03-22-2019 04:09 PM
03-22-2019 04:09 PM
I'm testing with Intune for several days with a Samsung Galaxy Tab S4 but I can't get my tablet to create a work profile. When I installed the Intune portal app and started registrating my device, it stopps with the error message: "Device cannot be added. Pls accept all system permission requirements" but there aren't any windows poping up to agree the samsung terms and so on.
My tablet is in the list of google enterprise devices, running on android 8.1.0 and I couldn't find any info that work profiles are not supported on this device. I activated the device enrollment restriction for Android work profiles.
Is this a bug or is my device simply not supported for work profiles?
Thanks and Regards
03-24-2019 02:59 AM
Do you have an alternative platform or tenant to test with? (validate if this is a config or device issue)
Note: you can test it here https://enterprise.google.com/android/experience with a valid gmail account (this account can not be bound to a current EMM)
If the above did not enrol then try the following;
Reset the device, attempt to enrol and gather an adb bugreport
Logs will be lengthy, however will likely contain important troubleshooting information.
Then log a job with support.
03-24-2019 11:52 AM
03-24-2019 12:32 PM
03-25-2019 05:24 AM
03-25-2019 05:53 AM
I checked my tenant again but I still can't get it working.
My test user has M365 Business and EMS E5 licenses added, managed Google Play is setup, the intune portal app is approved in Google Play and I configured the device registration restrictions to Android=blocked, Android Work Profile=Allowed but still I get the same errors during enrollment via app:
"Work Profile can not be added. Work profile can not be added to this device. Please contact your Administrator."
"Device could not be added. To manage your device, you need to approve all system permissions".
To clarify my procedure, I enroll my tablet with the fully managed QR-Code token and as soon as the intune portal app is installed, I try enrolling it with the work profile where the error messages mentioned appear.
I enabled the developer options on my device and could find 2 suspicious entries in the log file:
It seems that either the user itself has no permissions for creating a work profile or the device was given a false setting.
May I ask which enrollment path you use for your devices @Alexander Vanyurikhin ?
03-25-2019 06:00 AMSolution
Looks like i missed the point of using fully-managed device. Based on my understanding, you can't have fully managed device and work-profile on the same device.
When using these preview features, keep the following in mind:
03-25-2019 06:51 AM
Ok, after a few tests it seems you are right.
I was sure I saw a video with a fully-managed and work profile on it and the docu also states that enterprise devices can have added work profiles. I need to test with dedicated devices again as it didn't work there too but that has no priority atm.
Thanks for all your help ;)
Have a nice day!
03-25-2019 01:38 PM