Solved

Friends!Lately Im getting lots of cases regarding apps not starting on our dedicated devices managed in Intune. Edge is the most common problem.If I start Google Play on an effected device I see that the app is disabled. Pressing the Enable button does nothing at all. The version of Edge installed is quite old, which is also strange since it should update automatically.Only way to fix it is to reinstall the app.Any ideas what the root cause can be and how to mitigate it?

Hello,Our users' Samsung smartphones are enrolled in Intune in COPE mode. We have a configuration profile that requires a device unlock code with an expiration time. We haven't configured a code for the work profile, so the One Lock setting is enabled by default.In Android 15, following the expiration of the unlock code, the user is now required to change the unlock code. However, once they do so, when they launch an app in the work profile, the smartphone also asks them to change the work profile code.I don't understand why the smartphone is asking to change the work profile code when the One Lock setting is enabled. Is anyone else having the same problem? Benjamin

Hello community, I am trying to install a client certificate on fully managed Android devices. The devices have been enrolled via Android Management API. The docs show that there is a OncCertificateProvider policy, but it says it is "not generally available". What does that mean? Will it be available in the future? Where can I apply for using this policy? The specific thing I want to achieve is configuring Cisco AnyConnect/SecureClient with cert authentication. The managed config of the Cisco app allows me to set a "KeyChain Certificate Alias", but I first need to get the cert into the Android KeyChain somehow. I also tried to send the client cert via openNetworkConfiguration, but it does not appear in the key chain (in the settings app) of the device, although the policy is applied without any problems (as reported by Android Management API). I guess those certs here are only used for network config and not stored in the key chain for usage with e.g. VPN apps. Than

Hello Android Enterprise Community,I’m trying to set up my MDM, but I keep encountering the following error:"Someone at testmdm.xyz has already signed up."I have previously attempted to remove the Android Enterprise enrollment from my domain, unlinked the MDM, and followed all standard steps. However, I am unable to re-register the MDM, and my attempts to enroll devices fail.I would greatly appreciate guidance on:How to fully clear any previous Android Enterprise enrollment associated with my domainSteps to re-register an MDM successfullyAny best practices or troubleshooting tips to avoid this issue in the futureThank you in advance for your help. Any advice from experienced admins or Google support is highly welcome.@jasonbaytonBest regards,Khaled

We are developing a solution using Android Management. While enrolling a fully managed device, provisioning now fails with:- "Can't set up device"- "Since your organization reached its usage limits, this device can't be set up." This did not occur until yesterday. We are trying to determine whether this quota limit is enforced by the Android Management API (EMM side) or by Google Workspace when connecting to a third‑party EMM. If the limit is on the EMM side, is the quota granted per project? We have two Google Cloud projects using the Android Management API; the issue is only affecting the newer project. Questions:1) Where can we monitor quota usage for Android Management?2) If we have reached a quota, is there a way to remove previously enrolled test devices, and would that resolve the issue?3) Where can we find detailed information about quotas and currently enrolled devices?

Have a bit of an emergency where after the latest Gboard update, when users tap an input field, instead of Gboard just showing up as normal, a menu bubble is appearing instead where they have to tap it and select the "show on screen keyboard" option.  I haven't been able to locate Google's release notes for Gboard to see if there was something that changed.  Any ideas would be greatly appreciated!

Hey there, this is my first post here as I could not find a ticket system for Zero Touch.  Since a couple of weeks all new devices only getting the "Enterprise Default Profile" automatically assigned which I deleted during zero touch tenant setup in "Configurations".The default profile I created does not get automatically applied anymore. Unfortunately I can change the default assignment profile to whatever I want but newly added devices still are getting the "Enterprise Default Profile". Changing the device profile after the initial upload (including wrong DPC info) to the created target profile works in bulk. Once changed manually the devices apply the correct DPC. Multiple zero touch instances are affected. How to fix the default assignment profile for newly added devices? Any suggestions?

