fully managed

84 Topics

Is there any way to disable Google Play Protect (GPP) from an EMM or to otherwise whitelist apps from scanning?
I am very concerned about the Enhanced GPP features coming soon that are currently being piloted in other regions. https://security.googleblog.com/2023/10/enhanced-google-play-protect-real-time.html This is not a welcome feature whatsoever for the fully managed space where we have business apps written internally that are being installed on business devices, owned by that business. In no way do we want Google sitting in between deciding whether a very legitimate app written internally for an organization should be installed on devices that are purchased and owned by the same organization on fully managed devices. I would like a way to disable GPP completely, or at a minimum whitelist applications from scanning as we don't want Google interfering in the business operations. GPP is a helpful consumer protection features but fully managed devices should have the ability to be opted in or out of the program. Otherwise GPP can incorrectly flag a mission critical app and disable or remove it from a device, thereby bringing down a line-of-business application and an end customers operations. While the intentions of GPP are good, by blocking business apps Google themselves is becoming the malicious actor that GPP is ironically trying. to prevent.
Solved
mattdermody
3 years ago Place General discussions
43KViews
17likes
58Comments
How to deploy your custom .apk files to android fully managed devices from Intune
i got stuck with one situation and need your guidance in solving it. We have our own .apk file for android devices, these are custom in-house developed applications, i want to deploy the application to Android Fully Managed devices (Since the device belongs to company). I did it before with publishing them to google play store as a private app but now the size is the problem as it exceed 200MB, so i cannot use this option. I tried with deploying them as Line of Business application but its been 2 days nothing shows on device and even in intune portal it neither failed or success. Question: How to deploy your custom .apk files to android fully managed devices if the file size se more than 200MB?
Shabbir
2 years ago Place General discussions
12KViews
1like
10Comments
Google apps dont have access to users account & training options
A bit of background to use 1st, we have only ever used the Device Administrator to manage our company owned phones and use an Intune licence. I want to start using Android Enterprise but I've not as yet had any training so this is all new to me. Ideally, we want to use Fully Controlled Devices for our Company owned devices and Work Profiles for those users using their own device. Which I am sure is quite common practice. So I have had a play and not yet got anywhere with Fully Controlled Devices but have got Work Profiles setup and working to an extent. However, one stumbling block is that the Google apps, Docs, sheets, Drive etc. show no data from the user’s account. Apps like MS Outlook work just fine. Could someone be kind enough to point me in the right direction on this? Also, what training sources would people recommend? We are a State Education environment, so have a very limited budget as per usual. Thank you
Solved
HKP
2 years ago Place General discussions
6KViews
1like
13Comments
Smart watch notifications for work profile are being blocked by Android Management Policy
Hi, Few of our work profile customers are facing issue accessing work profile notifications on their smart watches. This used to work before and it stopped working few weeks back. We have not done any changes to the Android Management API policies and are not sure what is causing this. Is there a specific policy setting applicable for this that we need to enable? Attached few screen shots. Thank you.
Solved
Prathik
2 years ago Place General discussions
4.8KViews
0likes
14Comments
Granting special permissions for fully managed devices?
Hey, Is it possible to grant special permissions like `SYSTEM_ALERT_WINDOW` to a device if it is fully managed using Android management API? We tried adding it to the permissionGrants but it is not enforced for some reason. Thanks!
Solved
krishnaylk
2 years ago Place General discussions
3KViews
0likes
5Comments
Stop factor data reset after deleting device from android managment device delete api
I have enrolled a fully managed device using the Android Management API. However, when I delete the device from my enterprise using the enterprise.device.delete API, it factory resets the data. I want to preserve the user's data instead of performing a factory reset. I also tried creating a personal use device, but then it didn't allow me to launch an app in KIOSK mode. I want both features: running an app in KIOSK mode and preserving the data when I delete the device. I'm not sure how to achieve this.
PriyanshKasera
2 years ago Place General discussions
1.9KViews
0likes
5Comments
Play Protect Blocking Custom DPC Apps — How to Get Approval or Alternatives?
