Teams IP Phones and Android Device Administrator need on Intune

%3CLINGO-SUB%20id%3D%22lingo-sub-2448135%22%20slang%3D%22en-US%22%3ETeams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2448135%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHey%20community%20fellows%2C%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20wanted%20to%20check%20if%20anybody%20else%20face%20the%20same%20challenge%20with%20Teams%20Android%20Devices%20for%20personal%20usage%20in%20combination%20with%20Intune%20MDM%20profile%20for%20users.%20We%20started%20to%20face%20issue%20on%20Teams%20Android%20IP%20phones%20on%20latest%20firmware%20that%20our%20users%20are%20not%20able%20to%20sign-in%20and%20they%20are%20looping%20on%20screen%20with%20the%20sign-in%20code.%20We%20found%20out%20that%20it%20is%20because%20of%20missing%20Android%20Device%20Administrator%20enrollment%20method%20in%20Intune%20MDM%20profile.%20Once%20we%20enable%20this%20enrollment%20method%20for%20users%20the%20sign-in%20is%20possible.%20Audiocodes%20stated%20that%20within%20latest%20release%20of%20their%20phone%20software%201.10%20they%20followed%20the%20requirements%20of%20Microsoft%20to%20meet%20requirements%20especially%20in%20area%20of%20Intune.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAs%20described%20here%20the%20Android%20Device%20Administrator%20enrollment%20is%20used%20and%20needed%20for%20Teams%20Devices.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20title%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fdevices%2Fphones-displays-deploy%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fdevices%2Fphones-displays-deploy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fdevices%2Fphones-displays-deploy%3C%2FA%3E%3CSPAN%3E%20I%20see%20it%20as%20highly%20conflicting%20with%20another%20recommendation%20and%20statement%20of%20Microsoft%20in%20the%20article%20about%20this%20enrollment%20method%20not%20to%20use%20it.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CA%20title%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-enroll-device-administrator%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-enroll-device-administrator%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fandroid-enroll-device-administrator%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAnybody%20else%20facing%20same%20challenge%20adjusting%20this%20policy%20for%20users%20just%20because%20of%20Teams%20phones%3F%20Maybe%20question%20to%20Teams%20devices%20product%20team%20if%20there%20is%20future%20strategy%20to%20move%20away%20from%20ADA%20to%20Android%20Enterprise%3F%20Or%20is%20it%20the%20choice%20of%20IP%20phone%20vendors%3F%20%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2448135%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ETeams%20Intune%20Android%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2451479%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2451479%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F263389%22%20target%3D%22_blank%22%3E%40DaveChomi%3C%2FA%3E%26nbsp%3B%20%26nbsp%3BI%20hope%20you%20get%20a%20response%20from%20the%20community.%26nbsp%3B%20In%20the%20meantime%2C%20I%20will%20share%20this%20discussion%20with%20the%20Devices%20PM.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2462339%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20IP%20Phones%20and%20Android%20Device%20Administrator%20need%20on%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2462339%22%20slang%3D%22en-US%22%3EThank%20you%20for%20the%20response.%20How%20do%20you%20then%20deal%20with%20configuration%20of%20Intune%20so%20as%20the%20ADA%20is%20used%20only%20for%20Teams%20devices%20and%20for%20mobile%20phones%20you%20use%20Android%20Enterprise%3F%20Is%20there%20some%20prioritization%20like%20if%20AE%20is%20available%20prefer%20that%20one%20and%20if%20not%20use%20DA%3F%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hey community fellows, 

I wanted to check if anybody else face the same challenge with Teams Android Devices for personal usage in combination with Intune MDM profile for users. We started to face issue on Teams Android IP phones on latest firmware that our users are not able to sign-in and they are looping on screen with the sign-in code. We found out that it is because of missing Android Device Administrator enrollment method in Intune MDM profile. Once we enable this enrollment method for users the sign-in is possible. Audiocodes stated that within latest release of their phone software 1.10 they followed the requirements of Microsoft to meet requirements especially in area of Intune.

As described here the Android Device Administrator enrollment is used and needed for Teams Devices.

https://docs.microsoft.com/en-us/microsoftteams/devices/phones-displays-deploy I see it as highly conflicting with another recommendation and statement of Microsoft in the article about this enrollment method not to use it.

https://docs.microsoft.com/en-us/mem/intune/enrollment/android-enroll-device-administrator

Anybody else facing same challenge adjusting this policy for users just because of Teams phones? Maybe question to Teams devices product team if there is future strategy to move away from ADA to Android Enterprise? Or is it the choice of IP phone vendors?

3 Replies

Hi @DaveChomi   I hope you get a response from the community.  In the meantime, I will share this discussion with the Devices PM.

@DaveChomi Yes, this has been a common issue for over a year now. You need to enable device administrator in order to get Teams Desk Phones to sign in at all. It's a huge flaw.

Thank you for the response. How do you then deal with configuration of Intune so as the ADA is used only for Teams devices and for mobile phones you use Android Enterprise? Is there some prioritization like if AE is available prefer that one and if not use DA?