Intune Support for Android Q | Android 10

[Intune_Support_Team]

Google just announced release of Android Q, also known as Android 10. Both our Intune App Protection Policy (APP or MAM) team and our Mobile Device Management (MDM) team have been testing each beta release and wanted to keep you posted on what we’ve been finding. So far, through our testing with each beta release, all existing Intune MDM and Intune APP scenarios are compatible with this latest version of Android.

Here's are a few things you’ll want to know:

• Update: Encourage your end users to update to Intune's latest version of the Company Portal, Microsoft Edge, Managed Browser, and other APP-supported apps. The latest version is required to work with Android 10.
• Enrollment and corporate identifiers: Google made a change in Android 10 that prevents device administrator-managed devices from reporting device identifiers such as serial number and IMEI. For more information, see the What's New advisory titled - Handling pre-configuration of corporate device identifiers for Android Q devices posted on July 22, 2019.
• Managed Browser and Citrix Netscalar: If your organization is deploying the Intune Managed Browser, scenarios that integrate with Citrix Netscalar will not work with devices running on Android Q. Our team is working with Citrix to update the Netscalar SDK to work with Android Q. Please continue to monitor the "Intune What’s New” page for updates.
• App Protection Policy and saving corporate documents to local: The Intune team is working on a fix in the Intune Company Portal to properly handle files saved to the device's local Downloads on Android Q. Customers can mitigate this issue by blocking Save As to Local until the Company Portal rollout is completed by mid week. Stay tuned for an update to this blog for information on when the Company Portal version rollout will be completed to all devices.  
• Intune SDK: If you are an app developer who has taken a previous version of the Intune SDK for Android, you must adopt the recently published Intune APP SDK v 6.0.0 in order to target Android Q within their app. More details are provided in the developer documentation.
• App Wrapping Tool: If you are an app developer/IT admin that has taken a previous version of the Intune App Wrapping Tool, the Intune product team will be releasing an update in Q3 2019 that all LOB apps can take in order to work with Android Q.
• App badging: If you are an app developer using the old badging style for APP-supported apps, we recommend you use the briefcase icon. The Intune app partner web page will reflect these changes from your new icon. The latest branding details are in this GitHub repository.
• Device support: The move to support Android 5+ changes a bit of the device support, as Android 5 does not support a small number of Android devices. You can find the device list in Message Center post #185438 or also published here: https://docs.microsoft.com/intune/in-development#plan-for-change-intune-app-sdk-and-app-protection-p...

As with previous major Android OS updates, check mobile app compatibility with your app providers to confirm your users' apps work with Android Q. You’ll see a “What’s New for the app” in the Play Store or in-app details on an application’s website. Some apps provide Day 0 support, while others update over time. Ensure your users' managed apps that are deployed through Intune have been updated to a version that supports Android Q.

[Dustin Halvorson]

Lots of confusing info out there regarding the upgrade and device admin.  So at this very moment, a device running android 10, and device admin (legacy) will just lose access to reporting serial, IMEI, etc?  From what we can tell so far, devices can still be remote locked, restart, etc.

[Alexander Vanyurikhin]

That will happen with device if it was enrolled with Device Admin and then was updated to Android 10. Device will be unenrolled or it will continue to be managed?

[Jordan Paris]

I have been on the beta and now the full release, I am noticing that OneDrive when managed with MAM policies, if I wanted to upload using the + icon on the main screen, it says there are no available apps. This works fine in previous versions of Android. I don't know if this is something you all have seen or fixed that is coming with the new portal update.

[Intune_Support_Team]

@Dustin Halvorson did you read MC186863 - Intune Plan for Change: Upcoming Support Changes for Android Device Administrator? That details the what will be supported both now and in the future. We posted it to all customers with some form of Android usage. Also, the DA and 10 info is also updated in doc's and on the What's New page. Hope this helps!

[Intune_Support_Team]

Hi @Jordan Paris, is the latest version of OneDrive installed on the device? Checking as the Intune App SDK has been recently updated to target Android Q. If updated, and are still experiencing the same issue, let's get you over to support for further investigation. Please open a case either through the Intune console or through any of the methods mentioned here: How to get support for Microsoft Intune. Please send us a message with your case so we can have an eye on the case.

[Dustin Halvorson]

@Intune_Support_Team thanks ill go with this doc.  I started to question it after reading on other sites (some for other MDMs) that absolutely nothing would work after the Android 10 upgrade.  This at least gives us a little time to cycle through our devices and make the change.

Unfortunate that Google didnt build anything to simply convert vs a full factory reset.

[Intune_Support_Team]

Hi @Alexander Vanyurikhin, the device will continue to be managed, however, as Google is decreasing device administrator support in new Android releases, the recommendation would be to migrate devices off of Device Administrator management if the devices will be upgraded to Android 10.

For more information about Intune support for Android device admin support, take a look at our Decreasing support for Android device administrator doc.

Hope this helps!

[Sebastian_Clementoni]

I updated my Galaxy s10+ to Android 10, all my office apps and edge stopped working. Un installing the company portal with intune solves the issue. If I reinstall the company portal and enroll, it breaks all the apps again. Is there a fix coming?

Thank you  

[Intune_Support_Team]

Hi @Sebastian_Clementoni, we've posted a Known Issue Using Samsung S10 Series and Office with APP or Conditional Access regarding S10 devices, is this the same behavior you are experiencing?

[Sebastian_Clementoni]

@Intune_Support_Team thanks for replying.  No, not the same issue. I bought this galaxy s10 directly from Samsung, unlocked, it did not come with any office bundle. I've installed everything from the store manually. 

[Intune_Support_Team]

Hi @Sebastian_Clementoni, thanks for the confirmation! With the re-installation of the apps, and the Company Portal still not working as expected, let's get you over to support. Please open a support case via the Intune Admin console's Help and Support or any of the methods here. Please PM us your case, so we can have an eye on the case.

Thanks!