Hi everyone, I'm a developer who helps enterprises build custom DPC (Device Policy Controller) Reference Documentation apps to manage Android devices based on their unique requirements. Recently, Play Protect has started blocking the installation of custom DPC apps, even when these apps are signed and used internally. The warning claims the app may pose a risk due to access to sensitive data - even though it's strictly for enterprise use. To make things more difficult: Google is no longer accepting registration of custom DPC apps with Android Enterprise, which limits official distribution and management options. Android Management APIs don’t support all use cases, and also have quote limit. I’ve applied twice to join the Android Enterprise portal to build a SaaS-based device management platform, but both requests were rejected without a clear reason. My questions for the community: Is there any official way to get a custom DPC app approved or whitelisted by Play Protect? Are there any alternative ways to manage Android devices at scale (outside of AMAPI or legacy EMM)? How can new developers or startups gain access to Android Enterprise features when onboarding is currently restricted? Any help, direction, or shared experience would be greatly appreciated. Thanks, Kulwinder
Solved
Kulwinder
9 months ago Place General discussions
1.9KViews
6likes
18Comments
Data exchange between apps broken in multi-app kiosk mode
I am provisioning a fleet of fully managed devices (running Android 10) via AMAPI, and due to our specific use-case, I'd prefer to set them up in multi-app Kiosk mode. However, while I was evaluating Kiosk mode, I noticed something strange: data exchange between apps seems to be broken. Example #1: User scans a QR code containing a website URL, and taps "open link" in the QR scanner app -> Chrome opens, but does not attempt to open the website, it just shows the last opened pages. Example #2: User searches for an address via google.com in Chrome. Then taps on the map thumbnail in the search results. Google Maps opens, but the Google Places details are not shown, GMaps just displays the last location. I tested (separately, of course) both the built-in Kiosk launcher (via KioskCustomLauncherEnabled=true) and a 3rd party one (via InstallType=KIOSK), and in both cases the outcome was the same. As soon as I disable Kiosk mode in the test policy (while leaving all other parameters intact), data sharing starts working normally. As soon as I reenable Kiosk mode, the shared data no longer reaches its destination. Am I missing something here? Is this some kind of deliberate limitation in Kiosk mode? Is there a solution or workaround? Might be related (?): Share Photos inside Android KIOSK between Google Photos & any other email client
Petofi
2 years ago Place General discussions
1.7KViews
0likes
2Comments
How to Set Device Owner on Company-Owned Android Device Without Factory Reset
Hello community, I’m facing a situation where we need to set Device Owner (DO) mode on several company-owned Android devices that are already in use and have a Google account logged in. Constraints: - The devices are company property. - Factory reset is not an option due to important data stored on the devices. - We want to enforce MDM policies via Device Owner for security and compliance. Questions: Is it possible to set Device Owner mode on an Android device without wiping or resetting, when a Google account is already signed in? Are there any known solutions or MDM platforms/tools that can claim an already-used device into Device Owner mode without data loss? I would really appreciate any guidance, proven methods, or official references. Our goal is to maintain data integrity while ensuring the devices are properly managed. Thanks in advance!
Solved
mhfaruk
8 months ago Place General discussions
1.4KViews
1like
4Comments
Play Protect is blocking our DPC app — appeal already submitted, looking for guidance
Hello everyone, We are currently facing an issue where Google Play Protect is blocking our Android application during device provisioning. Context: - It is not distributed via Google Play (but is already published); it is hosted externally and installed during provisioning via QR code. - The app is properly signed, and provisioning works at the system level, but Play Protect blocks the app with the message “App blocked to protect your device.” - This started happening recently on new devices / factory reset devices. We have already submitted the official Play Protect appeal form as recommended in the documentation: The form was completed with all required information (APK, package name, signing certificate, use case, etc.). At this point, we are looking for guidance from the community: - How long does it usually take for the Play Protect appeal form to receive a response or decision? - Is there any additional step or channel recommended for Android Enterprise DPC apps in this situation? Any insights or shared experiences would be greatly appreciated. Thank you in advance for your time and support. Best regards
Solved
rPoyo
3 months ago Place General discussions
1.1KViews
1like
24Comments