fully managed
42 TopicsIs there any way to disable Google Play Protect (GPP) from an EMM or to otherwise whitelist apps from scanning?
I am very concerned about the Enhanced GPP features coming soon that are currently being piloted in other regions. https://security.googleblog.com/2023/10/enhanced-google-play-protect-real-time.html This is not a welcome feature whatsoever for the fully managed space where we have business apps written internally that are being installed on business devices, owned by that business. In no way do we want Google sitting in between deciding whether a very legitimate app written internally for an organization should be installed on devices that are purchased and owned by the same organization on fully managed devices. I would like a way to disable GPP completely, or at a minimum whitelist applications from scanning as we don't want Google interfering in the business operations. GPP is a helpful consumer protection features but fully managed devices should have the ability to be opted in or out of the program. Otherwise GPP can incorrectly flag a mission critical app and disable or remove it from a device, thereby bringing down a line-of-business application and an end customers operations. While the intentions of GPP are good, by blocking business apps Google themselves is becoming the malicious actor that GPP is ironically trying. to prevent.Solved40KViews14likes57CommentsHow to deploy your custom .apk files to android fully managed devices from Intune
i got stuck with one situation and need your guidance in solving it. We have our own .apk file for android devices, these are custom in-house developed applications, i want to deploy the application to Android Fully Managed devices (Since the device belongs to company). I did it before with publishing them to google play store as a private app but now the size is the problem as it exceed 200MB, so i cannot use this option. I tried with deploying them as Line of Business application but its been 2 days nothing shows on device and even in intune portal it neither failed or success. Question: How to deploy your custom .apk files to android fully managed devices if the file size se more than 200MB?10KViews1like10CommentsGoogle apps dont have access to users account & training options
A bit of background to use 1st, we have only ever used the Device Administrator to manage our company owned phones and use an Intune licence. I want to start using Android Enterprise but I've not as yet had any training so this is all new to me. Ideally, we want to use Fully Controlled Devices for our Company owned devices and Work Profiles for those users using their own device. Which I am sure is quite common practice. So I have had a play and not yet got anywhere with Fully Controlled Devices but have got Work Profiles setup and working to an extent. However, one stumbling block is that the Google apps, Docs, sheets, Drive etc. show no data from the user’s account. Apps like MS Outlook work just fine. Could someone be kind enough to point me in the right direction on this? Also, what training sources would people recommend? We are a State Education environment, so have a very limited budget as per usual. Thank youSolved5.9KViews1like13CommentsGranting special permissions for fully managed devices?
Hey, Is it possible to grant special permissions like `SYSTEM_ALERT_WINDOW` to a device if it is fully managed using Android management API? We tried adding it to the permissionGrants but it is not enforced for some reason. Thanks!Solved2.8KViews0likes5CommentsStop factor data reset after deleting device from android managment device delete api
I have enrolled a fully managed device using the Android Management API. However, when I delete the device from my enterprise using the enterprise.device.delete API, it factory resets the data. I want to preserve the user's data instead of performing a factory reset. I also tried creating a personal use device, but then it didn't allow me to launch an app in KIOSK mode. I want both features: running an app in KIOSK mode and preserving the data when I delete the device. I'm not sure how to achieve this.1.9KViews0likes5CommentsData exchange between apps broken in multi-app kiosk mode
I am provisioning a fleet of fully managed devices (running Android 10) via AMAPI, and due to our specific use-case, I'd prefer to set them up in multi-app Kiosk mode. However, while I was evaluating Kiosk mode, I noticed something strange: data exchange between apps seems to be broken. Example #1: User scans a QR code containing a website URL, and taps "open link" in the QR scanner app -> Chrome opens, but does not attempt to open the website, it just shows the last opened pages. Example #2: User searches for an address via google.com in Chrome. Then taps on the map thumbnail in the search results. Google Maps opens, but the Google Places details are not shown, GMaps just displays the last location. I tested (separately, of course) both the built-in Kiosk launcher (via KioskCustomLauncherEnabled=true) and a 3rd party one (via InstallType=KIOSK), and in both cases the outcome was the same. As soon as I disable Kiosk mode in the test policy (while leaving all other parameters intact), data sharing starts working normally. As soon as I reenable Kiosk mode, the shared data no longer reaches its destination. Am I missing something here? Is this some kind of deliberate limitation in Kiosk mode? Is there a solution or workaround? Might be related (?): Share Photos inside Android KIOSK between Google Photos & any other email client1.7KViews0likes2CommentsEnabling Location Accuracy via EMM
Hi, Does anyone know whether or not it should be possible to turn location accuracy (within location services) on via EMM on a Fully Managed device? Or is it a decision placed in the hands of the user for privacy reasons? We use WS1 - there is a "high accuracy" setting in the restriction profile but the wording on that seems to correlate with Android 4.4-8.1 when you look at this document - https://support.google.com/nexus/answer/3467281 It feels as though "high accuracy" and "location accuracy" are two seperate things.1KViews1like3CommentsNot all devices in Zero Touch Portal are forcing a fully managed profile.
