Support Tip: Android 11 on Samsung leading to slower corporate-owned work profile enrollments

Published Oct 19 2021 05:09 PM 7,724 Views

We recently had a case escalation and now have a confirmed known issue for Android 11 corporate-owned work profile enrollments on Samsung devices. We’ll keep this post updated as Google and Samsung continue to investigate. Note that Google confirmed today they have been able to reproduce this issue, but we haven’t confirmed exactly which Samsung devices are affected yet.

 

Scenario: During the Intune corporate-owned work profile enrollment flow for Samsung devices on Android 11, the enrollment appears to hang while installing the Microsoft Intune app during the required app install step. In our repro of the issue, we’re seeing the device stay on this screen sometimes over 40 minutes. Installation will continue and successfully enroll; however, it’s taking far longer than it did before or with other device manufacturers.

 

Screenshot of a Samsung device running Android 11 corporate-owned work profile device enrolling into Microsoft Endpoint Manager.Screenshot of a Samsung device running Android 11 corporate-owned work profile device enrolling into Microsoft Endpoint Manager.

 

Scope: This issue is specific to Samsung devices running Android 11 during corporate-owned work profile enrollments. We’re able to reproduce using Samsung devices such as SM-A127F.

 

Updates: 

  • 10/29/2021 - Google believes they’ve got a potential fix and are currently testing that fix with Intune.
  • 10/19/2021 - Google is investing as a high priority with Samsung. We’ll continue to provide updates as they determine root cause.
11 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-2864393%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2864393%22%20slang%3D%22en-US%22%3E%3CP%3E%3CEM%3EScope%20%3A%20Same%20here%20with%20SM%3C%2FEM%3E%3CSPAN%3E-A525%20devices.%3CBR%20%2F%3EThe%20behaviour%20is%20not%20consistent%20though.%20As%20we%20managed%20to%20get%20some%20speed%20with%20the%20creation%20of%20additional%20QR%20codes%2C%20which%20works%20for%20%22some%22%20time%2C%20then%20it%20slows%20down%20again.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2866054%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2866054%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EI%E2%80%99m%20seeing%20these%20exact%20symptoms%20during%20Fully%20Managed%20device%20enrollment%20too%2C%20not%20only%20corp-owned%20Work%20Profile.%20Samsung%20A21.%20Should%20I%20open%20a%20ticket%20for%20it%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2867659%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2867659%22%20slang%3D%22en-US%22%3E%3CP%3ESimilar%20but%20different%20error.%26nbsp%3B%20Samsung%20S20%20Ultra%20unable%20to%20connect%2C%20but%20previously%20could%20connect%20to%20intune%20due%20to%20error%20%22A%20device%20password%20must%20be%20at%20least%204%20characters%20long%22%2C%26nbsp%3BThe%20error%20indicates%20the%20app%20thinks%20phone%20has%20%26lt%3B%204%20characters%20which%20is%20incorrect.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3EPhone%3A%3C%2FP%3E%3CP%3EOne%20UI%3A%203.1%3C%2FP%3E%3CP%3EAndroid%20version%3A%2011%3C%2FP%3E%3CP%3EBaseband%20version%3A%20G988U1UES2DUI5%3C%2FP%3E%3CP%3EAndroid%20security%20patch%20level%3A%20Oct.%2021%2C%202021%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2869227%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2869227%22%20slang%3D%22en-US%22%3E%3CP%20data-unlink%3D%22true%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1191491%22%20target%3D%22_blank%22%3E%40Larry125%3C%2FA%3E%26nbsp%3BThat's%20a%20different%20issue.%20Check%26nbsp%3B%3CSPAN%3EMC291439%26nbsp%3Bin%20the%20MS365%20Message%20Center%20for%20details.%3C%2FSPAN%3E%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3E%3CSPAN%3EHere's%20a%20direct%20link.%20It%20will%20only%20work%20if%20you%20have%20appropriate%20access%20in%20the%20MS365%20admin%20portal%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fadmin.microsoft.com%2FAdminportal%2FHome%3Fref%3DMessageCenter%2F%3A%2Fmessages%2FMC291439%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSPAN%3Ehttps%3A%2F%2Fadmin.microsoft.com%2FAdminportal%2FHome%3Fref%3DMessageCenter%2F%3A%2Fmessages%2FMC291439%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2884965%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2884965%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20news%20upon%20this%20issue%3F%20I'm%20about%20to%20roll-out%201.400%20Samsung%20devices%2C%20fully%20manages.