Intune Android Enterprise - Enable Samsung System Apps

[King_Of_Comms]

Hi All

We are currently looking at trialing intune as our MDM solution using the android Enterprise Platform. We are using  samsung devices that are fully corporate owned.

After successfully enrollment Android Enterprise limits the applications but also remove core system apps such as SMS , Camera etc

I need to Enable Samsung OEM applications that were disabled by Android Enterprise

I have experience with other MDMs  where remote scripts can be sent e.g 

enable_system_app com.sec.android.app.camera

enable_system_app com.samsung.android.messaging

Is there a scripting function within intune to send android scripts to enable apps and functions

I can see there is a samsung knox plugin available, but Ideally we do not want to purchase additional Samsung knox licenses or subscription to enable this functionality if possible .

Any advice would be gratefully received and appreciated

Thanks 

Jason

[#2]

@LewisTaylor 

The original code generated ends with }}. I put the line ,"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true - in between the two }}. Needs the comma at the start straight after the first of the two}.

Hope this helps, seems to leave Camera and Text apps plus some others which do not work anyway (such as Netflix).

[#3]

Thanks Jim for the correct Syntax info. What software/app do you use to edit the QR code? And how do you export / import the updated QR code into Intune?

[#4]

@Jim Rorrison Thanks Jim for the correct Syntax info. What software/app do you use to edit the QR code? And how do you export / import the updated QR code into Intune?

[#5]

Have a look at https://docs.microsoft.com/en-us/intune/in-development#device-management
Something is in development for system apps:

System apps will be supported on Android Enterprise devices. In Intune, you will add an Android Enterprise system app by selecting Client apps > Apps > Add. In the App type list, select Android Enterprise system app.

[#6]

Thanks for the docs link @Peter Klapwijk It mentions a September release date for this feature, any idea on a specific date for this or is it just an estimate target date for an in development feature? The reason I ask is we are deploying about 150 Android enterprise devices in October in support of a new ERP and obviously need some of these core system apps available before deployment. The Samsung Gallery app is fine as I have been able to install as part of the enrolment via the managed google play store, however the Samsung camera app is annoyingly not available. I am looking to find a away ASAP to restore/keep/reinstall the system Samsung camera app whilst enrolling the corporate dedicated devices via Intune. (I have raised a support case with Microsoft)

[#7]

@LewisTaylor No idea.
Usually there are multiple updates during a month for Intune as you can see here https://docs.microsoft.com/en-us/intune/whats-new
But it is unknown when a specific update is released. And if there might be an issue with a new feature, it could also mean it is delayed. So we can just wait and see if it shows up in de portal.

[#8]

I wrote a super quick WinForms application to capture and re-generate the QR code with the 'All system apps' enabled. Was tired of doing this manually.

https://github.com/expired00/AndroidEnterpriseQRCodeModifier/releases 

How-to is located in the wiki.

[#9]

@LewisTaylor it`s available, here are the steps to enable the system apps https://www.inthecloud247.com/how-to-add-android-enterprise-system-apps-with-microsoft-intune/

[#10]

@Peter Klapwijksince Fully Managed is now GA you can do this via apps rather than modifying the QR code! See https://docs.microsoft.com/en-us/intune/apps/apps-ae-system

[#11]

@Joni_Nieminen Thnx, I know 🙂
https://www.inthecloud247.com/how-to-add-android-enterprise-system-apps-with-microsoft-intune/

[#12]

@kingyjk this advise actually works!

I've managed to retain the Samsung Enterprise Applications within' the phone upon enrollment. Just have to add the lines once you get the QR token code. Example below.

"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {
"com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "TOKEN HERE"
},"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true}

Hope this will help future enrollments!