Archive: Intune announces preview of support for Android corporate-owned, fully managed devices

Published Jan 17 2019 01:58 PM 47.9K Views

By Arnab Biswas | Intune Program Manager

 

Updated 12/19/19 - We have received over 300 comments on the Android preview blog posts, and in those comments and occasional subsequent support cases, you helped us deliver Android Enterprise Fully Managed as generally available. You provided over 58 pieces of actionable feature feedback based on your experience with preview.

More information about the GA release can be found in our blog here: Microsoft Intune support for Android Enterprise fully managed devices is now generally available.

As this feature is now GA, new comments on this post will be turned off. As always, we want to hear from you! If you have any suggestions, questions, or comments, please visit us on our Tech Community page or our Twitter @IntuneSuppTeam. Your continued feedback helps make the product better, we are grateful for this community, thank you!

 

Updated 7/23/19: We have made progress with our Fully Managed support. You can find more updates and discussions on these developments on the following blog posts:

 

Updated 4/17/19: You may notice a new app in Google Play – it’s called the Microsoft Intune app. This app is in preview for new functionality for fully managed devices. We are rolling out the end-to-end scenario with this app and we expect it to be live by the first part of the 4/22/2019 week. More on this expanding workflow will be posted shortly!

 

Today we are releasing a preview of Android corporate-owned fully managed (formerly called Corporate Owned, Business Only (COBO) by Google) device management scenarios in Intune. This is Intune’s newest addition to its list of Android Enterprise management capabilities preceded by work profiles and dedicated (kiosk) devices. 

 

NOTE - the preview is rolling out today - 1/17/19 and is expected to finish up by end of day. If you're on Government Cloud please note this may take until 1/18/19 to see the preview feature.

 

Android fully managed is one of the “device owner” management scenarios in the Android enterprise solution set that enables productivity scenarios for users on corporate devices while allowing IT admins to manage the entire device with an extended set of policy controls. This complements the Android Enterprise dedicated device solution set we released last year, which was focused on task workers and user-less devices. The extended policy capabilities in fully managed scenarios are only intended for corporate devices, which is why there are more controls and settings available here than on personal devices with work profiles. Combining the capabilities of these three solution sets now provides you more control over your Android device landscape.

 

Android fully managed is one of the “device owner” management scenarios in the Android Enterprise solution set that enables productivity scenarios for users while allowing IT admins to manage the entire device and enforce an extended range of policy controls, beyond that which is possible with work profiles on personal devices. Fully managed devices are company-owned general-purpose Android devices that are associated with a single user. These devices are assigned to individuals for getting their work done.

 

What is available in preview?

In today’s release, our Android fully managed preview focuses on device enrollment, configuration and app distribution scenarios. Our goal for this preview is to demonstrate the Android fully managed capabilities that we have built and gather feedback and iterate before this feature becomes generally available in Intune.

 

This preview supports the following Android fully managed scenarios in Intune:

  • Device enrollment using NFC, token entry, QR code and Zero Touch
  • Device configuration for user groups
  • App distribution and configuration for user groups
 
There are a few scenarios not supported in this preview but will be completed for general availability, including:
  • Conditional access
  • Device compliance
  • App protection policies
  • Device group targeting
  • Certificate management
  • Knox Mobile Enrollment
  • Company Portal app for end-user scenarios
 
These scenarios may not function as expected on Android fully managed devices during this preview.
 
Device enrollment for Android fully managed devices
We’ve started with enrollment since this is the first step the IT admin and user must take to bring the device under IT management. The IT admin enables enrollment for fully managed devices in the Intune tenant. This generates a single enrollment token and QR code to be used for enrolling fully managed Android devices to the tenant. This single token is valid for all your users and will not expire; note that this token is for Microsoft Intune and is not specific to your tenant. A user requires both the enrollment token and valid user credentials to authenticate and enroll a device to your organization. The enrollment token can be disabled by the IT admin to prevent enrollment of fully managed devices.

 

QRCode.png

Enable corporate-owned fully managed device enrollment to generate QR code for enrollment.

 

Android fully managed devices support a variety of enrollment methods such as NFC, token entry, QR code and Zero Touch. These enrollment methods can be initiated on a new or factory-reset device so that the device is enrolled, user affinity is established, and device configuration policies are applied when the device is being set up for the first time. Enrollment options for Android devices are in documentation here: https://docs.microsoft.com/intune/android-enroll.

 

You can see the enrollment workflow in the short clip posted below. 

 

Device configuration for Android fully managed devices

Device settings that apply to device owner in Intune are supported on Android fully managed devices. This means that IT admins can configure more advanced device-level settings on a fully managed device than on a work profile such as allow app installation only from managed Google Play, block uninstallation of managed apps, prevent users from factory resetting devices, control system update behavior, and more.

 

Note that dedicated device or kiosk settings are not applicable to Android fully managed devices. This preview supports targeting of device configuration policies to user groups only. Deploying device configuration policies to device groups may not function as expected during this preview.

 

App distribution and configuration for Android fully managed devices

Like existing Android enterprise scenarios (work profile and dedicated devices) in Intune, apps are distributed to Android fully managed devices using managed Google Play. In addition, you can use app configuration policies to supply settings to managed apps. You can configure email or VPN app settings in this manner as well.

 

Note that this preview supports deploying apps to user groups only. Deploying apps to device groups may not function as expected during this preview.

 

What are we still working on?

We are continuing to build Android fully managed support for the following key Intune features that will be announced when Android fully managed becomes generally available:

  • Conditional Access and compliance policies
  • App Protection Policies
  • Knox Mobile Enrollment
  • Certificate management
  • Device group targeting for profiles and apps
  • Dedicated user interface for configuring email, Wi-Fi or VPN
  • A new end-user app.

 

Known issues

  • You may need to tap on “Please click here to continue…” to complete device enrollment: during enrolling a fully managed device, you may see this page. Tap on “Please click here to continue…” to complete device enrollment.

 select here to continue.png

 

Customer support for this preview

Note that the preview features are implemented to Microsoft Intune production standards. However, not all Intune features are available to be used with Android fully managed user devices during the preview as outlined above. The preview features are fully supported through our usual Intune support channels and are clearly labeled with “(preview)” in the Intune console.

 

How to reach us?

As you review the Android fully managed preview scenarios, we would love to hear your feedback on IT admin's enrollment profile configuration and end-user's device enrollment experiences.

 

Keep us posted on your Android plans through comments on this blog post, through Twitter (#IntuneSuppTeam), and on UserVoice.

 

Documentation:

Blog post updates:

