Android COPE - Google Zero Touch Enrollment - Device Resets automatically
Hello, Encountered a strange behavior of an Android mobile phone, enrolled in Intune through Google's Zero Touch method. Device is a Samsung running Android 15. Device is enrolled, reports that all necessary configurations and compliance policies are met, yet the device is prompted with a pop-up notification saying that it belongs to the company and that in order for the device setup to be complete, it will be reset, with a countdown of ~ 2 hours. Multiple resets occurred, yet it's stuck in the same loop. Any idea what might trigger this behavior? No other COPE enrolled phone does this. The user's current Android 14 device is running properly, but it's enrolled as BYOD.
Managed Home Screen - Volume Control
Hey everyone, I'm hitting a bit of a wall with an Android kiosk dedicated device setup using Intune and the Managed Home Screen app, and I'm hoping someone here might have some insights. The setup is mostly working great, but I've run into a specific issue regarding volume control. Within the Managed Home Screen, users are only able to adjust the media volume. They have no control over the call volume or notification volume. This is problematic for our use case, as users occasionally need to adjust these other volume levels. I've dug through the Intune policies extensively, but I can't seem to find any specific setting or configuration profile that exposes these volume controls within the Managed Home Screen environment. Has anyone encountered this before? Is there a known way to enable users to change call and notification volumes on an Android dedicated device with Managed Home Screen, either directly through Intune policies or perhaps via a custom configuration or OEMConfig? I'm truly at my wits' end with this one, so any suggestions or workarounds would be hugely appreciated! Thanks in advance for your help. Inside the MHS When exited MHS:
Intune Android Fully Managed - Play Store Error
Hi all, I've just noticed that our Android Fully Managed handsets are getting an error when opening the Play Store, which says Update Google Play Store - Google Play Store won't run unless you update. We have never seen this before and have been running this profile for 18 months now. I've tried clearing the Store cache, uninstalling Play Store updates, no avail. I even wiped my device, but it's still the same. Any help would be much appreciated. Thanks.Video playback not working within Android Enterprise
Hi, we're working on an issue, we can't solve right now. Let me outline this in detail: The Android device is managed within the deployment type COBO. (Fully managed user device) The Apps like OneDrive are protected with App Protection Polices which allow to save files to OneDrive, Sharepoint and to local device storage. The Gallery App (com.sec.android.gallery3d) is published and installed as an Android Enterprise system app. Downloading a video file from onedrive is working because APP is allowing it. Playing this video File inside OneDrive is working. On to the issues: Playing this video File inside the Files- App is not working. ("There is an unknown error") Playing this video File inside the Gallery- App is not working. (The thumbnail is only a grey squared picture with an exclamation mark.) Sometimes, directly after downloading it is playing for about 5 seconds, afterwards theres another popup stating some codec issues. (No matter what type of video is used). We've tested this with different smartphone vendors and different M365 tenants already. Are there any ideas or do you experienced similar issues? Any feedback is highly appreciated. Kind regards Patrick
AzureADSharedMode - Teams without PIN
I prepared in Intune profile for Samsung devices in kiosk mode with a multi-app setting. I added Teams, Outlook, Egde and Managed Home Screen as apps. In addition, I also created a configuration profile for the Managed Home Screen application in which I set that it is necessary to configure a PIN for the session. I also set the Require PIN code after returning from screen saver option. Everything works great until the user leaves the Teams app on or someone calls the user logged into Teams. At this point, no PIN is needed to unlock the device. You can easily access Teams of the logged-in user. The user is asked for the session PIN only when he wants to switch to another app. I didn't set screen lock in android settings because in my opinion it's pointless since the device is in shared mode. Have you encountered anything like this? It poses a potential security risk if a logged-in user leaves the Teams app open, puts the phone down and walks away from it, and at that moment someone calls the phone and the person who picks it up without probelm gets access to the logged-in user's teams.New Blog Post: Android: Browser Access to be Enabled by Default for All Android Users
🔐#Android in #msintune: Upcoming Security Update for Microsoft Entra ID on Android! Starting July 2025, Microsoft Entra ID device registration will be hardware-bound, enhancing security and automatically enabling browser access. 🚀 Key Changes: ✅ Device identities will be tied to hardware for stronger security. ✅ Enable Browser Access (EBA) will be retired. ✅ Browser access will be enabled by default during registration. 📌 No action needed—this change will be applied automatically! Stay informed and prepare for a more secure device registration process. #MicrosoftIntune #MicrosoftEntraID #Android #mvpbuzz https://www.linkedin.com/pulse/microsoft-entra-browser-access-enabled-default-all-android-khorshed-5d8ee?utm_source=share&utm_medium=member_ios&utm_campaign=share_viaAndroid Screen Off if possible!
We have the "Time to Lock screen" set to 1 minute, which is fine, but it stays on the lock screen draining the battery, how do i set the screen to turn off without having to press the power button? i cannot find this in any settings? this sounds like a Basic feature to have! Using a Samsung A9+ Thanks.
Deploying and Activating Microsoft Defender on Android Kiosk Devices Without User Interaction
I’m working with an Android Kiosk device that deploys two applications. This device is enrolled under 'Corporate-owned dedicated devices' Enrollment Profiles and isn’t assigned to any specific user. Our company requires Microsoft Defender on all devices, but I’m encountering issues with Defender activation —it won’t activate without a user login. Since this is a dedicated Kiosk device with no assigned user, this setup doesn’t align well with our needs. Are there any options to deploy and activate Microsoft Defender on Android Kiosk devices without requiring user interaction? Any guidance on configuring Defender in this scenario would be greatly appreciated."
