Teams IP Phones and Android Device Administrator need on Intune

%3CLINGO-SUB%20id%3D%22lingo-sub-2448135%22%20slang%3D%22en-US%22%3ETeams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2448135%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHey%20community%20fellows%2C%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20wanted%20to%20check%20if%20anybody%20else%20face%20the%20same%20challenge%20with%20Teams%20Android%20Devices%20for%20personal%20usage%20in%20combination%20with%20Intune%20MDM%20profile%20for%20users.%20We%20started%20to%20face%20issue%20on%20Teams%20Android%20IP%20phones%20on%20latest%20firmware%20that%20our%20users%20are%20not%20able%20to%20sign-in%20and%20they%20are%20looping%20on%20screen%20with%20the%20sign-in%20code.%20We%20found%20out%20that%20it%20is%20because%20of%20missing%20Android%20Device%20Administrator%20enrollment%20method%20in%20Intune%20MDM%20profile.%20Once%20we%20enable%20this%20enrollment%20method%20for%20users%20the%20sign-in%20is%20possible.%20Audiocodes%20stated%20that%20within%20latest%20release%20of%20their%20phone%20software%201.10%20they%20followed%20the%20requirements%20of%20Microsoft%20to%20meet%20requirements%20especially%20in%20area%20of%20Intune.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAs%20described%20here%20the%20Android%20Device%20Administrator%20enrollment%20is%20used%20and%20needed%20for%20Teams%20Devices.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20title%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fdevices%2Fphones-displays-deploy%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fdevices%2Fphones-displays-deploy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fdevices%2Fphones-displays-deploy%3C%2FA%3E%3CSPAN%3E%20I%20see%20it%20as%20highly%20conflicting%20with%20another%20recommendation%20and%20statement%20of%20Microsoft%20in%20the%20article%20about%20this%20enrollment%20method%20not%20to%20use%20it.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20title%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-enroll-device-administrator%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-enroll-device-administrator%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-enroll-device-administrator%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAnybody%20else%20facing%20same%20challenge%20adjusting%20this%20policy%20for%20users%20just%20because%20of%20Teams%20phones%3F%20Maybe%20question%20to%20Teams%20devices%20product%20team%20if%20there%20is%20future%20strategy%20to%20move%20away%20from%20ADA%20to%20Android%20Enterprise%3F%20Or%20is%20it%20the%20choice%20of%20IP%20phone%20vendors%3F%20%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2448135%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ETeams%20Intune%20Android%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2451479%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2451479%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F263389%22%20target%3D%22_blank%22%3E%40DaveChomi%3C%2FA%3E%26nbsp%3B%20%26nbsp%3BI%20hope%20you%20get%20a%20response%20from%20the%20community.%26nbsp%3B%20In%20the%20meantime%2C%20I%20will%20share%20this%20discussion%20with%20the%20Devices%20PM.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2462339%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2462339%22%20slang%3D%22en-US%22%3EThank%20you%20for%20the%20response.%20How%20do%20you%20then%20deal%20with%20configuration%20of%20Intune%20so%20as%20the%20ADA%20is%20used%20only%20for%20Teams%20devices%20and%20for%20mobile%20phones%20you%20use%20Android%20Enterprise%3F%20Is%20there%20some%20prioritization%20like%20if%20AE%20is%20available%20prefer%20that%20one%20and%20if%20not%20use%20DA%3F%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2882756%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2882756%22%20slang%3D%22en-US%22%3EI'm%20so%20glad%20you%20brought%20this%20up.%20I'm%20experiencing%20the%20same%20issue%20with%20a%20few%20of%20my%20customers%20and%20the%20conflicting%20information%20one%20whether%20or%20not%20to%20use%20device%20administrator%20(which%20my%20customer%20doesn't%20want%20to%20use).%20It%20will%20be%20interesting%20to%20see%20what%20Microsoft%20suggests.%3C%2FLINGO-BODY%3E
Frequent Contributor

Hey community fellows, 

I wanted to check if anybody else face the same challenge with Teams Android Devices for personal usage in combination with Intune MDM profile for users. We started to face issue on Teams Android IP phones on latest firmware that our users are not able to sign-in and they are looping on screen with the sign-in code. We found out that it is because of missing Android Device Administrator enrollment method in Intune MDM profile. Once we enable this enrollment method for users the sign-in is possible. Audiocodes stated that within latest release of their phone software 1.10 they followed the requirements of Microsoft to meet requirements especially in area of Intune.

As described here the Android Device Administrator enrollment is used and needed for Teams Devices.

https://docs.microsoft.com/en-us/microsoftteams/devices/phones-displays-deploy I see it as highly conflicting with another recommendation and statement of Microsoft in the article about this enrollment method not to use it.

https://docs.microsoft.com/en-us/mem/intune/enrollment/android-enroll-device-administrator

Anybody else facing same challenge adjusting this policy for users just because of Teams phones? Maybe question to Teams devices product team if there is future strategy to move away from ADA to Android Enterprise? Or is it the choice of IP phone vendors?

5 Replies

Hi @DaveChomi   I hope you get a response from the community.  In the meantime, I will share this discussion with the Devices PM.

@DaveChomi Yes, this has been a common issue for over a year now. You need to enable device administrator in order to get Teams Desk Phones to sign in at all. It's a huge flaw.

Thank you for the response. How do you then deal with configuration of Intune so as the ADA is used only for Teams devices and for mobile phones you use Android Enterprise? Is there some prioritization like if AE is available prefer that one and if not use DA?
I'm so glad you brought this up. I'm experiencing the same issue with a few of my customers and the conflicting information one whether or not to use device administrator (which my customer doesn't want to use). It will be interesting to see what Microsoft suggests.

@JBoslooper_Magenium 

After discussing this topic with Softies I have confirmation that ADA is for now the only way. "For now" is the important part of that statement. So there are already thoughts to change that but currently nothing on roadmap. That means we have to live with ADA still for some time and there is no other way around :(