Personally owned - Android Enterprise (work profile)

%3CLINGO-SUB%20id%3D%22lingo-sub-1447926%22%20slang%3D%22en-US%22%3EPersonally%20owned%20-%20Android%20Enterprise%20(work%20profile)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1447926%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20unsure%20what%20personally%20owned%20means%20when%20talking%20enrollment%20using%20Work%20Profile.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20my%20head%20there%20is%20personally%20owned%20and%20corporate%20owned%20but%20how%20does%20the%20work%20profile%20know%20what%20is%20what%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20a%20work%20profile%20always%20going%20to%20be%20a%20personal%20device%3F%20even%20if%20the%20company%20dis%20purchase%20it%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThese%20Samsung%20Galaxy%20A3%20phones%20are%20not%20able%20to%20do%20the%20Enterprise%20Enrollment%20for%20fully%20dedicated%20or%20fully%20managed.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1447926%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1448295%22%20slang%3D%22en-US%22%3ERe%3A%20Personally%20owned%20-%20Android%20Enterprise%20(work%20profile)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1448295%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F632351%22%20target%3D%22_blank%22%3E%40RippieUK%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20enroll%20an%20Android%20device%20by%20installing%20the%20Company%20portal%20the%20device%20is%20enrolled%20as%20(with)%20Android%20Enterprise%20Work%20profile.%20It%20cannot%20see%20if%20the%20company%20owns%20the%20device%20or%20this%20is%20a%20personal%20device.%20It%20just%20creates%20a%20work%20profile%20container%20on%20the%20device%20and%20in%20that%20container%20Android%20apps%20are%20installed%20which%20you%20deploy%20with%20Intune.%20In%20that%20container%20you%20company%20data%20is%20accessed.%3CBR%20%2F%3EIn%20the%20personal%20part%20of%20the%20device%20(everything%20outside%20the%20work%20profile)%20the%20user%20can%20use%20personal%20apps%2C%20like%20Facebook%2C%20Twitter%20etc.%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20Work%20profile%20solution%20can%20be%20used%20for%20both%20personal%20and%20corporate%20owned%20devices%2C%20but%20you%20as%20an%20Intune%20admin%20don%60t%20have%20real%20control%20over%20the%20device%20itself.%3CBR%20%2F%3E%3CBR%20%2F%3EMore%20info%20can%20be%20found%20for%20example%20in%20this%20blog%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-start-with-android-enterprise-work-profiles-in-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.inthecloud247.com%2Fhow-to-start-with-android-enterprise-work-profiles-in-microsoft-intune%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPeter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1450225%22%20slang%3D%22en-US%22%3ERe%3A%20Personally%20owned%20-%20Android%20Enterprise%20(work%20profile)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1450225%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3194%22%20target%3D%22_blank%22%3E%40Peter%20Klapwijk%3C%2FA%3E%26nbsp%3BThank%20you%20for%20that%20information.%20So%20under%20the%20enrollment%20restrictions%2C%20it%20would%20be%20a%20bad%20idea%20to%20block%20allow%20personal%20for%20Android%20Enterprise%20-%20Work%20Profile%20%3A)%3C%2Fimg%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1450460%22%20slang%3D%22en-US%22%3ERe%3A%20Personally%20owned%20-%20Android%20Enterprise%20(work%20profile)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1450460%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F632351%22%20target%3D%22_blank%22%3E%40RippieUK%3C%2FA%3E%26nbsp%3BThat%20would%20be%20a%20bad%20idea.%3CBR%20%2F%3E%3CBR%20%2F%3EWhat%20is%20the%20reason%20Fully%20managed%20isn%60t%20supported%20on%20the%20A3%3F%20Fully%20managed%20is%20supported%20on%20Android%207%20and%20later.%20I%20thought%20the%20A3%20is%20updated%20to%20Android%208%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1480217%22%20slang%3D%22en-US%22%3ERe%3A%20Personally%20owned%20-%20Android%20Enterprise%20(work%20profile)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1480217%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3194%22%20target%3D%22_blank%22%3E%40Peter%20Klapwijk%3C%2FA%3E%26nbsp%3Bi%20honestly%20thought%20those%20devices%20was%20not%20enterprise%20ready%2C%20I%20will%20need%20to%20test%20to%20see%20after%20a%20wipe%20if%20i%20click%20randomly%20a%20few%20times%20on%20the%20first%20screen%20if%20that%20start%20the%20enterprise%20setup%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi all,

 

I am unsure what personally owned means when talking enrollment using Work Profile.

 

In my head there is personally owned and corporate owned but how does the work profile know what is what?

 

Is a work profile always going to be a personal device? even if the company dis purchase it?

 

These Samsung Galaxy A3 phones are not able to do the Enterprise Enrollment for fully dedicated or fully managed.

4 Replies
Highlighted

Hi @RippieUK ,

 

If you enroll an Android device by installing the Company portal the device is enrolled as (with) Android Enterprise Work profile. It cannot see if the company owns the device or this is a personal device. It just creates a work profile container on the device and in that container Android apps are installed which you deploy with Intune. In that container you company data is accessed.
In the personal part of the device (everything outside the work profile) the user can use personal apps, like Facebook, Twitter etc.

This Work profile solution can be used for both personal and corporate owned devices, but you as an Intune admin don`t have real control over the device itself.

More info can be found for example in this blog https://www.inthecloud247.com/how-to-start-with-android-enterprise-work-profiles-in-microsoft-intune...

Regards,

 

Peter

Highlighted

@Peter Klapwijk Thank you for that information. So under the enrollment restrictions, it would be a bad idea to block allow personal for Android Enterprise - Work Profile :) 

 

@RippieUK That would be a bad idea.

What is the reason Fully managed isn`t supported on the A3? Fully managed is supported on Android 7 and later. I thought the A3 is updated to Android 8?

Highlighted

@Peter Klapwijk i honestly thought those devices was not enterprise ready, I will need to test to see after a wipe if i click randomly a few times on the first screen if that start the enterprise setup :)