Will Intune device-only subscription get additional value in FY27
Will the Intune device-only subscription (Microsoft Intune announces device-only subscription for shared resources | Microsoft Community Hub) get the additional features which Intune P1 will get in FY27 (Microsoft 365 adds advanced Microsoft Intune solutions at scale - Microsoft Intune Blog), Intune Remote Help, Intune Advanced Analytics and Intune P2? This would have a huge impact of our planning how to manage special purpose devices in production environments without any user affinity. Deploying security and configuration settings, Windows Autopilot for Windows IoT Enterprise LTSC kiosk deployment, Windows Autopatch (servicing), Remote Help and FOTA for Zebra devices would be drivers to add these production devices to Intune.
Intune MAM BYOD: Remove Account message for iOS devices
Hello, I am seeing an issue for Intune MAM BYOD(iOS) users. After a user account password reset, it causes Intune to remove the account configured from mobile applications like MS Outlook, Work, OneDrive, etc. Current Intune Configuration: Done - App Protection Policy Done - Conditional access policy --> Grant --> Requires app protection policy (checked) Users had to re-enrol to access his/her data. Here is the screenshot, Thank you,
Microsoft Managed Home Screen: Unwanted Samsung One UI 8.0 Elements Appearing
Hello Tech Community, Our organization is currently deploying a configuration in Microsoft Intune using a Corporate-owned dedicated device enrollment profile. We’ve applied a device restriction policy to configure Samsung tablets in Multi-app Kiosk mode, with Managed Home Screen set as the launcher. Instead of using an app configuration policy, Managed Home Screen is configured through the device restrictions policy. We’ve left the device navigation options unconfigured, which should hide the following UI elements: Android Overview button Android Home button Android App drawer Once all policies and required apps are installed, Managed Home Screen successfully acts as the launcher for end-users to sign in. Overall, this works well; however, we’ve encountered an intermittent issue: After multiple lock/unlock cycles, the navigation bar sometimes reappears, showing the Overview, Home, and App Drawer buttons. This allows users to access background apps that are not exposed through Managed Home Screen, which defeats the kiosk experience. Device details: Samsung Galaxy Tab S10 FE Android 16, One UI 8.0 Managed Home Screen version: 2.2.0.107721 Has anyone experienced this behavior or have recommendations to prevent these UI elements from reappearing? I’ll gladly provide additional details about our configuration if needed. Thank you!
AzureADSharedMode - Teams without PIN
I prepared in Intune profile for Samsung devices in kiosk mode with a multi-app setting. I added Teams, Outlook, Egde and Managed Home Screen as apps. In addition, I also created a configuration profile for the Managed Home Screen application in which I set that it is necessary to configure a PIN for the session. I also set the Require PIN code after returning from screen saver option. Everything works great until the user leaves the Teams app on or someone calls the user logged into Teams. At this point, no PIN is needed to unlock the device. You can easily access Teams of the logged-in user. The user is asked for the session PIN only when he wants to switch to another app. I didn't set screen lock in android settings because in my opinion it's pointless since the device is in shared mode. Have you encountered anything like this? It poses a potential security risk if a logged-in user leaves the Teams app open, puts the phone down and walks away from it, and at that moment someone calls the phone and the person who picks it up without probelm gets access to the logged-in user's teams.
Android COPE - Google Zero Touch Enrollment - Device Resets automatically
Hello, Encountered a strange behavior of an Android mobile phone, enrolled in Intune through Google's Zero Touch method. Device is a Samsung running Android 15. Device is enrolled, reports that all necessary configurations and compliance policies are met, yet the device is prompted with a pop-up notification saying that it belongs to the company and that in order for the device setup to be complete, it will be reset, with a countdown of ~ 2 hours. Multiple resets occurred, yet it's stuck in the same loop. Any idea what might trigger this behavior? No other COPE enrolled phone does this. The user's current Android 14 device is running properly, but it's enrolled as BYOD.
Managed Home Screen - Volume Control
Hey everyone, I'm hitting a bit of a wall with an Android kiosk dedicated device setup using Intune and the Managed Home Screen app, and I'm hoping someone here might have some insights. The setup is mostly working great, but I've run into a specific issue regarding volume control. Within the Managed Home Screen, users are only able to adjust the media volume. They have no control over the call volume or notification volume. This is problematic for our use case, as users occasionally need to adjust these other volume levels. I've dug through the Intune policies extensively, but I can't seem to find any specific setting or configuration profile that exposes these volume controls within the Managed Home Screen environment. Has anyone encountered this before? Is there a known way to enable users to change call and notification volumes on an Android dedicated device with Managed Home Screen, either directly through Intune policies or perhaps via a custom configuration or OEMConfig? I'm truly at my wits' end with this one, so any suggestions or workarounds would be hugely appreciated! Thanks in advance for your help. Inside the MHS When exited MHS:
Intune Android Fully Managed - Play Store Error
Hi all, I've just noticed that our Android Fully Managed handsets are getting an error when opening the Play Store, which says Update Google Play Store - Google Play Store won't run unless you update. We have never seen this before and have been running this profile for 18 months now. I've tried clearing the Store cache, uninstalling Play Store updates, no avail. I even wiped my device, but it's still the same. Any help would be much appreciated. Thanks.Video playback not working within Android Enterprise
Hi, we're working on an issue, we can't solve right now. Let me outline this in detail: The Android device is managed within the deployment type COBO. (Fully managed user device) The Apps like OneDrive are protected with App Protection Polices which allow to save files to OneDrive, Sharepoint and to local device storage. The Gallery App (com.sec.android.gallery3d) is published and installed as an Android Enterprise system app. Downloading a video file from onedrive is working because APP is allowing it. Playing this video File inside OneDrive is working. On to the issues: Playing this video File inside the Files- App is not working. ("There is an unknown error") Playing this video File inside the Gallery- App is not working. (The thumbnail is only a grey squared picture with an exclamation mark.) Sometimes, directly after downloading it is playing for about 5 seconds, afterwards theres another popup stating some codec issues. (No matter what type of video is used). We've tested this with different smartphone vendors and different M365 tenants already. Are there any ideas or do you experienced similar issues? Any feedback is highly appreciated. Kind regards PatrickNew Blog Post: Android: Browser Access to be Enabled by Default for All Android Users
🔐#Android in #msintune: Upcoming Security Update for Microsoft Entra ID on Android! Starting July 2025, Microsoft Entra ID device registration will be hardware-bound, enhancing security and automatically enabling browser access. 🚀 Key Changes: ✅ Device identities will be tied to hardware for stronger security. ✅ Enable Browser Access (EBA) will be retired. ✅ Browser access will be enabled by default during registration. 📌 No action needed—this change will be applied automatically! Stay informed and prepare for a more secure device registration process. #MicrosoftIntune #MicrosoftEntraID #Android #mvpbuzz https://www.linkedin.com/pulse/microsoft-entra-browser-access-enabled-default-all-android-khorshed-5d8ee?utm_source=share&utm_medium=member_ios&utm_campaign=share_via