  • 12/19/19 with an update that this preview feature is now GA!
44 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-356269%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356269%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3EGlad%20it%20worked%20for%20you!%20And%20thanks%20for%20pointing%20out%20the%20typo%2C%20I've%20edited%20the%20post%20just%20to%20be%20really%20clear%20in%20case%20someone%20else%20is%20following%20it.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356262%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356262%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3E%2C%20thanks%20for%20the%20QR%20code%20tip.%20I%20managed%20to%20customize%20our%20QR%20code%20and%20it%20worked%20fine%2C%20all%20system%20apps%20enabled.%20I%20do%20think%20their%20was%20a%20small%20typo.%20The%20command%20I%20used%20was%3A%26nbsp%3B%3CSTRONG%3E%3CFONT%3E%22android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%22%3Atrue%3C%2FFONT%3E%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CFONT%3EWith%20%22enabled%22%20instead%20of%20%22enable%22%20and%20the%20%22True%22%20statement.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3EI%20do%20hope%20MS%20will%20build%20this%20functionality%20into%20the%20Intune%20Portal.%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356152%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356152%22%20slang%3D%22en-US%22%3E%3CDIV%3E%3CFONT%3EFor%20anyone%20reading%20along%20who%20needs%20system%20apps%20(%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3E)%20enabled%2C%20it%20*is*%20possible%2C%20you%20just%20have%20to%20tinker%20a%20little%20bit.%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EAs%20mentioned%20above%2C%20you%20can%20already%20do%20it%20with%20Zero%20Touch%20(by%20adding%20the%20%22PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%22%20command%20as%20mentioned%20above%20in%20DPC%20Extras)%20and%20Knox%20Mobile%20Enrollment%20(by%20ticking%20the%20%22Leave%20all%20system%20apps%20enabled%22%20box).%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EIf%20you're%20NFC'ing%2C%20then%20this%20blog%20from%20MS%20helps%3A%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fcbernier%2F2018%2F10%2F15%2Fnfc-based-android-enterprise-device-enrollment-with-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fcbernier%2F2018%2F10%2F15%2Fnfc-based-android-enterprise-device-enrollment-with-microsoft-intune%2F%3C%2FA%3E%20-%20and%20add%20the%20PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%20command.%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EIf%20you're%20QR%20coding%E2%80%A6%20then%20what%20I%20did%20is%3A%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3E1)%20Go%20to%20%22Corporate-owned%2C%20fully%20managed%20user%20devices%20(Preview)%22%2C%20save%20the%20QR%20code%20as%20a%20picture%3CBR%20%2F%3E2)%20Decode%20the%20QR%20code%20in%20an%20online%20decoder%20(Google%2FBing%20has%20many)%3CBR%20%2F%3E3)%20Take%20the%20produced%20text%2C%20add%20in%20the%20PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%20command%3CBR%20%2F%3E4)%20Reencode%20the%20text%20to%20a%20new%20QR%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EJust%20to%20be%20clear%20the%20full%20command%20you%20want%20to%20add%20is%3A%3C%2FDIV%3E%3CDIV%3E%3CFONT%3E%22android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%22%3A%20true%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EWorked%20fine%20for%20me!%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EIt's%20been%20mentioned%20that%20MS%20are%20%22working%22%20on%20this%20with%20Google...%20but%20after%20reading%20the%20Android%20documentation%20this%20is%20a%20setting%20that%20needs%20to%20be%20enabled%20before%20Intune%20is%20managing%20the%20phone...%20i.e.%20at%20the%20QR%20code%20point...%20I%20can%20only%20assume%20MS%20will%20alter%20the%20Intune%20portal%20to%20have%20a%20checkbox%20to%20enable%20system%20apps%20that%20would%20then%20regenerate%20the%20QR%20code%20to%20have%20the%20right%20commands%20embedded%20in%20it...%20it's%20quite%20a%20small%20tweak%2C%20so%20I'm%20surprised%20this%20hasn't%20already%20been%20done%2C%20or%20information%20on%20how%20to%20manually%20do%20it%20passed%20on.%3C%2FFONT%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356113%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356113%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3EThanks%20for%20the%20suggestion%20about%20the%20Android%20Zero%20Touch%20portal.%20I%20will%20certainly%20give%20that%20a%20try.%20For%20your%20information%20I%20have%20received%20information%20from%20MS%20that%20they%20are%20working%20on%20this%20issue%20with%20Google.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355375%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355375%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3EI've%20managed%20to%20get%20an%20Android%20Zero%20Touch%20portal%20account%20and%20added%20my%20test%20Sony%20device.%20Formerly%20it%20didn't%20get%20system%20apps%20like%20camera%2C%20but%20using%20%22DPC%20Extras%22%20in%20the%20portal%20with%20a%20string%20of%20%3CFONT%3E%E2%80%9C%3C%2FFONT%3E%3CFONT%3E%22android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%22%3A%20true%E2%80%9D%20I%20have%20now%20reset%20and%20reenrolled%20the%20device%20and%20now%20have%20system%20apps%20like%20Camera%20available.%20So%2C%20maybe%20talking%20with%20a%20telco%20to%20get%20a%20Zero%20Touch%20account%20might%20help%20you.%20It%20is%20a%20shame%20that%20via%20QR%20code%20enrolment%20you%20can't%20seem%20to%20do%20it.%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354955%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354955%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F270131%22%20target%3D%22_blank%22%3E%40PriyaR455%3C%2FA%3E%26nbsp%3Band%20others-%20Should%20we%20add%20individual%20devices%20or%20users%20as%20members%20to%20the%20group%20that%20we%20are%20targeting%20for%20the%20Device%20Owner%20restriction%20policy%20and%20Managed%20Play%20Store%20apps.%26nbsp%3B%20The%20reason%20I'm%20asking%20is%20we%20have%20users%20with%20multiple%20devices%20and%20we%20want%20only%20the%20Corporate%20Owned%20Fully%20Managed%20enrolled%20device%20to%20receive%20this%20policy%20and%20apps%20and%20not%20their%20non-AE%20enrolled%20device.%26nbsp%3B%20I%20didn't%20see%20anything%20specific%20in%20the%20documentation%20above%20so%20that%20is%20why%20I'm%20asking.%26nbsp%3B%20I%20wasn't%20sure%20if%20I%20just%20added%20the%20user%20to%20the%20group%20targeted%2C%20if%20Intune%20would%20have%20the%20logic%20to%20only%20apply%20that%20policy%20to%20the%20Fully%20Managed%20enrolled%20device.%26nbsp%3B%20I%20believe%20I%20have%20had%20trouble%20in%20the%20past%20assigning%20a%20Security%20group%20to%20a%20specific%20device%20if%20I%20remember%20correctly.%26nbsp%3B%20Thanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-353024%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353024%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F286840%22%20target%3D%22_blank%22%3E%40dangander%3C%2FA%3EIt%20sounds%20like%20you're%20in%20Hybrid%20with%20SCCM%3F%20If%20so%2C%20you%20need%20to%20move%20to%20Intune%20Standalone%20%2F%20move%20your%20MDM%20authority...%20once%20we%20did%20that%20then%20all%20the%20other%20options%20you'd%20expect%20to%20see%20turn%20up.%20%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fsccm%2Fmdm%2Fdeploy-use%2Fmigrate-hybridmdm-to-intunesa%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fsccm%2Fmdm%2Fdeploy-use%2Fmigrate-hybridmdm-to-intunesa%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-353021%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353021%22%20slang%3D%22en-US%22%3E%3CP%3EBeen%20bashing%20my%20head%20on%20Intune%20for%20over%20a%20week%20now%20-%20haven't%20been%20able%20to%20enrol%20a%20single%20device%20so%20far!%3C%2FP%3E%3CP%3EOur%20InTune%20only%20has%20the%20%22Personal%20devices%20with%20work%20profile%22%20for%20Android%20enrolment%20-%20any%20ideas%20on%20how%20to%20enable%20the%20other%20enrolment%20options%3F!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-331526%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-331526%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F270131%22%20target%3D%22_blank%22%3E%40PriyaR455%3C%2FA%3E%20%E2%80%A6%20Trying%20to%20contact%20you%20directly%2C%20but%20I%20get%20%22%3CFONT%3EYou%20have%20reached%20the%20limit%20for%20number%20of%20private%20messages%20that%20you%20can%20send%20for%20now.