Jul 08 2019 12:52 AM
Hi All
We are currently looking at trialing intune as our MDM solution using the android Enterprise Platform. We are using samsung devices that are fully corporate owned.
After successfully enrollment Android Enterprise limits the applications but also remove core system apps such as SMS , Camera etc
I need to Enable Samsung OEM applications that were disabled by Android Enterprise
I have experience with other MDMs where remote scripts can be sent e.g
enable_system_app com.sec.android.app.camera
enable_system_app com.samsung.android.messaging
Is there a scripting function within intune to send android scripts to enable apps and functions
I can see there is a samsung knox plugin available, but Ideally we do not want to purchase additional Samsung knox licenses or subscription to enable this functionality if possible .
Any advice would be gratefully received and appreciated
Thanks
Jason
Aug 29 2019 08:08 AM
The original code generated ends with }}. I put the line ,"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true - in between the two }}. Needs the comma at the start straight after the first of the two}.
Hope this helps, seems to leave Camera and Text apps plus some others which do not work anyway (such as Netflix).
Aug 29 2019 08:57 AM
Sep 02 2019 01:46 AM - edited Sep 02 2019 01:47 AM
Sep 02 2019 06:22 AM
Have a look at https://docs.microsoft.com/en-us/intune/in-development#device-management
Something is in development for system apps:
System apps will be supported on Android Enterprise devices. In Intune, you will add an Android Enterprise system app by selecting Client apps > Apps > Add. In the App type list, select Android Enterprise system app.
Sep 02 2019 07:29 AM
Sep 02 2019 07:54 AM
@LewisTaylor No idea.
Usually there are multiple updates during a month for Intune as you can see here https://docs.microsoft.com/en-us/intune/whats-new
But it is unknown when a specific update is released. And if there might be an issue with a new feature, it could also mean it is delayed. So we can just wait and see if it shows up in de portal.
Sep 23 2019 10:33 AM
I wrote a super quick WinForms application to capture and re-generate the QR code with the 'All system apps' enabled. Was tired of doing this manually.
https://github.com/expired00/AndroidEnterpriseQRCodeModifier/releases
How-to is located in the wiki.
Sep 23 2019 11:05 AM
@LewisTaylor it`s available, here are the steps to enable the system apps https://www.inthecloud247.com/how-to-add-android-enterprise-system-apps-with-microsoft-intune/
Oct 02 2019 06:35 AM
@Peter Klapwijksince Fully Managed is now GA you can do this via apps rather than modifying the QR code! See https://docs.microsoft.com/en-us/intune/apps/apps-ae-system
Jun 17 2024 08:27 PM
@kingyjk this advise actually works!
I've managed to retain the Samsung Enterprise Applications within' the phone upon enrollment. Just have to add the lines once you get the QR token code. Example below.
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {
"com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "TOKEN HERE"
},"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true}
Hope this will help future enrollments!