android
72 TopicsAndroid COPE - Google Zero Touch Enrollment - Device Resets automatically
Hello, Encountered a strange behavior of an Android mobile phone, enrolled in Intune through Google's Zero Touch method. Device is a Samsung running Android 15. Device is enrolled, reports that all necessary configurations and compliance policies are met, yet the device is prompted with a pop-up notification saying that it belongs to the company and that in order for the device setup to be complete, it will be reset, with a countdown of ~ 2 hours. Multiple resets occurred, yet it's stuck in the same loop. Any idea what might trigger this behavior? No other COPE enrolled phone does this. The user's current Android 14 device is running properly, but it's enrolled as BYOD.61Views0likes0CommentsManaged Home Screen - Volume Control
Hey everyone, I'm hitting a bit of a wall with an Android kiosk dedicated device setup using Intune and the Managed Home Screen app, and I'm hoping someone here might have some insights. The setup is mostly working great, but I've run into a specific issue regarding volume control. Within the Managed Home Screen, users are only able to adjust the media volume. They have no control over the call volume or notification volume. This is problematic for our use case, as users occasionally need to adjust these other volume levels. I've dug through the Intune policies extensively, but I can't seem to find any specific setting or configuration profile that exposes these volume controls within the Managed Home Screen environment. Has anyone encountered this before? Is there a known way to enable users to change call and notification volumes on an Android dedicated device with Managed Home Screen, either directly through Intune policies or perhaps via a custom configuration or OEMConfig? I'm truly at my wits' end with this one, so any suggestions or workarounds would be hugely appreciated! Thanks in advance for your help. Inside the MHS When exited MHS:264Views0likes6CommentsWork Profile Contacts in Android Auto BYOD
Hey there, is it possible to List the Contacts from the Android Work-Profile in Android Auto? People in our Organization are not able to search for Work-Profile-Contacts via Android Auto. When Contacts from the Work-Profile are calling, the Name is showing up correctly and is also correctly displayed in the caller history, but when using the Phone app on the cars display it's not possible to find the contacts. What have we tried so far: Installed Android Auto App on Work-Profile Enabled "Connected Apps" Contact Sync via Outlook App Contact Sync via Gmail / Google Contacts Installed Google Phone App on both profiles and set it to the Default call Application Installed Samsung Phone App on both profiles and set it to the Default call Application Enabled the Work Profile Switch in the Android Auto setting (seems only usefull for notifications) Tried different Phone and Car Vendors One more Information: When Using the Call or Contact App on Personal-Profile and searching for Work Contacts, they are showing up as expected. I believe maybe it's not supported by Google? Is anybody facing the same issue or are there some Workaround i have not thought about=Solved269Views0likes2CommentsIntune Android Fully Managed - Play Store Error
Hi all, I've just noticed that our Android Fully Managed handsets are getting an error when opening the Play Store, which says Update Google Play Store - Google Play Store won't run unless you update. We have never seen this before and have been running this profile for 18 months now. I've tried clearing the Store cache, uninstalling Play Store updates, no avail. I even wiped my device, but it's still the same. Any help would be much appreciated. Thanks.67Views0likes0CommentsVideo playback not working within Android Enterprise
Hi, we're working on an issue, we can't solve right now. Let me outline this in detail: The Android device is managed within the deployment type COBO. (Fully managed user device) The Apps like OneDrive are protected with App Protection Polices which allow to save files to OneDrive, Sharepoint and to local device storage. The Gallery App (com.sec.android.gallery3d) is published and installed as an Android Enterprise system app. Downloading a video file from onedrive is working because APP is allowing it. Playing this video File inside OneDrive is working. On to the issues: Playing this video File inside the Files- App is not working. ("There is an unknown error") Playing this video File inside the Gallery- App is not working. (The thumbnail is only a grey squared picture with an exclamation mark.) Sometimes, directly after downloading it is playing for about 5 seconds, afterwards theres another popup stating some codec issues. (No matter what type of video is used). We've tested this with different smartphone vendors and different M365 tenants already. Are there any ideas or do you experienced similar issues? Any feedback is highly appreciated. Kind regards Patrick1.2KViews1like3CommentsAzureADSharedMode - Teams without PIN