%20Please%20try%20again%20later.%22%2C%20even%20if%20I%20try%20on%20different%20days%20without%20sending%20any%20other%20private%20messages...%20no%20idea%20what's%20going%20on%20there%2C%20so%20apologies%20for%20not%20replying%20to%20you.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3EIn%20short%2C%20password%20policies%20pending%20are%20no%20longer%20a%20problem%2C%20it's%20that%20they%20fail%20because%20there's%20no%20user%20prompt%20to%20set%20a%20PIN.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%3EI%20note%20that%20my%20Samsung%20device%20it%20wasn't%20picking%20up%20the%20password%20policies%2C%20but%20now%20it%20is%2C%20so%20some%20work%20has%20obviously%20happened%20there.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3EGood%20luck%20with%20the%20rest%20of%20the%20Preview%20and%20thanks%20for%20keeping%20an%20eye%20on%20this%20thread.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%3EVery%20much%20looking%20forward%20to%20increased%20password%20policy%20abilities%2C%20system%20apps%20and%20conditional%20access.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%3EApart%20from%20the%20What's%20New%20pages%2C%20is%20there%20anywhere%20to%20track%20what%20changes%2Fadditions%20have%20happened%20in%20the%20Preview%3F%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330818%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330818%22%20slang%3D%22en-US%22%3E%3CP%3EYep%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F276741%22%20target%3D%22_blank%22%3E%40NGreen99%3C%2FA%3E%20that's%20it%20exactly.%20%3A)%3C%2Fimg%3E%20Modern%20to%20365%20via%20ADFS...%20I%20suspect%20it's%20hitting%20an%20Azure%20AD%20Conditional%20Access%20rule%20that%20doesn't%20see%20that%20the%20device%20is%20enrolled...%20which%20I%20guess%20is%20expected%20as%20Conditional%20Access%20isn't%20part%20of%20the%20Preview%20yet%20I%20think.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20yep%2C%20same%20noted%20with%20the%20password%20%2F%20PIN...%20to%20a%20degree....%20one%20device%20enforces%208%20digit%20as%20set%2C%20other%20one%20ignores%2C%20but%20I%20think%20that's%20due%20to%20KME%20on%20one%20and%20not%20the%20other%2C%20so%20guess%20that'll%20change%20once%20it's%20supported.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330813%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330813%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20don't%20get%20that%20problem%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3E%3CSPAN%3E.%20We%20enrolled%20the%20device%20(Android%208.1)%20using%20QR%20code%20and%20logged%20in%20via%20ADFS%20during%20the%20initial%20enrollment%2C%20but%20don't%20get%20prompted%20for%20any%20further%20enrollment%20afterwards.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EMaybe%20worth%20checking%20all%20the%20settings%20in%20your%20device%20or%20app%20configuration%20policies%3F%26nbsp%3B%20Did%20you%20perhaps%20choose%20Modern%20Authentication%20in%20your%20outlook%20app%20configuration%3F%20I%20think%20this%20authenticates%20directly%20to%20O365%20with%20MFA.%26nbsp%3B%20We%20use%20basic%20authentication%20to%20authenticate%20to%20on-prem%20Exchange%20using%20ActiveSync.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ETo%20clarify%20my%20earlier%20post%2C%20IF%20the%20user%20does%20manually%20set%20a%20PIN%2Fpassword%2C%20they%20are%20required%20to%20meet%20the%20minimum%20requirements%20of%20the%20device%20configuration%20policy%2C%20and%20once%20set%20the%20errors%20no%20longer%20show%20against%20the%20device%20configuration%20policy%20status.%26nbsp%3B%20So%20the%20policy%20is%20applying%20correctly%2C%20it's%20just%20an%20issue%20with%20forcing%20the%20user%20to%20add%20the%20initial%20PIN%2Fpassword%20before%20allowing%20access%20to%20corporate%20resources.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330790%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330790%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F276741%22%20target%3D%22_blank%22%3E%40NGreen99%3C%2FA%3E%2C%26nbsp%3BThanks%20for%20coming%20back%20to%20me.%20%3A)%3C%2Fimg%3E%20It%20ended%20up%20being%20a%20bit%20of%20a%20mix%20of%201%20and%202%2C%20so%20cheers%20for%20the%20reminders....%20I%20had%20deployed%20Outlook%20to%20users%2C%20but%20was%20deploying%20the%20config%20policy%20to%20devices%2C%20once%20that's%20changed%20to%20All%20Users%20it%20started%20to%20work%20ok....%20but%20as%20you%20said%20with%202%2C%20it%20reports%20that%20it's%20not%20worked%20which%20I%20was%20relying%20on%20too%20much%20to%20tell%20me%20the%20truth.%20%3A)%3C%2Fimg%3E%20My%20only%20problem%20now%20is%20that%20it%20wants%20the%20device%20to%20Register%20with%20AAD%2C%20so%20it%20appears%20to%20not%20notice%20that%20it's%20already%20Enrolled%20and%20takes%20me%20through%20a%20registration%20and%20MFA%20process%20(like%20personal%20devices%20would%20get%20with%20MAM-WE%20for%20us)...%20not%20a%20massive%20problem%2C%20but%20would%20be%20nicer%20if%20it%20didn't%20do%20that.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330121%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330121%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3EYes%2C%20using%20Client%20Apps%20%26gt%3B%20App%20Configuration%20Policies%20with%20a%20%22managed%20devices%22%20device%20enrolment%20type.%26nbsp%3B%20Used%20the%20configuration%20designer%20to%20set%20a%20basic%20authentication%20profile%2C%20and%20this%20was%20also%20working%20fine%20for%20Android%20work%20profiles.%3C%2FP%3E%3CP%3ETwo%20things%20to%20note%3A%3C%2FP%3E%3CP%3E1)%20The%20device%20owner%20preview%20does%20not%20support%20targeting%20policies%20at%20devices%2C%20just%20users.%26nbsp%3B%20Check%20your%20policy%20assignments%20are%20using%20a%20user%20based%20group%20or%20%22all%20users%22%2C%20not%20a%20device%20based%20group%20otherwise%20the%20policy%20won't%20apply.%26nbsp%3B%20Same%20applies%20to%20the%20apps%20themselves%2C%20assign%20these%20to%20a%20user%20based%20target%20otherwise%20the%20apps%20won't%20deploy%20to%20the%20device.%3C%2FP%3E%3CP%3E2)%20Even%20though%20the%20policy%20applies%20OK%2C%20the%20user%20is%20not%20listed%20at%20all%20on%20the%20%22user%20install%20status%22%20tab%20of%20the%20app%20configuration%20policy.%26nbsp%3B%20The%20device%20shows%20under%20%22device%20install%20status%22%20but%20with%20a%20username%20of%20%22none%22%20and%20device%20status%20of%20%22pending%22.%26nbsp%3B%20Clearly%20some%20reporting%20issues%20here.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330067%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330067%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F276741%22%20target%3D%22_blank%22%3E%40NGreen99%3C%2FA%3EWell%20summarised%2C%20that's%20what%20I%20was%20trying%20to%20say%20but%20less%20eloquently.%20%3A)%3C%2Fimg%3E%20Yes%2C%20it's%20a%20big%20problem%20for%20us%2C%20you'd%20never%20deploy%20any%20other%20corporate%20owned%20device%20with%20no%20password%20policies%20enforced%2C%20so%20I'm%20kind%20of%20surprised%20this%20was%20missed%20from%20the%20preview%20as%20it's%20a%20core%20feature%20in%20my%20opinion%2C%20even%20for%20a%20preview.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20interested%20in%20how%20you're%20pushing%20mail%20profile%20for%20Outlook%2C%20I'm%20having%20no%20luck...%20I'm%20using%20Client%20Apps%2C%20App%20configuration%20policies%20with%20an%20enrolled%20device%20enrolment%20type%2C%20but%20it%20just%20stays%20in%20a%20Pending%20state%20and%20never%20deployed....%20which%20I%20put%20down%20to%20the%20Preview.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329457%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329457%22%20slang%3D%22en-US%22%3E%3CP%3EEnrollment%20works%20really%20well%2C%20but%20the%20lack%20of%20PIN%2FPassword%20enforcement%20is%20a%20problem.%26nbsp%3B%20The%20configuration%20applies%20but%20shows%20errors%20if%20no%20PIN%20is%20already%20set.%26nbsp%3B%20The%20device%20setup%20wizard%20does%20not%20require%20the%20user%20to%20set%20a%20PIN%2FPassword%2C%20nor%20do%20they%20get%20notified%20to%20set%20one%20afterwards%20once%20the%20configuration%20policy%20has%20applied.%26nbsp%3B%20If%20this%20is%20not%20possible%20then%20the%20apps%20and%20related%20app%20policies%20should%20not%20be%20deployed%20to%20the%20device%20until%20it%20meets%20the%20compliance%20requirements.%26nbsp%3B%20As%20it%20stands%2C%20the%20Outlook%20app%20and%20mail%20profile%20get%20deployed%20to%20the%20device%20so%20the%20user%20has%20full%20access%20to%20corporate%20email%20resources%20without%20having%20any%20basic%20security%20on%20the%20device%20at%20all.%26nbsp%3B%20Maybe%20this%20is%20something%20that%20can%20be%20controlled%20by%20conditional%20access%20once%20it's%20supported%20with%20device%20owner.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329417%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329417%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20trying%20out%20the%20scenarios%20and%20providing%20detailed%20feedback.%20Regarding%20the%20issue%20where%20policy%20restrictions%20appear%20to%20be%20stuck%20in%20a%20%22pending%20state%22%20we%20are%20still%20investigating.%20I'll%20provide%20updates%20on%20this%20issue%20as%20possible.%20%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20are%20also%20looking%20into%20the%20other%20areas%20of%20feedback%20provided%20around%20capabilities%20that%20are%20not%20available%20today.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%2C%3C%2FP%3E%0A%3CP%3EPriya%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329387%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329387%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3E%2C%20thanks%20for%20your%20suggestion.%20We%20are%20not%20using%20the%20Knox%20Mobile%20Enrollment%20and%20have%20no%20plans%20to%20do%20so.%20So%20I%20hope%20we%20can%20get%20the%20setting%20%22Leave%20all%20system%20apps%20enabled%22%20from%20somewhere%20else.%3C%2FP%3E%3CP%3ELet's%20see%20what%20the%20Intune%20team%20comes%20up%20with.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-328569%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-328569%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3E%2C%26nbsp%3BI've%20tried%20on%20a%20Samsung%20J6%20via%26nbsp%3BKnox%20Mobile%20Enrollment%2C%20which%20I'm%20pleased%20to%20say%20worked%20ok%20even%20though%20Knox%20is%20listed%20as%20an%20unsupported%20scenario.%20I%20found%20that%20in%20KME%20I%20needed%20to%20ensure%20the%20profile%20had%20%22%3CFONT%3ELeave%20all%20system%20apps%20enabled%3C%2FFONT%3E%22%20ticked%2C%20which%20gave%20me%20the%20camera%20app%20back.%20With%20it%20unticked%20there%20were%20only%20a%20very%20few%20basic%20apps%20available%20(i.e.%20no%20camera%20app).%20Don't%20know%20if%20that%20might%20help%20in%20your%20scenario%20or%20not!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-328559%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-328559%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20also%20missing%20some%20of%20the%20basic%20apps%20like%20camera.%20I%20tried%20it%20on%20a%20Huawei%20and%20Samsung%20but%20same%20result.%20It%20seems%20a%20lot%20of%20basic%20native%20apps%20are%20hidden%20or%20not%20installed.%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20would%20really%20like%20to%20see%20is%20that%20the%20Android%20Fully%20Managed%20experience%20is%20similar%20to%20that%20of%20Apple.%20Giving%20the%20users%20a%20phone%20with%20an%20interface%20and%20apps%20that%20they%20are%20used%20to%20and%20allow%20things%20like%20public%20app%20store%20and%20all%20native%20apps.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20understand%20this%20is%20a%20preview%20but%20frankly%20this%20is%20has%20to%20limited%20functionalities%20to%20conduct%20some%20proper%20testing.%3C%2FP%3E%3CP%3EEnrollment%20and%20app%20publishing%20works%20fine%20by%20the%20way.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-328500%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-328500%22%20slang%3D%22en-US%22%3E%3CP%3EFurther%20thoughts%20%2F%20feedback...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPhone%20number%20doesn't%20appear%20to%20be%20collected...%20IMEI%2C%20Manufacturer%20and%20Model%20are%2C%20but%20no%20Phone%20number...%20it%20would%20be%20useful%20to%20have%20that.%3C%2FP%3E%3CP%3EAssociated%20user%20also%20seems%20to%20randomly%20be%20filled%20in%3B%20sometimes%20it%20is%2C%20and%20other%20times%20not%2C%20for%20the%20same%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBiggest%20one%20for%20me%20however%20is%20the%20lack%20of%20password%20policies...%20they%20seem%20very%20spartan%20(no%20number%20of%20last%20passwords%20remembered%2C%20no%20encrypt%20options)%2C%20and%20what%20is%20available%20(in%20my%20option)%20is%20useless%20because%20users%20aren't%20prompted%20to%20create%20a%20PIN...%20so%20a%20corporate%20device%20is%20left%20with%20no%20PIN%20if%20a%20user%20doesn't%20manually%20create%20one%20(and%20you%20can%20bet%20they%20don't%20unless%20forced)%2C%20and%20because%20there's%20no%20compliance%20checks%20it%20doesn't%20matter%20if%20the%20policies%20that%20are%20in%20place%20fail%20or%20not....%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EConsidering%20this%20Preview%20is%20focussed%20on%20business%20owned%20mobiles%2C%20strong%20password%20policies%20that%20users%20are%20forced%20to%20adhere%20to%20would%20seem%20a%20key%20thing%20to%20tackle%20early%20on...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-328340%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-328340%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20behaviour%20here%20re%3A%20not%20pushing%20policies%20correctly.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EConsistent%20with%20other%20user%20experience%20above%20-%20stuck%20on%20%22Pending%22.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327901%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327901%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3ENo%20we%20are%20applying%20the%20%22Device%20Owner%22%20profile.%20With%20the%20result%20that%20no%20settings%20are%20enforced.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326535%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326535%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F254411%22%20target%3D%22_blank%22%3E%40Oliver_Boothby%3C%2FA%3E%26nbsp%3B%26amp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3E%26nbsp%3B-%20Are%20you%20applying%20a%20%22Work%20Profile%20Only%22%20device%20configuration%20profile%3F%3C%2FP%3E%3CP%3EI'm%20sure%20you're%20not%2C%20but%20just%20worth%20a%20double%20check.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20me%20with%20a%20%22Device%20Owner%20Only%22%20profile%2C%20it's%20not%20enforcing%20password%20length%20or%20type%2C%20just%20giving%20a%20Failed%20state%20with%20no%20info.%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3CP%3EAny%20ideas%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F270131%22%20target%3D%22_blank%22%3E%40PriyaR455%3C%2FA%3E%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325545%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325545%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F254411%22%20target%3D%22_blank%22%3E%40Oliver_Boothby%3C%2FA%3Ewe%20are%20seeing%20the%20same%20behavior.%20Status%20is%20pending%20on%20the%20Device%20Restrictions%20and%20Wifi%20profile.%20And%20nothing%20happening%20on%20the%20device%20itself.%20No%20solution%20found%20though....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-325544%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-325544%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20anyone%20else%20seeing%20Device%20Configuration%20Policies%20not%20working%3F%20Deployment%20status%20%22Pending%22%2C%20Using%20AE%20FM%2C%20Device%20Only%20for%20both%20WiFi%20and%20Device%20Restrictions.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-324037%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-324037%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20the%20feedback.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F211779%22%20target%3D%22_blank%22%3E%40Raymond%20Huis%20in%20't%20Veld%3C%2FA%3E%2C%20we%20currently%20don't%20have%20an%20official%20date%20for%20general%20availability%20yet.%20We%20will%20continue%20to%20update%20our%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EWhat's%20New%3C%2FA%3E%20site%20as%20we%20release%20new%20features.