Hello,we built our Managed Google Play connector in Intune like three years ago with our company name as organization name.Meanwhile our company name as slightly changed and since the company name is shown on all corporate-owned android devices lock screen, we have a high interest in changing that to the correct name.Unfortunately I can not find any way to change that company name. I can only delete that organization. I do not find a way to contact Google directly for that issue, so that is why I ended up here. So here are the questions:What exactly happens to our devices, if we disconnect and delete the organization and reconnect to a new organization with correct name? All devices will reset? All apps will be gone?Are there other ways to configure what is shown on the lockscreen? Maybe it is possible to disable the display of the company name on the lockscreen completely?Or is there a way to contact Google to change that name for us? Any help appreciated. 😎&nbs

I'm developing a BYOD workplace profile, and one of the required features in the functional specification is as follows:"2.7.2. Debugging features must be blocked. This subfeature is supported by default."I'm trying to implement this feature, and in the REST Resource: enterprises.policies - AdvancedSecurityOverrides - DeveloperSettings, I'm configuring either DEVELOPER_SETTINGS_DISABLED or DEVELOPER_SETTINGS_ALLOWED. However, it seems that either option doesn't restrict the developer options on the device. I'm curious about the role of these options, whether they are functioning correctly, or if this feature is not implementable in a BYOD context.Sorry if I wrote this through a translator so the context may be incorrect.

This has worked in the past... years ago. Our domain is having an issue regarding Locked Mode in Google Forms (Quiz).  The form acts as it is supposed to, popup when the student tries to open the quiz more than once using a Chromebook, however... Emails are never sent to teacher.  I have checked the Google Email log.  The emails are not being marked as SPAM or not making it to the INBOX.  It is like the emails are never being generated. I have had multiple tickets open with Google and no resolution.Any help is appreciated. 

Our Provider (Vodafone Germany) is using a SMS shortcode number to be able to order an upgrade on dataplans by sms. Once the monthly contract plan (e.g. 1 GB) have been used users will receive a sms from 70997 to inform that you can answer the SMS with "1" or "2" to restore your data connectivity. We ran into the issue that the Google Messages app seems to have some sort of bug with sending SMS to this kind of shortcode number as it alway says "Not sent" in red error text. Provider tech support told me that the Google messages app is prefixing the number with "49" resulting in a wrong / unknown number (4970997). They cannot fix that from their side as the issue is within Google messages app and asked me to install a 3rd party messages app.... *ugly* Is this something I can request to investigate from here? I will also create a case with Samsung tech support as we are mainly using Samsung devices as our corp. device fleet.  Thank you! Kind RegardsDaniel

Hello, A client would like to define Adobe Reader as default pdf viewer on WPCOD devices or DO devices. I didn't find any informations about it in android enterprise documentation or Ivanti NMDM documentation. Is it even doable ?Has anyone ever had a similar request? Thank you,  

Hi everyone, I noticed that it is now possible to delete an application that has been unpublished for a long time, for example.When you click on delete application, you are asked for the transaction ID of the developer account and the package name.I have my transaction ID (which can be found on payments.google.com), but it is not in the same format as the examples givenand is not recognised. Have you ever tried to delete an application? Have you also encountered a problem with this ID? Best regards,NB : The ID I have is in the format xxx.registration-xxx-xxx-xxx-xxx-xxx 

Does anyone know if it's possible to allow an android tablet to connect to captive portals whilst in Kiosk mode.I am currently trying to configure Intunes to allow this and cannot find a way to allow the tablet user to connect to a Captive portal as this is being restricted. Upon the device being configured and connecting to Wi-Fi it does not display the Wi-Fi landing page to allow access.Has anyone come across this issue whilst using Intunes\Kiosk mode specifically with Android devices? Thanks

We noticed a strange behaviour, If G-board has additional languages added apart from English like Polish or German, post enrolling into a work profile, the additional languages disappear from the keyboard. I was able to reproduce with Intune, WorkspaceOne and even TestDPC app. This is true even if no Device Restrictions are applied. It seems like a bug. Has anyone else seen this issue?  

The Device art generator is a great tool for people who don’t want to install Android Studio just to take some framed screenshots for documentation use. There are third-party apps that can do this too (Snapmod), but I was wondering if the developers at Google could give the Device art generator some well-deserved love and update it to include Pixel 10 frames? Thanks. (Google) Device art generator: https://developer.android.com/distribute/marketing-tools/device-art-generator 3rd party option: https://play.google.com/store/apps/details?id=cn.gavinliu.snapmod

Hello people, I'm trying to add new admins in our GZT environment, but looks like something is not working...Nothing really I can fail doing that, I'm an owner and the only fields I've to fill are email address and role, and I get the same error for both owners and admins.Are you maybe aware of anything broke on the back?thanks in advance