I prepared in Intune profile for Samsung devices in kiosk mode with a multi-app setting. I added Teams, Outlook, Egde and Managed Home Screen as apps. In addition, I also created a configuration profile for the Managed Home Screen application in which I set that it is necessary to configure a PIN for the session. I also set the Require PIN code after returning from screen saver option. Everything works great until the user leaves the Teams app on or someone calls the user logged into Teams. At this point, no PIN is needed to unlock the device. You can easily access Teams of the logged-in user. The user is asked for the session PIN only when he wants to switch to another app. I didn't set screen lock in android settings because in my opinion it's pointless since the device is in shared mode. Have you encountered anything like this? It poses a potential security risk if a logged-in user leaves the Teams app open, puts the phone down and walks away from it, and at that moment someone calls the phone and the person who picks it up without probelm gets access to the logged-in user's teams.192Views1like1CommentNew Blog Post: Android: Browser Access to be Enabled by Default for All Android Users
🔐#Android in #msintune: Upcoming Security Update for Microsoft Entra ID on Android! Starting July 2025, Microsoft Entra ID device registration will be hardware-bound, enhancing security and automatically enabling browser access. 🚀 Key Changes: ✅ Device identities will be tied to hardware for stronger security. ✅ Enable Browser Access (EBA) will be retired. ✅ Browser access will be enabled by default during registration. 📌 No action needed—this change will be applied automatically! Stay informed and prepare for a more secure device registration process. #MicrosoftIntune #MicrosoftEntraID #Android #mvpbuzz https://www.linkedin.com/pulse/microsoft-entra-browser-access-enabled-default-all-android-khorshed-5d8ee?utm_source=share&utm_medium=member_ios&utm_campaign=share_via330Views0likes0CommentsAndroid Screen Off if possible!
We have the "Time to Lock screen" set to 1 minute, which is fine, but it stays on the lock screen draining the battery, how do i set the screen to turn off without having to press the power button? i cannot find this in any settings? this sounds like a Basic feature to have! Using a Samsung A9+ Thanks.37Views0likes0CommentsGuidance with Outlook App Configuration Policies and Conf.Keys for Android
First off, I'm referring to the Configuration Key com.microsoft.intune.mam.AllowedAccountUPNs, documented here https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/outlook-for-ios-and-android-configuration-with-microsoft-intune#organization-allowed-accounts-mode-settings-1 For Android, there is one Configuration Key listed, this one. The page doesn't tell us the value type, though by its name, it seems like it should be an array of strings. When it comes down to using it, we have to set it to String for the type, and then I'm having hit and miss results with the initial account setup. Sometimes, it's letting me setup just the UPN of the current user, and then later I can add additional accounts that are also listed in the array. This is what I would say is the good alternative to the On/Off switch for Organizational Accounts Only Mode. However, sometimes, new Outlook setups will show all the UPNs in the array, as if it is one string, which obviously doesn't work at all. I am hoping somebody can help me here with how this key is supposed to work, or not. Anyone have much experience with this that can shed any light? Thanks in advance.Solved8.7KViews0likes12CommentsDeploying and Activating Microsoft Defender on Android Kiosk Devices Without User Interaction
I’m working with an Android Kiosk device that deploys two applications. This device is enrolled under 'Corporate-owned dedicated devices' Enrollment Profiles and isn’t assigned to any specific user. Our company requires Microsoft Defender on all devices, but I’m encountering issues with Defender activation —it won’t activate without a user login. Since this is a dedicated Kiosk device with no assigned user, this setup doesn’t align well with our needs. Are there any options to deploy and activate Microsoft Defender on Android Kiosk devices without requiring user interaction? Any guidance on configuring Defender in this scenario would be greatly appreciated."588Views0likes3Comments