How to enroll and configure Outlook on all Android devices?

%3CLINGO-SUB%20id%3D%22lingo-sub-166649%22%20slang%3D%22en-US%22%3EHow%20to%20enroll%20and%20configure%20Outlook%20on%20all%20Android%20devices%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-166649%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20am%20evaluating%20whether%20Intune%20can%20help%20us%20manage%20our%20Android%20devices.%20Our%20policy%20and%20goal%20is%20th%20following%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EOur%20users%20have%20Android%20devices.%3C%2FLI%3E%0A%3CLI%3EEvery%20device%20must%20be%20enrolled%20with%20Android%20for%20Work.%3C%2FLI%3E%0A%3CLI%3EInside%20it%2C%20Outlook%20must%20be%20installed%20and%20configured.%3C%2FLI%3E%0A%3CLI%3EThe%20user%20must%20not%20be%20asked%20to%20enter%20his%20username%20or%20password.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EWhat%20I%20did%20so%20far%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ELinked%20our%20managed%20Google%20Play%20account%20to%20Intune.%3C%2FLI%3E%0A%3CLI%3EAllowed%3CSTRONG%3E%20Device%20enrollment%20%26gt%3B%20Android%20for%20Work%20enrollment%20%26gt%3B%20%3CU%3EEnrollment%20restrictions%3C%2FU%3E%3C%2FSTRONG%3E%20to%20Android%20for%20Work%20platforms%20only.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20next%20step%20is%20to%20force%20the%20installation%20of%20Outlook.%20This%20is%20where%20I'm%20already%20having%20a%20hard%20time.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20two%20options%20in%20adding%20an%20app%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E(1)%20Approve%20Outlook%20in%20the%20managed%20Google%20Play%20Store.%20Then%20go%20to%20%3CSTRONG%3EMobile%20Apps%20%26gt%3B%20Apps%3C%2FSTRONG%3E%2C%20click%20on%20%3CSTRONG%3EMicrosoft%20Outlook%3C%2FSTRONG%3E%2C%20go%20to%20%3CSTRONG%3EAssignments%3C%2FSTRONG%3E%20and%20add%20the%20security%20group%20I%20want%20to%20%3CSTRONG%3Erequire%3C%2FSTRONG%3E%20the%20installation.%20What%20surprises%20me%20is%20that%20with%20this%20option%20I%20have%20to%20work%20with%20Azure%20AD%20security%20groups%20and%20that%20I%20am%20unable%20to%20select%3CSTRONG%3E%20all%3C%2FSTRONG%3E%20%3CSTRONG%3Eusers%3C%2FSTRONG%3E%20or%20%3CSTRONG%3Eall%20devices%3C%2FSTRONG%3E%2C%20as%20I%20can%20do%20in%20the%20second%20option.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E(2)%20Go%20to%20%3CSTRONG%3EMobile%20Apps%20%26gt%3B%20Apps%3C%2FSTRONG%3E.%20Click%20on%20Add.%20Select%20%3CSTRONG%3Ebuilt-in%20app%3C%2FSTRONG%3E.%20Select%20%3CSTRONG%3EMicrosoft%20Outlook%20(Android)%3C%2FSTRONG%3E.%20Go%20to%20%3CSTRONG%3EAssignments%3C%2FSTRONG%3E.%20Here%20I%20am%20actually%20able%20to%20select%20%3CSTRONG%3Eall%3C%2FSTRONG%3E%20%3CSTRONG%3Eusers%3C%2FSTRONG%3E%20or%20%3CSTRONG%3Eall%20devices%3C%2FSTRONG%3E%20instead%20of%20having%20to%20deal%20with%20Azure%20AD%20security%20groups.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%2C%20option%201%20was%20working.%20However%2C%20the%20user%20is%20able%20to%20remove%20Outlook%20and%20reinstalling%20it%20is%20a%20bit%20cumbersome.%20Option%202%20didn't%20work%20at%20all.%20What%20is%20the%20recommended%20approach%20here%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20next%20step%20was%20to%20configure%20Outlook%2C%20so%20the%20user%20doesn't%20have%20to%20enter%20his%20credentials%20a%20second%20time.%20(He%20already%20entered%20his%20credentials%20in%20the%20Company%20Portal).%20How%20would%20I%20go%20about%20that%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-166649%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Regular Contributor

Hello,

 

I am evaluating whether Intune can help us manage our Android devices. Our policy and goal is th following:

  • Our users have Android devices.
  • Every device must be enrolled with Android for Work.
  • Inside it, Outlook must be installed and configured.
  • The user must not be asked to enter his username or password.

What I did so far:

  • Linked our managed Google Play account to Intune.
  • Allowed Device enrollment > Android for Work enrollment > Enrollment restrictions to Android for Work platforms only.

 

The next step is to force the installation of Outlook. This is where I'm already having a hard time.

 

I have two options in adding an app:

 

(1) Approve Outlook in the managed Google Play Store. Then go to Mobile Apps > Apps, click on Microsoft Outlook, go to Assignments and add the security group I want to require the installation. What surprises me is that with this option I have to work with Azure AD security groups and that I am unable to select all users or all devices, as I can do in the second option.

 

(2) Go to Mobile Apps > Apps. Click on Add. Select built-in app. Select Microsoft Outlook (Android). Go to Assignments. Here I am actually able to select all users or all devices instead of having to deal with Azure AD security groups.

 

Now, option 1 was working. However, the user is able to remove Outlook and reinstalling it is a bit cumbersome. Option 2 didn't work at all. What is the recommended approach here?

 

The next step was to configure Outlook, so the user doesn't have to enter his credentials a second time. (He already entered his credentials in the Company Portal). How would I go about that?

0 Replies