%20Yesterday%2C%20we%20had%20some%20pilot%20candidates%20and%20it%20was%20dramatic.%20It%20took%20about%203%20hours%20before%20the%20registration%20process%20was%20ready!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2899268%22%20slang%3D%22fr-FR%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2899268%22%20slang%3D%22fr-FR%22%3E%3CP%3EHad%20same%20thing%20yesterday%20during%20Android%20Enterprise%20Corporate-owned%20dedicated%20device%20enrollment%20and%20not%20only%20on%20Android%2011%2C%20also%20on%20an%20old%20SM-A510F%20running%20Android%207.0%20(can't%20go%20above).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2863448%22%20slang%3D%22en-US%22%3ESupport%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2863448%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20recently%20had%20a%20case%20escalation%20and%20now%20have%20a%20confirmed%20known%20issue%20for%20Android%2011%20corporate-owned%20work%20profile%20enrollments%20on%20Samsung%20devices.%20We%E2%80%99ll%20keep%20this%20post%20updated%20as%20Google%20and%20Samsung%20continue%20to%20investigate.%20Note%20that%20Google%20confirmed%20today%20they%20have%20been%20able%20to%20reproduce%20this%20issue%2C%20but%20we%20haven%E2%80%99t%20confirmed%20exactly%20which%20Samsung%20devices%20are%20affected%20yet.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EScenario%3A%3C%2FSTRONG%3E%20During%20the%20Intune%20corporate-owned%20work%20profile%20enrollment%20flow%20for%20Samsung%20devices%20on%20Android%2011%2C%20the%20enrollment%20appears%20to%20hang%20while%20installing%20the%20Microsoft%20Intune%20app%20during%20the%20required%20app%20install%20step.%20In%20our%20repro%20of%20the%20issue%2C%20we%E2%80%99re%20seeing%20the%20device%20stay%20on%20this%20screen%20sometimes%20over%2040%20minutes.%20Installation%20will%20continue%20and%20successfully%20enroll%3B%20however%2C%20it%E2%80%99s%20taking%20far%20longer%20than%20it%20did%20before%20or%20with%20other%20device%20manufacturers.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22SamsungDevice.png%22%20style%3D%22width%3A%20289px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F318754i233ABFBCB40B67BB%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22SamsungDevice.png%22%20alt%3D%22Screenshot%20of%20a%20Samsung%20device%20running%20Android%2011%20corporate-owned%20work%20profile%20device%20enrolling%20into%20Microsoft%20Endpoint%20Manager.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EScreenshot%20of%20a%20Samsung%20device%20running%20Android%2011%20corporate-owned%20work%20profile%20device%20enrolling%20into%20Microsoft%20Endpoint%20Manager.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EScope%3C%2FSTRONG%3E%3A%20This%20issue%20is%20specific%20to%20Samsung%20devices%20running%20Android%2011%20during%20corporate-owned%20work%20profile%20enrollments.%20We%E2%80%99re%20able%20to%20reproduce%20using%20Samsung%20devices%20such%20as%20SM-A127F.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUpdates%3A%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3E10%2F29%2F2021%3C%2FSTRONG%3E%20-%26nbsp%3BGoogle%20believes%20they%E2%80%99ve%20got%20a%20potential%20fix%20and%20are%20currently%20testing%20that%20fix%20with%20Intune.%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%20style%3D%22font-family%3A%20inherit%3B%22%3E10%2F19%2F2021%3C%2FSTRONG%3E%20-%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3E%26nbsp%3BGoogle%20is%20investing%20as%20a%20high%20priority%20with%20Samsung.%20We%E2%80%99ll%20continue%20to%20provide%20updates%20as%20they%20determine%20root%20cause.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2863448%22%20slang%3D%22en-US%22%3E%3CP%3ERead%20this%20post%20to%20learn%20more%20about%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22BlogDefault.png%22%20style%3D%22width%3A%20367px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F318580i95C9E0A845941C1F%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22BlogDefault.png%22%20alt%3D%22BlogDefault.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2863448%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EKnown%20Issue%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESupport%20Tip%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2908961%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2908961%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20had%20the%20same%20issue%20and%20for%20us%20the%20solution%20was%20to%20install%20the%20device%20with%20the%20Wifi%20disabled%20and%20to%20use%20the%20phone's%20data.