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1377%22%20target%3D%22_blank%22%3E%40Ryan%20Morash%3C%2FA%3E%2C%20could%20you%20elaborate%20on%20why%20you%20are%20unable%20to%20use%20Google%20Managed%20Play%20accounts%3F%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3E%2C%20we%20will%20continue%20investigate%20and%20build%20out%20our%20device%20restriction%20features%20and%20will%20update%20our%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fwhats-new%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EWhat's%20New%20%3C%2FA%3Esite.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EPriya%20Ravichandran%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321502%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321502%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20looks%20like%20a%20good%20start.%20When%20can%20we%20expect%20more%20Device%20restriction%20features%20to%20be%20available.%20Like%20for%20instance%20to%20allow%20the%20user%20to%20access%20the%20public%20google%20play%20store%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eregards%2C%20Jeroen%20Dijkman%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320971%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320971%22%20slang%3D%22en-US%22%3E%3CP%3EHoly%20mother..%20everyone%20gets%20excited%20with%20COBO%20being%20announced.%20This%20was%20announced%20couple%20of%20month%20ago%2C%20now%20still%20preview%20for%20god%20knows%20how%20many%20month%2Fyears.%20Thank%20you%20but%20NO%20thank%20you.%20Kick%20it%20up%20a%20notch%20MS%20-%20other%20major%20vendors%20like%20Airwatch%20or%20MobileIron%20have%20much%20more%20to%20offer%20when%20working%20with%20Android%20enterprise.%20COPE%20anyone%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320659%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320659%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20what%20is%20the%20ETA%20for%20general%20availability%2C%20please%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320588%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320588%22%20slang%3D%22en-US%22%3E%3CP%3EWhy%20can't%20you%20use%20managed%20Google%20Play%20accounts%20of%20interest%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320555%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320555%22%20slang%3D%22en-US%22%3EAre%20you%20planning%20on%20supporting%20G%20Suite%20accounts%20soon%3F%20We%20are%20unable%20to%20use%20managed%20Google%20Play%20accounts.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-670989%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-670989%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20having%20similar%20issues%20with%20fully%20managed%20devices.%20Policies%20are%20stuck%20in%20a%20pending%20state%20when%20applied%20to%20the%20user.%20Compliance%20policies%20are%20also%20never%20evaluated...%20Additionally%2C%20Intune%20doesn't%20show%20that%20a%20compliance%20policy%20is%20applied%20and%20therefore%20deems%20the%20device%20non%20compliant%20due%20to%20the%20default%20policy.%20We%20are%20using%20the%20new%20Intune%20app%20with%20no%20success%20on%20either%20of%20these.%26nbsp%3BI%20have%20opened%20a%20ticket%20in%20hopes%20to%20gain%20some%20progress.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-839184%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-839184%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F10931%22%20target%3D%22_blank%22%3E%40Jeroen%20Dijkman%3C%2FA%3E%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20to%20enroll%20after%20re-encoding%20the%20QR%20code%20but%20failed%20during%20the%20enrollment%20with%20the%20message%20%22Cant%20Setup%20Device%20-%20Reset%22.%20Would%20you%20mind%20to%20share%20the%20full%20code%20%3F%20We%20run%20through%20hell%20due%20to%20this%20and%20the%20support%20team%20couldn't%20do%20anything%20so%20far.%20appreciate%20it%20!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-840734%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-840734%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9151%22%20target%3D%22_blank%22%3E%40Manoj%20Karunarathne%3C%2FA%3E%26nbsp%3BHi%2C%20what%20did%20you%20add%20before%20re-encoding%20the%20QR%20code%3F%20The%20full%20code%20for%20keeping%20the%20system%20apps%20is%26nbsp%3B%20%3CSTRONG%3E%22android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%22%3Atrue%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYour%20full%20code%20should%20look%20something%20like%20this%3A%20(I%20removed%20the%20checksum%20and%20enrollment%20token%20for%20obvious%20reasons)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%7B%22android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME%22%3A%22com.google.android.apps.work.clouddpc%2F.receivers.CloudDeviceAdminReceiver%22%2C%22android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM%22%3A%22........%22%2C%22android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION%22%3A%22%3CA%20href%3D%22https%3A%2F%2Fplay.google.com%2Fmanaged%2FdownloadManagingApp%3Fidentifier%3Dsetup%26quot%3B%2C%26quot%3Bandroid.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%26quot%3B%3Atrue%2C%26quot%3Bandroid.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE%26quot%3B%3A%7B%26quot%3Bcom.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fplay.google.com%2Fmanaged%2FdownloadManagingApp%3Fidentifier%3Dsetup%22%2C%22android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED%22%3Atrue%2C%22android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE%22%3A%7B%22com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN%3C%2FA%3E%22%3A%22........%22%7D%7D%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20that%20helps%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-866507%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-866507%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20guys!%20I'm%20glad%20to%20join%20this%20community.%20I%20got%20stuck%20in%20device%20configuration%20when%20AE%20FM%20is%20in%20place%20as%20well%20as%20many%20of%20you%20guys%2C%20my%20devices%20keep%20in%20Pending%20and%20not%20compliance%20check%20is%20happening.%20I%20was%20reading%20early%20posts%20related%20to%20this%20issue%2C%20but%20apparently%20with%20no%20luck.%20Do%20yo%20have%20news%20related%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-866544%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-866544%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20Jeroen%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20the%20quick%20response%20and%20it%20was%20just%20two%20additional%20quotes%20which%20messed%20things%20up.%20Removed%20and%20used%20your%20line%20and%20it%20worked%20like%20charm.%20All%20default%20apps%20now%20intact%20and%20the%20PlayStore%20is%20restricted%20to%20enterprise%20apps%20only.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20again%20!%20and%20looking%20forward%20to%20see%20the%20final%20release%20to%20get%20rid%20of%20the%20preview%20mode.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Manoj%20K%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-985390%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-985390%22%20slang%3D%22en-US%22%3E%3CP%3ELots%20of%20good%20info%20here%2C%20I%20was%20struggling%20all%20day%20with%20policies%20being%20assigned%20to%20devices%20via%20dynamic%20groups%20and%20the%20whole%20pin%20issue%2C%20having%20other%20issues%20now%20though...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1%3A%20I've%20got%20some%20Kyocera%20phones%20on%20Android%209%20that%20say%20they%20are%20encrypted%2C%20but%20Intune%20says%20they%20aren't%2C%20and%20the%20app%20never%20clears%20me%20as%20compliant%20either%2C%20despite%20syncing%20over%20and%20over.%20Always%20says%20it%20needs%20encrypted%20and%20a%20password%20despite%20the%20policies%20being%20proper.%20At%20enrollment%20it%20kept%20me%20in%20a%20%22Encrypt%20your%20device%20now%22%20loop%20on%20the%20initial%20setup%20until%20I%20%22setup%22%20a%20pin%20at%20startup%20feature.%20Weird%20thing%20was%20even%20though%20I%20set%20the%20pin%20at%20startup%20to%20ON%2C%20it%20didn't%20stick%2C%20but%20it%20did%20let%20me%20through%20the%20rest%20of%20the%20setup%20and%20I%20was%20pumped%20because%20I%20thought%20it%20was%20working.