Solved

We are unable to create accounts in the terotouch portal. We get the massage:'" Error an unexpected error has occurred. Try again leter." 'This massage is for all of the users that try this. what is the next step to prevent this ?  Kind regards Petri 

@jasonbayton  we are currently assigning devices in zero touch console by serial. They have a particular configuration tied to them using DPC extras so that when the device is turned on and connected to a network, it begins the work managed enrollment process which has worked for 8 months and still does  I just received a zebra tc22 and trying to enroll the device using the same mechanisms but isnt working. The device goes to the home screen instead of the work managed screens to tie it to the workspace one console  trying to see if this is related to a delta in dpc extras for A13 but striking out.

A bit of background to use 1st, we have only ever used the Device Administrator to manage our company owned phones and use an Intune licence.I want to start using Android Enterprise but I've not as yet had any training so this is all new to me.Ideally, we want to use Fully Controlled Devices for our Company owned devices and Work Profiles for those users using their own device. Which I am sure is quite common practice.So I have had a play and not yet got anywhere with Fully Controlled Devices but have got Work Profiles setup and working to an extent. However, one stumbling block is that the Google apps, Docs, sheets, Drive etc. show no data from the user’s account. Apps like MS Outlook work just fine.Could someone be kind enough to point me in the right direction on this?Also, what training sources would people recommend? We are a State Education environment, so have a very limited budget as per usual. Thank you

We are using fido2 keys for login for our shared windows computers and want to do the same for our shared Android devices but its just sad to see the missing support from Google, is there a philosophical reason it is not supported or it is just not developed? Native app and browser support of FIDO2 passwordless authentication - Microsoft Entra ID | Microsoft Learn More context:MDM: IntuneEntra ID Shared device Mode

We have 5000 devices getting the message that the google account has been removed from them, and play store apps are no longer installing / available.I try and sign in and check our token (workspace one says its all good) but our account is no longer administrative and cant login? Workspace one says everything is fine. How do we get into admin.google.com with our EMM account? Right its looking like we need to just rebuild the whole environment and re-do thousands of devices.  

Currently, I am trying to implement lost mode notifications with push pubsub and I need to subscribe enterprise to receive usage logs. When I try to use the following json to patch my enterprise (a chunk related to usage logs):"enabledNotificationTypes": ["ENROLLMENT","STATUS_REPORT","USAGE_LOGS","COMMAND"]I receive only "ENROLLMENT", "STATUS_REPORT" and "COMMAND" in response json. And as expected no location event logs are being pushed from the pubsub. Do I need extra configuration to use USAGE_LOGS or something?Response example json: {        "name": "enterprises/enterpriseName",        "enabledNotificationTypes": [                  "ENROLLMENT",                  "STATUS_REPORT",                  "COMMAND"        ],       "pubsubTopic": "projects/projectId/topics

A bit of background on this, we're currently moving to use COPE Enrolment for all of our devices after using BYOD Enrolment for devices purchased by our org. Utilising BYOD we had issues with users signing into their gmail accounts and leaving the business and we were locked out of the device by Factory Reset Protection (We've used Knox Mobile Enrolment to solve this). This all made sense as it was a BYOD device and for consumers etc it makes a lot of sense. The problem we've encountered is even with COPE enroled devices, if a user doesn't remove their gmail account from the personal profile before resetting the device when the device is used again you're unable to use a Captive Portal network for setup again and this error message is received - "Unable to sign in to Wi-Fi AP. An unauthorised factory reset has been performed on this device. the sign-in screen cannot be accessed."  Even after enrolling the device using a WPA2/3 Network and signing in with the google

We are struggling with some user reports about blocked USB file transfer functionality on their Samsung A52 / A54 devices enrolled with corporate-owned work profile.   Microsoft released a blog post about this issue here. Known Issue: Some management settings become permanent on Android 14 - Microsoft Community Hub   We stumbled across the one-time hint about "do not upgrade non-Samsung devices to Android 14" in the advisory. Did not find any other information whether Samsung is also affected or not, but as we only have Samsung as corporate devices this seems also to apply to Samsung devices. After factory resetting the device and a fresh enrollment the USB file transfer is working as expected / configured!     *15th March: please note: this post has been moved and been made into a new topic and new title

I am following up on an article I read by @jasonbayton  that was about using adb to force install apps that would otherwise be incompatible. In the article you mentioned that there were no other ways to bypass SDK restrictions, but would it not be possible to change values in the app manifest to accomplish the same thing? Thanks for your time and information! https://bayton.org/android/android-14-minimum-sdk/#is-it-possible-to-test-the-changes 

Before I delve into the adb logs, anyone seeing issues enrolling Samsung devices running Android 14? Since a few weeks now, I and a few other users get the error: “Can’t add work profile”. The only way around it is to reset to factory…I did that yesterday and was able to immediately enroll after and today I unenrolled and re-enrolled and got the same error…

Hello,I need clarification. My organization holds a Google Workspace for Nonprofits license which grants us an Android Enterprise Basic license. Everything has suited our needs thus far.Recently, I've encountered an issue. We're attempting to configure two or more work profiles on an Android tablet using the local account feature present in System-Multiaccount. However, when we configure the first work account, this feature disappears.Is there any configuration within the admin console that could be causing this behavior?Could it possibly be linked to the type of license we have?

