Forum Discussion
force enrollment on android device
PatrickF11 You can sign-in to the Company Portal app on a device to register it, just don't complete the enrollment. There should be an option to "postpone" after signing-in. The Authenticator app is no longer required on iOS to enforce app protection policies, it is enforced by the mobile apps themselves.
PatrickF11 On Android, the Intune Company Portal app is required to enforce app protection policies. End-users do not need to enroll their device, but the app is still required .
https://docs.microsoft.com/en-us/intune/end-user-mam-apps-android#access-apps
eglockling Just to make it clear to me:
When i use an Android device and i did not have the Company Portal app installed, no app protection policy is applied? And: To apply the app protection policy the user is forced to install the intune company portal app. (no need to register within the app, right?)
So that means, once i have app protection policies set up for android devices, no user is able to use e.g. outlook, until he/she has the intune company portal app installed, because the Outlook app is covered by an app protection policy, right?
- sbuccimsft
Microsoft
"because the Outlook app is covered by an app protection policy, right?"
Just posting for the sake of clarity for others, not necessarily specific to your scenario, Patrick.
Outlook is covered by app protection policies if they assigned to that user group the end user is a member of. The Intune SDK is built-in to Outlook, but nothing is "activated" until a policy is applied.sbuccimsft Thank you for your reply. Thats why i said "...once i have app protection policies set up for android devices.."
Of course this is not the "fault" of intune. The admin should consider of the policies used, of course. :-)
- sbuccimsft
PatrickF11 understood and you were totally correct. I was just trying to expand on this for the next person to find the thread.
Thanks for adding to the community knowledge. It is appreciated.
PatrickF11 That's correct.