Hello, After my ChromeOS device updated on September 25, 2025 (though not certain this is the direct cause), custom protocol handlers (web+collab:// and collab://) for my Isolated Web App (IWA) stopped working. Triggering these links in Chrome no longer launches the app—they simply do nothing. This was functional until two days ago.   App Type: Isolated Web App (IWA) Manifest excerpt: { "name": "someapp", "id": "/", "short_name": "some-app", "version": "0.1.0", "update_manifest_url": "https://github.com/--some-repo--/iwa-release/releases/latest/download/update.json", "icons": [ { "src": "/192x192.png", "sizes": "192x192", "type": "image/png", "purpose": "any maskable" }, { "src": "/144x144.png", "sizes": "144x144", "type": "image/png", "purpose": "any maskable" } ], "start_url": "/", "scope": "/", "display": "standalone", "display_override": ["borderless"], "background_color": "#ffffff", "theme_color": "#3B82F6", "isolated_storage": true, "per

Hi everyone we have some reports about OAuth2 Login issues on Android devices with Microsoft Conditional Access rules. Some device (very small amount) are not able to login to some specific apps where the OAuth Login is being made with an embedded Browser session. During investigation we found out, that all users are on Android System WebView version 139.0.7258.160.Users without issues are running 139.0.7258.158. We don't know whether this is the issue but I wanted you asked whether other admins here are having similar issues in the last couple of weeks. Are there any known issues about certificate based logins with Android System WebView currently? Thank you! Kind RegardsDaniel

Hello,  We are a reseller and recently we've been trying to add devices onto clients AZT. We've ran into an issue trying to add devices onto a new client. We tried to add the client to our portal, but the customer number we get doesn't match theirs. We've had this happen before with a previous client, but we resolved it by having them add us on their portal. Worked just fine. I got on a call and guided the customer to add us. Found us easily and was able to add us. I found them on our portal and I uploaded the CSV file. 2 of the 12 devices added. The other 10 did not. I then tried to add them individually. No issue. It seems to not be able to add them in bulk. I'm not sure how to resolve this issue. Does anyone know how to fix this problem? We plan to add more devices in the future and doing it one by one is going to take a long time. 

Hello, We currently manage a growing fleet of ChromeOS devices (Chromebooks and Chromeboxes) through our Google Workspace domain. All devices are enrolled, updated to the latest ChromeOS version, and centrally configured via the Admin Console. Our VPN of choice is WireGuard, which ChromeOS now supports natively. We followed Google’s official documentation to configure WireGuard per user: Configure VPNs on ChromeOS (Google Support) The challenge we are running into is scalability: configuring WireGuard individually on a per-user basis is becoming increasingly tedious as our organization grows. Ideally, we would like to achieve one of the following: - System-wide tunnel setup - Assign a WireGuard key per device, rather than per user. This would allow the VPN configuration to apply regardless of who logs into the machine.- Admin Console integration - Ability to push or preconfigure WireGuard VPN settings (similar to how Wi-Fi networks or other VPN types can b

Hi experts,  I'm pretty new to managing Android devices using MDM solution and I went to the issue that need advises.I have a Samsung Android for testing & evaluating the MDM solutions. I was testing on Intune & Google MDM. Here are step by step I have done to lead to this issue.  I enrolled it to Intune by using the QR code successfully and finished the first test, then I wiped it fully I added it to corporate-owned device under Google MDM by using csv with serial numberEnrolled it to Google MDM and finished the test with MDM. Then, I removed this device from corporate device, deleted it from devices tab from Google MDM and fully wiped (factory reset) this deviceI scanned the QR code again (the same one I scanned in step 1) but failedAfter few screens, like connect wifi, this device belongs to org, etc... it ended up with 'Something went wrong, please contact to your IT administartor. I tried to scan it multiple times without luck; other devi

I had installed the chrome os FLEX  at my older computer (samsung NP300v4a from 2012) and it is working well unless the bluetooth.It is showing it at time menu. It is off. I press to turn on, keep some seconds and goes to off again.I saw some informations:I think that my problem can be at the older bluetooth adapter (computer is from 2012 and BT is probably BT 3.0).I bought a BT dongle but it is not working too.(baseus bt5.3 that i saw it works with linux at youtube.How can i solve it? I think that can be a solution to disable the internal bluetooth adapter and use the dongle bt adapater but i don't know if it is possible. 

I had upgraded my account to Google workspace Business Plus and wish to use the Android Enterprise function within Google platform. I had followed the steps and set to Advance mode in the mobile management "Custom" setting but the Android Enterprise did not appear for selection. Do i need a third party EEM or can i activate the Android Enterprise with Google Admin console without a third party one.

We are enterprise solution EMM partner. We want to validate the following feature 3.24. Managed Google Play Account upgradeAnyone please describe how to do this actually. Not understand way of integration in our solution.Thanks in advance.