Forum Discussion

King_Of_Comms's avatar
King_Of_Comms
Copper Contributor
Jul 08, 2019

Intune Android Enterprise - Enable Samsung System Apps

Hi All We are currently looking at trialing intune as our MDM solution using the android Enterprise Platform. We are using  samsung devices that are fully corporate owned.   After successfully enr...
mobile device management (mdm)
kingyjk's avatar
kingyjk
Copper Contributor
Jul 12, 2019

King_Of_CommsHi, I have managed to get this to work by editing the QR code to include a line

 

You need to add the Bold Text below.

 

"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true

  • Milton_Yee's avatar
    Milton_Yee
    Copper Contributor
    Jun 18, 2024

    kingyjk this advise actually works!

    I've managed to retain the Samsung Enterprise Applications within' the phone upon enrollment. Just have to add the lines once you get the QR token code. Example below.

    "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {
    "com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "TOKEN HERE"
    },"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true}

    Hope this will help future enrollments!

  • King_Of_Comms's avatar
    King_Of_Comms
    Copper Contributor
    Jul 22, 2019
    Do you add this line to to the advance rule box within dynamic membership rules ?
    ive tried adding the code to my rule and intune errors
    "Failed to save dynamic group. Dynamic membership rule validation error: Invalid characters found in the rule.Invalid characters found in the rule: :

    heres the rule i attempted to use
    (device.enrollmentProfileName -match "AFW CO - SU")
    "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true

    anything immediately obvious in my syntax that would cause an error? I have attempedt with open/close brackets and removing the quotations but no joy so far
    • Joni_Nieminen's avatar
      Joni_Nieminen
      Copper Contributor
      Jul 23, 2019

      King_Of_CommsI am not sure where this dynamic membership error is coming. But you need to use a converter/tool to convert the Intune console QR code to text mode. Then you append the following to your converted text:

       

      "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true

       

      After this you convert the new text back to QR code and distribute it internally for the enrollment purposes.

      • Jim Rorrison's avatar
        Jim Rorrison
        Copper Contributor
        Aug 08, 2019

        Joni_Nieminen 

        I added the line:
        "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true
        to the end of the text and converted it back to a QR Code. When I try to scan the code to enrol a Samsung mobile I see the following message:
        Cannot create work profile
        The security policy prevents the creation of a managed device because a custom OS is or has been installed on this device.

        Would anyone have any thoughts? We have blocked "Rooted devices" on our Android Device Policy.

         

Resources