%20Even%20when%20the%20phones%20are%20factory%20wiped%20they%20say%20encrypted%20and%20there's%20no%20way%20to%20decrypt%20them%20and%20use%20the%20Intune%20workflow%20to%20do%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2%3A%20Is%20there%20some%20magical%20step%20that%20needs%20to%20be%20done%20to%20allow%20Edge%20to%20block%20certain%20URLs%3F%20I've%20created%20the%20app%20policies%20and%20assigned%20it%20to%20the%20group%2C%20and%20made%20sure%20I%20selected%20Edge%20for%20Android%20as%20the%20targeted%20app%20(targeted%20the%20Managed%20Browser%20as%20well).%20Basically%20the%20client%20wants%20to%20keep%20the%20users%20from%20getting%20to%20these%20website%20even%20from%20the%20browser.%20So%20I've%20disabled%20the%20Chrome%20browser%20completely%20and%20thought%20I%20configured%20this%20correctly%2C%20but%20no%20dice.%20Neither%20Edge%20nor%20the%20MB%20work.%20Really%20getting%20annoyed%20with%20this.%20I%20thought%20maybe%20the%20Apple%20supervised%20model%20was%20obnoxious%2C%20but%20Android%20fully%20manage%20is%20quickly%20becoming%20the%20bane%20of%20my%20existence.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F155052i3D9AAF208D137904%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_0.png%22%20title%3D%22clipboard_image_0.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-985480%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-985480%22%20slang%3D%22en-US%22%3E%3CP%3EThink%20I%20figured%20out%20the%20encryption%20piece%20and%20the%20start%20up%20pin.%20Appears%20these%20phones%20(and%20others%20now)%20come%20encrypted%20out%20of%20the%20box%20and%20this%20Intune%20option%20for%20encryption%20just%20needs%20to%20be%20set%20to%20Not%20Configured%20which%20I%20guess%20isn't%20an%20issue%20if%20the%20devices%20being%20purchased%20and%20fully%20managed%20are%20indeed%20encrypted%20out%20of%20the%20box.%20Still%20a%20bit%20muddy%20as%20far%20as%20setup%20goes.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-988218%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-988218%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20enrolment%20ok%20for%20folks%20today%3F%20We're%20deploying%20Androids%20and%20have%20had%20to%20abandon%20our%20sessions%20for%20the%20day%20because%20when%20the%20process%20gets%20as%20far%20as%20the%20Intune%20Company%20Portal%20app%2C%20you%20sign%20in%20(apparently%20successfully%20looking%20at%20AAD%20logs)%2C%20but%20then%20get%20a%20%22Something%20Went%20Wrong%22%20on%20the%20%22get%20set%20up%20to%20connect%20to%20resources%22%20section%20and%20you%20can't%20get%20past%20it.%20%3A%5C%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20just%20us%2C%20or%20a%20larger%20issue%3F%20We've%20opened%20a%20ticket%2C%20but%20you%20guys%20are%20usually%20quicker.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-988923%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-988923%22%20slang%3D%22en-US%22%3E%3CP%3ESteve%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20tried%20to%20enroll%203%20fresh%20devices%20about%2010%20minutes%20ago%20and%20things%20were%20real%20weird.%201%20did%20the%20%22Something%20went%20wrong%22%20over%20and%20over.%20Now%20all%203%20didn't%20setup%20a%20pin%20on%20the%20way%20through%20the%20setup%20and%20none%20of%20the%20apps%20are%20downloading.%20All%20of%20them%20show%20compliant%20on%20the%20phone%20but%20all%20say%20not%20compliant%20with%20error%26nbsp%3B%3CSPAN%3E65001%20(Not%20applicable).%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGreaaaaat%20start%20to%20the%20morning%20for%20a%20project%20with%20a%20short%20turnaround%20time.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-990807%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-990807%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446404%22%20target%3D%22_blank%22%3E%40DBR14%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20coming%20back%2C%20nice%20to%20know%20we%20weren%E2%80%99t%20on%20our%20own%2C%20sorry%20it%E2%80%99s%20affecting%20you%20too%20though!%20After%20about%206%2F7%20hours%20it%20kicked%20back%20in%20to%20life%20for%20us%2C%20so%20hopefully%20it%E2%80%99s%20ok%20for%20you%20now%20too.%20Fingers%20crossed!%3C%2FP%3E%3CP%3ECheers%2C%3C%2FP%3E%3CP%3ESteve%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-992063%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-992063%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F97983%22%20target%3D%22_blank%22%3E%40Steve%20Prentice%3C%2FA%3E%2C%20My%20error%20corrected%20it%20self%20after%20back%20out%20and%20back%20in%20maybe%20a%20half%20dozen%20times%3F%20I%20got%20it%20going%20not%20to%20long%20after%20the%20post.%20Out%20of%20curiosity%20were%20you%20guys%20running%20with%20the%20setup%20off%20Wifi%20or%20LTE%3F%20The%20phones%20I%20was%20using%20were%20on%20straight%20Wifi%20because%20the%20phones%20were%20not%20fully%20activated%20through%20Verizon.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-995157%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-995157%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446404%22%20target%3D%22_blank%22%3E%40DBR14%3C%2FA%3E%26nbsp%3BHi...%20So%20for%20us%20we%20had%20a%20second%20day%20of%20abandoned%20deployments%2C%20but%20after%20working%20with%20support%20an%20issue%20of%20%22some%20service%20connection%20infrastructure%20becoming%20unresponsive%22%20was%20found%2C%20and%20I%20think%20fixed%2C%20we%20seem%20to%20have%20been%20stable%20since%20then.%20This%20was%20over%204G%20by%20the%20way.%20Cheers.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1038689%22%20slang%3D%22en-US%22%3ERe%3A%20Archive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1038689%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3ECan%20you%20please%20advise%20if%20Zebra%20Android%20devices%20are%20supported%20in%20Microsoft%20Intune%3F%3C%2FP%3E%3CP%3EAnd%20if%20so%20which%20model%2Fversions%3F%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EJohn%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-314747%22%20slang%3D%22en-US%22%3EArchive%3A%20Intune%20announces%20preview%20of%20support%20for%20Android%20corporate-owned%2C%20fully%20managed%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-314747%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3EBy%20Arnab%20Biswas%20%7C%20Intune%20Program%20Manager%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3E%3CFONT%3EUpdated%2012%2F19%2F19%20-%26nbsp%3B%3C%2FFONT%3E%3C%2FEM%3E%3CEM%3EWe%20have%20received%20over%20300%20comments%20on%20the%20Android%20preview%20blog%20posts%2C%20and%20in%20those%20comments%20and%20occasional%20subsequent%20support%20cases%2C%20you%20helped%20us%20deliver%20Android%20Enterprise%20Fully%20Managed%20as%20generally%20available.%20You%20provided%20over%2058%20pieces%20of%20actionable%20feature%20feedback%20based%20on%20your%20experience%20with%20preview.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EMore%20information%20about%20the%20GA%20release%20can%20be%20found%20in%20our%20blog%20here%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FEnterprise-Mobility-Security%2FMicrosoft-Intune-support-for-Android-Enterprise-fully-managed%2Fba-p%2F862232%22%20target%3D%22_self%22%3EMicrosoft%20Intune%20support%20for%20Android%20Enterprise%20fully%20managed%20devices%20is%20now%20generally%20available%3C%2FA%3E.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EAs%20this%20feature%20is%20now%20GA%2C%20new%20comments%20on%20this%20post%20will%20be%20turned%20off.%20As%20always%2C%20we%20want%20to%20hear%20from%20you!%20If%20you%20have%20any%20suggestions%2C%20questions%2C%20or%20comments%2C%20please%20visit%20us%20on%20our%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Ftechcommunity.microsoft.com%252Ft5%252FMicrosoft-Intune%252Fbd-p%252FMicrosoft-Intune%26amp%3Bdata%3D02%257C01%257Cv-maxist%2540microsoft.com%257C7b5dfa4f38534926dc0408d77f93f73c%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637118145795588711%26amp%3Bsdata%3D%252B9G%252B36MR2eU2iJ%252F%252FTU7s7caxT1Ujp1IVpQiG6TbnZd8%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3ETech%20Community%20page%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eor%20our%20Twitter%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FIntuneSuppTeam%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%40IntuneSuppTeam%3C%2FA%3E.%20Your%20continued%20feedback%20helps%20make%20the%20product%20better%2C%20we%20are%20grateful%20for%20this%20community%2C%20thank%20you!%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3EUpdated%207%2F23%2F19%3A%20%3C%2FEM%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EWe%20have%20made%20progress%20with%20our%20Fully%20Managed%20support.%20You%20can%20find%20more%20updates%20and%20discussions%20on%20these%20developments%20on%20the%20following%20blog%20posts%3A%3C%2FFONT%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FAnnouncing-new-updates-to-the-Android-Enterprise-fully-managed%2Fba-p%2F735030%22%20target%3D%22_self%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FAnnouncing-new-updates-to-the-Android-Enterprise-fully-managed%2Fba-p%2F735030%3C%2FA%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FMicrosoft-Intune-announces-Preview-2-for-Android-Enterprise%2Fba-p%2F472324%22%20target%3D%22_self%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FMicrosoft-Intune-announces-Preview-2-for-Android-Enterprise%2Fba-p%2F472324%3C%2FA%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3EUpdated%204%2F17%2F19%3C%2FEM%3E%3A%20You%20may%20notice%20a%20new%20app%20in%20Google%20Play%20%E2%80%93%20it%E2%80%99s%20called%20the%20Microsoft%20Intune%20app.%20This%20app%20is%20in%20preview%20for%20new%20functionality%20for%20fully%20managed%20devices.%20We%20are%20rolling%20out%20the%20end-to-end%20scenario%20with%20this%20app%20and%20we%20expect%20it%20to%20be%20live%20by%20the%20first%20part%20of%20the%204%2F22%2F2019%20week.%20More%20on%20this%20expanding%20workflow%20will%20be%20posted%20shortly!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EToday%20we%20are%20releasing%20a%20preview%20of%20Android%20corporate-owned%20fully%20managed%20(formerly%20called%20Corporate%20Owned%2C%20Business%20Only%20(COBO)%20by%20Google)%20device%20management%20scenarios%20in%20Intune.%20This%20is%20Intune%E2%80%99s%20newest%20addition%20to%20its%20list%20of%20Android%20Enterprise%20management%20capabilities%20preceded%20by%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-enterprise-overview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ework%20profiles%3C%2FA%3Eand%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-kiosk-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ededicated%20(kiosk)%20devices%3C%2FA%3E.%3CSPAN%20data-ccp-props%3D%22%7B%26quot%3B201341983%26quot%3B%3A0%2C%26quot%3B335559739%26quot%3B%3A0%2C%26quot%3B335559740%26quot%3B%3A240%7D%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3E%3CSTRONG%3ENOTE%3C%2FSTRONG%3E%20-%20the%20preview%20is%20rolling%20out%20today%20-%201%2F17%2F19%20and%20is%20expected%20to%20finish%20up%20by%20end%20of%20day.%20If%20you're%20on%20Government%20Cloud%20please%20note%20this%20may%20take%20until%201%2F18%2F19%20to%20see%20the%20preview%20feature.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAndroid%20fully%20managed%20is%20one%20of%20the%20%E2%80%9Cdevice%20owner%E2%80%9D%20management%20scenarios%20in%20the%20Android%20enterprise%20solution%20set%20that%20enables%20productivity%20scenarios%20for%20users%20on%20corporate%20devices%26nbsp%3Bwhile%20allowing%20IT%20admins%20to%20manage%20the%20entire%20device%26nbsp%3Bwith%26nbsp%3Ban%20extended%20set%20of%20policy%20controls.%20This%20complements%20the%20Android%26nbsp%3BEnterprise%26nbsp%3Bdedicated%20device%20solution%20set%20we%20released%20last%20year%2C%20which%20was%20focused%20on%20task%20workers%20and%20user-less%20devices.%26nbsp%3BThe%20extended%20policy%20capabilities%20in%20fully%20managed%20scenarios%20are%20only%20intended%20for%20corporate%20devices%2C%20which%20is%20why%20there%20are%20more%20controls%20and%20settings%20available%20here%20than%20on%20personal%20devices%20with%20work%20profiles.%20Combining%20the%20capabilities%20of%20these%20three%20solution%20sets%26nbsp%3Bnow%20provides%20you%20more%20control%20over%20your%20Android%20device%20landscape.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAndroid%20fully%20managed%20is%20one%20of%20the%20%E2%80%9Cdevice%20owner%E2%80%9D%20management%20scenarios%20in%20the%20Android%20Enterprise%20solution%20set%20that%20enables%20productivity%20scenarios%20for%20users%20while%20allowing%20IT%20admins%20to%20manage%20the%20entire%20device%20and%20enforce%20an%20extended%20range%20of%20policy%20controls%2C%20beyond%20that%20which%20is%20possible%20with%20work%20profiles%20on%20personal%20devices.%20Fully%20managed%20devices%20are%20company-owned%20general-purpose%20Android%20devices%20that%20are%20associated%20with%20a%20single%20user.%20These%20devices%20are%20assigned%20to%20individuals%20for%20getting%20their%20work%20done.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWhat%20is%20available%20in%20preview%3F%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EIn%20today%E2%80%99s%20release%2C%20our%20Android%20fully%20managed%20preview%20focuses%20on%20device%20enrollment%2C%20%3CSPAN%20class%3D%22TextRun%20SCXW32421527%22%3E%3CSPAN%20class%3D%22NormalTextRun%20CommentStart%20SCXW32421527%22%3Econfiguration%3C%2FSPAN%3E%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22TextRun%20SCXW32421527%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW32421527%22%3Eand%20app%20distribution%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20SCXW32421527%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW32421527%22%3Escenario%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20SCXW32421527%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXW32421527%22%3Es%3C%2FSPAN%3E%3C%2FSPAN%3E.%20Our%20goal%20for%20this%20preview%20is%20to%20demonstrate%20the%20Android%20fully%20managed%20capabilities%20that%20we%20have%20built%20and%20gather%20feedback%20and%20iterate%20before%20this%20feature%20becomes%20generally%20available%20in%20Intune.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20preview%20supports%20the%20following%20Android%20fully%20managed%20scenarios%20in%20Intune%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EDevice%20enrollment%20using%20NFC%2C%20token%20entry%2C%20QR%20code%20and%20Zero%20Touch%3C%2FLI%3E%0A%3CLI%3EDevice%20configuration%20for%20user%20groups%3C%2FLI%3E%0A%3CLI%3EApp%20distribution%20and%20configuration%20for%20user%20groups%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3EThere%20are%20a%20few%20scenarios%20not%20supported%20in%20this%20preview%20but%20will%20be%20completed%20for%20general%20availability%2C%20including%3A%3C%2FDIV%3E%0A%3CUL%3E%0A%3CLI%3EConditional%20access%3C%2FLI%3E%0A%3CLI%3EDevice%20compliance%3C%2FLI%3E%0A%3CLI%3EApp%20protection%20policies%3C%2FLI%3E%0A%3CLI%3EDevice%20group%20targeting%3C%2FLI%3E%0A%3CLI%3ECertificate%20management%3C%2FLI%3E%0A%3CLI%3EKnox%20Mobile%20Enrollment%3C%2FLI%3E%0A%3CLI%3ECompany%20Portal%20app%20for%20end-user%20scenarios%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3EThese%20scenarios%20may%20not%20function%20as%20expected%20on%20Android%20fully%20managed%20devices%20during%20this%20preview.%3C%2FDIV%3E%0A%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%3EDevice%20enrollment%20for%20Android%20fully%20managed%20devicesWe%E2%80%99ve%20started%20with%20enrollment%20since%20this%20is%20the%20first%20step%20the%20IT%20admin%20and%20user%20must%20take%20to%20bring%20the%20device%20under%20IT%20management.%20The%20IT%20admin%20enables%20enrollment%20for%20fully%20managed%20devices%20in%20the%20Intune%20tenant.%20This%20generates%20a%20single%20enrollment%20token%20and%20QR%20code%20to%20be%20used%20for%20enrolling%20fully%20managed%20Android%20devices%20to%20the%20tenant.%20This%20single%20token%20is%20valid%20for%20all%20your%20users%20and%20will%20not%20expire%3B%20note%20that%20this%20token%20is%20for%20Microsoft%20Intune%20and%20is%20not%20specific%20to%20your%20tenant.%20A%20user%20requires%20both%20the%20enrollment%20token%20and%20valid%20user%20credentials%20to%20authenticate%20and%20enroll%20a%20device%20to%20your%20organization.%20The%20enrollment%20token%20can%20be%20disabled%20by%20the%20IT%20admin%20to%20prevent%20enrollment%20of%20fully%20managed%20devices.%3C%2FDIV%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F65991iC98F63A641FDFD4C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22QRCode.png%22%20title%3D%22QRCode.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CEM%3EEnable%20corporate-owned%20fully%20managed%20device%20enrollment%20to%20generate%20QR%20code%20for%20enrollment.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%3EAndroid%20fully%20managed%20devices%20support%20a%20variety%20of%20enrollment%20methods%20such%20as%20NFC%2C%20token%20entry%2C%20QR%20code%20and%20Zero%20Touch.