Hello, I have different feedbacks where the virtual keyboard is not appearing at the Intune login page during a ZT enrollment, has anyone experienced the same issue and knows how to fix it please? Environment:- Android tablets running Android 13- COPE mode- Google Gboard installed and setup as default input method- Zero Touch enrollment- After the enrollment start and goes to the Login to Microsoft account step, the virtual keyboard is not appearing when touching the fields Some leads: - Gboard is not allowed by default and got disabled during the enrollment?- Non system or protected apps (flags to add in the software?) got removed when starting the enrollment? Thanks!

Hi  I want to know when I activate AE, can Google reply the account used for activating AE to the EMM or MDM, so that in the future, if I want to cancel or deactivate the AE , I can know exactly which Google account I used. Because I have met several times that the client forgets which account was used, so they can't deactivate the account Thanks

As a New Zealand based reseller, can I enroll the devices to Australia tenant? 

Hi guys, can anyone tell me what happens to a fully set up Android device when this device is added afterwards to Zero Touch and gets its config? Does nothing happen until the next hard reset or is it possible that it does an reset by 'itself'? Thank you.

We have multiple Playstore developer accounts in our company, most of them are only running managed google play and permanently private apps.All the teams have to go through the new Account verification according to the new Play Store policy.We probably need to involve legal department or similar for official documents and ID for each of these accounts.Is there a way we could do this in one go for all of our accounts?

Dear Android Enterprise Community,I am using my own service account for creating new enterprises for organisation instead of going multiple process so, is it good or i have to change my approach.

Dear Android Enterprise Community,Do we have to create new project always for each new organisation ?I want to know correct way for enrolling new organisation for Android Management API Services.   

I've been trying to enroll my Honor pad x9 using qr code method . But I keep getting stuck after "Getting ready for work setup"I'm new to this and don't have much idea on the topic.   

Hi ,I am working on a MDM application which is a Device admin app, Now I am trying to move it to Device Owner. I used Android Management API and generated Enrolment Token. I have uploaded my APK in  S3 bucket and given that downloadable link In QR code Json.  After factory reset, I am clicking 6 times on the screen and scanning the QR code, after connecting to WIFI, it says "Device belongs to your organization" . When I click on Next button, I an getting a popup saying that "CAN"T SETUP DEVICE, CONTACT YOUR IT ADMIN FOR HELP". How to fix this. what all things I need to handle in my android code. How will my app get downloading when scanned the QR code. Here is my Json for QR code.  {"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.android.client/com.android.utils.AdminReceiver","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_CHECKSUM": "checksum generated from dowloaded APK","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATIO

Hi Team, I am trying to make my application as device owner app, I am trying to use QR code for provisioning. I am unable to acheive the result. When I scan the QR code  which I have generated (Generated QR code without enrollment token) in a factory reset device I am getting an error stating " Couldn't set up your device, for help contact your IT admin. Could you please help me where I am going wrong.when I tried getting Enrollment Token using AMAPI I am getting the following errorcom.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad RequestPOST https://androidmanagement.googleapis.com/v1/enterprises/%7B573991258109%7D/enrollmentTokens{"code" : 400,"errors" : [ {"domain" : "global","message" : "Invalid enterprise id. Provide a valid id.","reason" : "badRequest"} ],"message" : "Invalid enterprise id. Provide a valid id.","status" : "INVALID_ARGUMENT"}

We received the confirmation that our Google Account was registered with Zero Touch and that we should login to Portal für die kontaktlose Registrierung to accept the TOS.Unfortunately we get a message that we are not authorized to access the Partner Dash. Is there an account mismatch?

Background: We use Zero Touch Enrollment for android and Intune for our android devices but run into issues with the Wi-Fi MAC Address being set to randomized by default. We preset the Device MAC Address on our on-prem android devices in our system for validation along with a certificate. These devices must have the Device MAC Address first and validate the certificate later. Issue: A device comes in and we have to enter the Wi-Fi setting before the device connect to Zero Touch Portal and Intune. Does seem like that big of issue but when you have a large number of devices and have to manually enter Wi-Fi settings or scan barcodes then this can waste a large amount of time - days.   Best solution would be the ability to provision the device in Zero Touch Enrollment because only thing that would need to be done with on-prem device is power it on. Problem is missing MAC Address provisioning. "android.app.extra.PROVISIONING_WIFI_PASSWORD": "xxxxxxxxxxxxx","android.

Hi,We have a requirement to force few users to reset passcode. I have tried with https://developers.google.com/android/management/reference/rest/v1/enterprises.devices/issueCommand#CommandType and it works fine when we mention the new passcode. I am wondering if there is a way to force users to change passcode without us having to give and store temp passcodes for each user.I am aware that we can do this with password restrictions as part of policy https://developers.google.com/android/management/reference/rest/v1/PasswordRequirements, but is it possible with a one time issue command. Thank you

Hi, Greetings, We want to extract the MDM policy installed in our BYOD Work Profile device (without ADB way). We are using INTUNE as our MDM. any way we can view and export the installed security policy logs from my device ?.  Regards,Govi