We have Zero Touch and use Intune. We do not have Intune linked to Zero Touch. We created a configuration in Zero Touch. The devices should enroll as fully managed. Several devices are successfully enrolling as fully managed however, some are being prompted to set up a work profile rather than enroll as fully managed. It doesn't seem to be consistent as to make, model or OS version. All of the devices below are in Zero Touch and should have been enrolled as fully managed. They all point to the same configuration in Zero Touch. Also, some devices prompt for work profile setup but then only go so far before endinto a screen that says the device cannot be setup. Any insight or advice would be appreciated. Thank you, Nancy1KViews0likes4CommentsSet default browser under AMAPI
We are working with fully managed dedicated devices under Android Manage API and would like to be able have multiple browser app installed but set a default browser using policy. The persistentPreferredActivities seems like the best fit for this and we have successfully used it to set preferred activities for other actions. But so far, attempts to setup a preferred activity for an http/https URL have been unsuccessful. My setup looks something like this: "persistentPreferredActivities": [ { "actions": [ "android.intent.action.VIEW" ], "categories": [ "android.intent.category.BROWSABLE", "android.intent.category.DEFAULT" ], "receiverActivity": "com.mybrowser/.BrowserActivity" } ] My "BrowserActivity" is configured to support android.intent.action.VIEW intents. <activity android:name=".BrowserActivity" android:label="@string/title_activity_browser" android:exported="true"> <intent-filter> <action android:name="android.intent.action.VIEW" /> <category android:name="android.intent.category.DEFAULT" /> <category android:name="android.intent.category.BROWSABLE" /> <data android:scheme="http" /> <data android:scheme="https" /> </intent-filter> </activity> And I can manually set my app as the default browser in Settings. But if I try to start an activity with an implicit intent to open an http/https URL, it always opens in Chrome. Is this the correct approach to set the default browser under AMAPI or its there another way to do that?757Views0likes0CommentsRequest for Android Community: Advice and Help on Playing Pre-Recorded Voice on Calls
To the Esteemed Android Developer Community, I am seeking your expert advice to understand whether my task is feasible on the Android platform. I aim to implement the following functionality: Task Description: Objective: I want to create an Android app that plays a pre-recorded voice message during a phone call. The app will: Automatically answer an incoming call when it is ON. Play a pre-recorded audio file stored on the user's phone (recorded by the user). Audio Content: “I am busy right now, call back after some time.” Disconnect the call after playing the message. Usage Scenario: This feature will be used only when the app is ON. It is intended for times when the user is busy and wants to inform the caller without manually attending the call. Key Requirements: Detect and answer incoming calls automatically. Play the recorded voice message to the caller. Ensure the caller hears the message clearly on their end. Disconnect the call programmatically after the message is played. Questions for the Community: Is this Task Feasible? Can the Android platform route a pre-recorded voice file to the call audio stream (STREAM_VOICE_CALL) so the caller can hear it? Are there technical or carrier-level restrictions that could prevent this functionality? Android APIs or Services: Are there specific APIs, such as TelecomManager, CallScreeningService, or AudioManager, that can handle this requirement effectively? Privacy and Legal Concerns: Are there any privacy or legal considerations (e.g., notifying the caller) that I should be aware of when implementing this feature? Compatibility Across Devices: How can I ensure compatibility across different Android devices and versions (API 26 and above)? Additional Information: Voice File: The pre-recorded message is stored locally on the user’s phone in a secure folder. App Activation: The functionality will work only when the app is manually turned ON by the user. Intent: This is a personal productivity tool to handle calls during busy periods. Help Needed: Advice: Can you confirm whether this task is achievable on the Android platform with existing APIs and hardware? Are there specific approaches or best practices to consider for implementing this? Code Implementation: I am looking to hire an experienced Android developer who can: Write fully working code to achieve this task. Ensure the solution is robust, privacy-compliant, and compatible across devices. I deeply appreciate the Android community's expertise and guidance. Your input will help me determine the feasibility and approach for this project. If you have any suggestions, insights, or are interested in developing this, please reply to this request.304Views1like2Comments