%20This%20way%20the%20installation%20was%20done%20quickly.%20After%20downloading%20and%20installing%20Intune%20you%20can%20enable%20the%20Wifi.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2911471%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2911471%22%20slang%3D%22en-US%22%3E%3CP%3EPossibly%20another%20thing%20to%20check%20along%20these%20lines%20-%20Company%20Portal%20taking%20a%20phone%20out%20of%20compliance%20after%20the%20phone%20is%20updated%20to%20Android%2011.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20Samsung%20A51%20was%20working%20perfectly%20fine%2C%20within%20compliance%20of%20my%20Office%20365%20settings.%20All%20I%20did%20was%20update%20to%20Android%2011%20and%20now%20I%20can't%20get%20my%20phone%20into%20compliance%20period.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20error%20being%20reported%20is%20-%20Set%20a%20longer%20device%20password.%20Also%20-%20A%20device%20password%20must%20be%20at%20least%204%20characters%20long.%26nbsp%3BI%20have%20tried%20using%20passwords%20all%20the%20way%20up%20to%2011%20and%2014.%20No%20luck%20in%20Company%20Portal%20resolving%20the%20password%20issue.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENote%3A%20A%20Samsung%20S9%20running%20Android%2010%2C%20AND%20hasn't%20been%20updated%20to%20Android%2011%2C%20is%20still%20chugging%20along%20wonderfully!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2917727%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2917727%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1202890%22%20target%3D%22_blank%22%3E%40RSquared%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2FHome%3Fref%3DMessageCenter%2F%3A%2Fmessages%2FMC291439%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2FHome%3Fref%3DMessageCenter%2F%3A%2Fmessages%2FMC291439%3C%2FA%3E%26nbsp%3Bdoes%20this%20help%3F%3C%2FP%3E%3CP%3Eit%20is%20not%20a%20thing%20on%20the%20device%20itself%2C%20its%20a%20thing%20with%20the%20configuration%20profiles%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%22%3CEM%3EAs%20described%20in%20IT291284%2C%20Android%2011%20work%20profile%20devices%20or%20device%20administrator%20enrolled%20devices%20are%20failing%20compliance%20due%20to%20password%20policy%20enforcement%20changes%20that%20are%20impacting%20users%20causing%20them%20to%20lose%20access%20to%20company%20resources.%20This%20issue%20arose%20because%20of%20a%20new%20Company%20Portal%20update%20which%20was%20required%20due%20to%20Google%E2%80%99s%20move%20to%20use%20API%2030.%20The%20password%20policy%20requirements%26nbsp%3B%3C%2FEM%3E%3C%2FSPAN%3E%3CEM%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fmem%2Fintune%2Ffundamentals%2Fwhats-new-archive%23new-required-password-type-default-setting-for-android-android-enterprise%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Echanged%20between%20API%2029%20and%20API%2030%3C%2FA%3E%3C%2FEM%3E%3CSPAN%3E%3CEM%3E%26nbsp%3Bto%20enforce%20a%20numeric%20or%20greater%20complexity%20password.%20On%20devices%20enrolled%20prior%20to%20Android%2011%2C%20the%20platform%20did%20not%20require%20the%20policy%20to%20be%20configured%2C%20but%20once%20on%20Android%2011%2C%20you%20are%20now%20required%20to%20set%20more%20granular%20password%20policy%20in%20the%20Microsoft%20Endpoint%20Manager%20admin%20center%20User%20Interface%20(UI).%3C%2FEM%3E%22%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2927552%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Android%2011%20on%20Samsung%20leading%20to%20slower%20corporate-owned%20work%20profile%20enrollments%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2927552%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20company%20was%20experiencing%20the%20exact%20same%20issue%20described%20in%20this%20post%2C%20was%20taking%20at%20least%20an%20hour%20to%20roll%20out%20a%20phone.%20Glad%20I%20came%20accross%20this%20post%2C%20was%20starting%20to%20think%20it%20was%20our%20enviroment.%20We%20semi-bypassed%20the%20issue%3C%2FP%3E%3CP%3Eand%20have%20had%20great%20success%20rolling%20out%20Samsung%20A52's%20via%20network%20cable%20using%20a%20USB%20C%20LAN%20Adapter.%20It%20enrolls%208%20out%20of%2010%20times%20with%20the%20green%20checkmarks%20being%20ready%20before%20you%20can%20even%20blink...%20it%20does%20however%20still%20get%20stuck%20sometimes%20on%20the%20intune%20app...%20but%20resetting%20the%20device%20and%20trying%20again%20is%20much%20faster%20than%20waiting%201%20hour%2C%20hoping%20that%20it%20will%20install%20the%20app%20over%20wifi%2F4g%2F5g.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Oct 29 2021 11:46 AM
Updated by: