleapis.com/v1/enterprises//devices//devicePolicyerror response:{  "code" : 400,  "errors" : [ {    "domain" : "global",    "message" : "Device does not have CDM API enabled. Enable CDM API for the corresponding OU in Google Admin Console.",    "reason" : "failedPrecondition"  } ],  "message" : "Device does not have CDM API enabled. Enable CDM API for the corresponding OU in Google Admin Console.",  "status" : "FAILED_PRECONDITION"}Can you confirm what this error means?As same API works for our paid chrome account, is it an restriction on trial accounts from your end? or we are missing something here?Note: Same client Id and scope is used in Domain-wide delegation setting in admin console.