%20These%20enrollment%20methods%20can%20be%20initiated%20on%20a%20new%20or%20factory-reset%20device%20so%20that%20the%20device%20is%20enrolled%2C%20user%20affinity%20is%20established%2C%20and%20device%20configuration%20policies%20are%20applied%20when%20the%20device%20is%20being%20set%20up%20for%20the%20first%20time.%20Enrollment%20options%20for%20Android%20devices%20are%20in%20documentation%20here%3A%20%3C%2FFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-enroll%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%3EYou%20can%20see%20the%20enrollment%20workflow%20in%20the%20short%20clip%20posted%20below.%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%3CDIV%20class%3D%22video-embed-center%20video-embed%22%3E%3CIFRAME%20class%3D%22embedly-embed%22%20src%3D%22https%3A%2F%2Fcdn.embedly.com%2Fwidgets%2Fmedia.html%3Fsrc%3Dhttps%253A%252F%252Fwww.youtube.com%252Fembed%252F5L4ruqyLcf0%253Ffeature%253Doembed%26amp%3Burl%3Dhttps%253A%252F%252Fwww.youtube.com%252Fwatch%253Fv%253D5L4ruqyLcf0%26amp%3Bimage%3Dhttps%253A%252F%252Fi.ytimg.com%252Fvi%252F5L4ruqyLcf0%252Fhqdefault.jpg%26amp%3Bkey%3Dfad07bfa4bd747d3bdea27e17b533c0e%26amp%3Btype%3Dtext%252Fhtml%26amp%3Bschema%3Dyoutube%22%20width%3D%22200%22%20height%3D%22112%22%20scrolling%3D%22no%22%20frameborder%3D%220%22%20allow%3D%22autoplay%3B%20fullscreen%22%20allowfullscreen%3D%22true%22%20title%3D%22Video%22%3E%3C%2FIFRAME%3E%3C%2FDIV%3E%3CP%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EDevice%20configuration%20for%20Android%20fully%20managed%20devices%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EDevice%20settings%20that%20apply%20to%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fdevice-restrictions-android-for-work%23device-owner-only%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Edevice%20owner%20in%20Intune%3C%2FA%3E%3C%2FSPAN%3E%20are%20supported%20on%20Android%20fully%20managed%20devices.%20This%20means%20that%20IT%20admins%20can%20configure%20more%20advanced%20device-level%20settings%20on%20a%20fully%20managed%20device%20than%20on%20a%20work%20profile%20such%20as%20allow%20app%20installation%20only%20from%20managed%20Google%20Play%2C%20block%20uninstallation%20of%20managed%20apps%2C%20prevent%20users%20from%20factory%20resetting%20devices%2C%20%3CSPAN%3Econtrol%20system%20update%20behavior%2C%20%3C%2FSPAN%3Eand%20more.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENote%20that%20dedicated%20device%20or%20kiosk%20settings%20are%20not%20applicable%20to%20Android%20fully%20managed%20devices.%20This%20preview%20supports%20targeting%20of%20device%20configuration%20policies%20to%20user%20groups%20only.%20Deploying%20device%20configuration%20policies%20to%20device%20groups%20may%20not%20function%20as%20expected%20during%20this%20preview.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EApp%20distribution%20and%20configuration%20for%20Android%20fully%20managed%20devices%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ELike%20existing%20Android%20enterprise%20scenarios%20(work%20profile%20and%20dedicated%20devices)%20in%20Intune%2C%20apps%20%3CSPAN%3Eare%3C%2FSPAN%3E%20distributed%20to%20Android%20fully%20managed%20devices%20using%20managed%20Google%20Play.%20In%20addition%2C%20you%20can%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fapp-configuration-policies-use-android%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Euse%20app%20configuration%20policies%3C%2FA%3E%3C%2FSPAN%3E%20to%20supply%20settings%20to%20managed%20apps.%20You%20can%20configure%20email%20or%20VPN%20app%20settings%20in%20this%20manner%20as%20well.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENote%20that%20this%20preview%20supports%20deploying%20apps%20to%20user%20groups%20only.%20Deploying%20apps%20to%20device%20groups%20may%20not%20function%20as%20expected%20during%20this%20preview.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWhat%20are%20we%20still%20working%20on%3F%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWe%20are%20continuing%20to%20build%20Android%20fully%20managed%20support%20for%20the%20following%20key%20Intune%20features%20that%20will%20be%20announced%20when%20Android%20fully%20managed%20becomes%20generally%20available%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EConditional%20Access%20and%20compliance%20policies%3C%2FLI%3E%0A%3CLI%3EApp%20Protection%20Policies%3C%2FLI%3E%0A%3CLI%3EKnox%20Mobile%20Enrollment%3C%2FLI%3E%0A%3CLI%3ECertificate%20management%3C%2FLI%3E%0A%3CLI%3EDevice%20group%20targeting%20for%20profiles%20and%20apps%3C%2FLI%3E%0A%3CLI%3EDedicated%20user%20interface%20for%20configuring%20email%2C%20Wi-Fi%20or%20VPN%3C%2FLI%3E%0A%3CLI%3EA%20new%20end-user%20app.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EKnown%20issues%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3EYou%20may%20need%20to%20tap%20on%20%E2%80%9CPlease%20click%20here%20to%20continue%E2%80%A6%E2%80%9D%20to%20complete%20device%20enrollment%3A%3C%2FSTRONG%3E%20during%20enrolling%20a%20fully%20managed%20device%2C%20you%20may%20see%20this%20page.%20Tap%20on%20%E2%80%9CPlease%20click%20here%20to%20continue%E2%80%A6%E2%80%9D%20to%20complete%20device%20enrollment.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20225px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F65999i81D73E99B25520B4%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22select%20here%20to%20continue.png%22%20title%3D%22select%20here%20to%20continue.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ECustomer%20support%20for%20this%20preview%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ENote%20that%20the%20preview%20features%20are%20implemented%20to%20Microsoft%20Intune%20production%20standards.%20However%2C%20not%20all%20Intune%20features%20are%20available%20to%20be%20used%20with%20Android%20fully%20managed%20user%20devices%20during%20the%20preview%20as%20outlined%20above.%20The%20preview%20features%20are%20fully%20supported%20through%20our%20usual%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fget-support%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EIntune%20support%20channels%3C%2FA%3E%20and%20are%20clearly%20labeled%20with%20%E2%80%9C(preview)%E2%80%9D%20in%20the%20Intune%20console.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EHow%20to%20reach%20us%3F%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EAs%20you%20review%20the%20Android%20fully%20managed%20preview%20scenarios%2C%20we%20would%20love%20to%20hear%20your%20feedback%20on%20IT%20admin's%20enrollment%20profile%20configuration%20and%20end-user's%20device%20enrollment%20experiences.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EKeep%20us%20posted%20on%20your%20Android%20plans%20through%20comments%20on%20this%20blog%20post%2C%20through%20Twitter%20(%23IntuneSuppTeam)%2C%20and%20on%20%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoftintune.uservoice.com%2Fforums%2F291681-ideas%3Fcategory_id%3D210853%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUserVoice%3C%2FA%3E%3C%2FSPAN%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EDocumentation%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CP%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-dedicated-devices-fully-managed-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-dedicated-devices-fully-managed-enroll%3C%2FA%3E%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-fully-managed-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fandroid-fully-managed-enroll%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSTRONG%3E%3CFONT%3EBlog%20post%20updates%3A%3C%2FFONT%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CFONT%3E12%2F19%2F19%20with%20an%20update%20that%20this%20preview%20feature%20is%20now%20GA!%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-314747%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EToday%20we%20are%20%3C%2FSPAN%3E%3CSPAN%3Ereleasing%3C%2FSPAN%3E%20%3CSPAN%3Ea%20preview%20of%20Android%20%3C%2FSPAN%3E%3CSPAN%3Ecorporate-owned%20fully%20managed%20%3C%2FSPAN%3E%3CSPAN%3E(%3C%2FSPAN%3E%3CSPAN%3Eformerly%20called%20Corporate%20Owned%2C%20Business%20Only%20(COBO)%20by%20Google)%3C%2FSPAN%3E%3CSPAN%3E%20device%20%3C%2FSPAN%3E%3CSPAN%3Emanagement%20scenarios%20in%20Intune%3C%2FSPAN%3E%3CSPAN%3E.%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E
Version history
Last update:
‎Dec 19 2019 10:16 AM
Updated by: