Updated 12/19/19 - We have received over 300 comments on the Android preview blog posts, and in those comments and occasional subsequent support cases, you helped us deliver Android Enterprise Fully Managed as generally available. You provided over 58 pieces of actionable feature feedback based on your experience with preview.
As this feature is now GA, new comments on this post will be turned off. As always, we want to hear from you! If you have any suggestions, questions, or comments, please visit us on our Tech Community page or our Twitter @IntuneSuppTeam. Your continued feedback helps make the product better, we are grateful for this community, thank you!
As we work towards delivering full support for the Android Enterprise fully managed device scenario, we are updating the capabilities currently available in preview. We will support Intune app protection policies on Android Enterprise fully managed devices. This will start to roll out now and anticipate it will be available for everyone by the end of the second week in July.
Before we get to what’s new, a quick shout out - thank you for continuing to use this preview and providing extensive dialog. We will keep working to address feedback you have raised in the comments section on prior Android Enterprise fully managed blog posts (preview 1 and preview 2), Twitter, and through other feedback channels.
Support for app protection policies on fully managed devices
We are happy to announce that we now have support for Intune app protection policies on fully managed devices. In scenarios where organizations want an additional layer of app compliance controls beyond full device controls, the automatically deployed Company Portal app will serve as the agent for the app protection policies. All the app protection policies will be supported at parity with the rest of your device scenarios.
Updates to the Microsoft Intune app
We’ve added new features to the Microsoft Intune app (preview) for Android. Users on fully managed Android devices can now:
View and manage the devices they've enrolled through the Intune Company Portal or Microsoft Intune app
Contact their organization for support
Send their feedback to Microsoft
View terms and conditions, if set by their organization
Update availability These features are rolling out now and we expect they’ll be fully available by the first week of July. We will update this post as soon as the roll out is complete so that you can be sure that you have the full set of updates to test out the features.
In development features The following workflows are still in development:
Remote access policies with certificate support (i.e. Wi-Fi, VPN, Email)
Support for managing or enabling system apps
Support for Mobile Threat defense
Customer Support for This Preview We outlined above that not all features are yet available for use with the Intune Android fully managed scenario. The preview features are fully supported through our usual Intune support channels and are clearly labeled with “(preview)” in the Intune console.
As discussed in the comments, we do have a known issue with this release. If you blocked “Account Changes” in the user and accounts blade, then you won’t be able to enroll new devices with this update. We are working on addressing this issue to allow the device to register but prevent any subsequent unapproved account changes.
How Can You Reach Us? As you use Preview 2 and test out the Android fully managed preview scenarios, we would appreciate your feedback on IT admin's enrollment profile configuration and end-user's device enrollment experiences. Keep us posted on your Android experience through comments on this blog post, through Twitter (@IntuneSuppTeam), and request any new features on UserVoice.