Close Menu
Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Facebook X (Twitter) Instagram
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    • Home
    • Intune
    • Windows
      • Modern Workplace
    • macOS
    • Android
    • iOS
    • Automation
      • Logic Apps
      • Intune Monitoring
      • GitHub
    • Security
      • Passwordless
      • Security
    • Speaking
    • About me
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Home»Android»How to add Android Enterprise system apps with Microsoft Intune
    Android

    How to add Android Enterprise system apps with Microsoft Intune

    Peter KlapwijkBy Peter KlapwijkSeptember 23, 2019Updated:December 3, 2019103 Mins Read

    This week Microsoft announced General Availability for Intune to support Android Enterprise fully managed devices. When you enroll an Android Enterprise device as fully managed device in Intune, by default most of the system apps are not available to the end-user. As a result to that, a fully managed device looks by default similar to the one below. Only a few system apps are available, besides the apps which are deployed by Intune, like the Intune and Authenticator app. Daily used apps like Gallery, Calculator and Calendar are not available.

    During the several previews of the Fully managed user devices, with Intune we had no control over these system apps. Now that support for fully managed devices is general available in Intune, we finally have some control over the system apps and it`s pretty easy to add the Android Enterprise system apps to user devices with Microsoft Intune. The only information we need about the app is the Package name.

    Find Android Package name

    There are several ways to find the app package name of an Android (system) app. One option is to use the Google Play store. The app in the example is the Samsung Internet Browser app.

    • Open the Google Play store
    • Use the search bar to look for the app you wish to enable on the Android devices
    • Click on the app and have a look at the URL. The package name is located at the end of the URL after the ?id=

    Another option is to use an app like Package Name Viewer. Such an app is very handy when you have a device available on which the system app is installed. Or when the app isn`t available in the Google Play store. In this example we search for Gallery app package name.

    • Install the app from the Google Play store
    • Open Package Name viewer and scroll through the list of installed apps to find Gallery
    • The package name is shown under the app name

    Add Android Enterprise system app with Intune

    Now that we have the required package name, we can use Microsoft Intune to add them to our Android Enterprise devices.

    • Sign-in to the Device Management Portal
    • Browse to Client apps – Apps
    • Click Add
    • Choose Android Enterprise system app as App type
    • Select the App information tab
    • Give the app a Name
    • Enter the Publisher
    • Fill in the Package name which we found in the previous steps
    • Click OK – Click Add

    Assign the app as required to the security group of you choice. System apps cannot be assigned as available for users.

    End-user experience

    Not much to show for the end-user experience. The system apps show up on the devices without any user action. As shown below, the Gallery and Internet apps are added.

    Android EMS Intune MEM Microsoft 365 Microsoft Endpoint Manager Security
    Share. Facebook Twitter LinkedIn Email WhatsApp
    Peter Klapwijk
    • Website
    • X (Twitter)
    • LinkedIn

    Peter is a Security (Intune) MVP since 2020 and is working as Modern Workplace Engineer at Wortell in The Netherlands. He has more than 15 years of experience in IT, with a strong focus on Microsoft technologies like Microsoft Intune, Windows, and (low-code) automation.

    Related Posts

    Limit sensitive data in Outlook mobile notifications

    June 17, 2020

    How to start with Android Enterprise Corporate owned dedicated devices in Microsoft Intune

    April 24, 2019

    Secure Outlook Mobile with App Protection Policies

    April 3, 2019
    View 10 Comments

    10 Comments

    1. Lewis Shaw on October 28, 2019 16:30

      Thanks for this great article, all the Samsung System Apps appear to be removed on enrolment except the Galaxy Store App. We have identified that you can still launch some of the Samsung Apps that are hidden from within the Galaxy Store App. There doesn’t appear to be a way of hiding unwanted Apps that are not removed on enrolment via Android Enterprise Device Configuration Profile settings. We have even tried the Custom Profile OMA-URI settings but to no avail. Are you aware of how you can block the Samsung Galaxy Store App from the Android Enterprise Intune Platform? Also noticed you can initiate a Samsung device cloud backup from within the Galaxy Store App so we would love to block our users from launching this App.

      Reply
      • Peter Klapwijk on October 30, 2019 08:50

        Already tried to assign that Galaxy Store app as Assignment type Uninstall?

        Reply
      • Chris Hartmann on November 5, 2019 19:06

        Hi Lewis, We had the exact same issue. You can achieve what you need by creating a system app for the Galaxy store and then use the uninstall assignment. The package name is com.sec.android.app.samsungapps

        Reply
    2. Shay on December 26, 2019 14:47

      How I allow Enterprise system apps with work profile?

      Reply
      • Peter Klapwijk on December 27, 2019 16:26

        Hi Shay,

        What app are you thinking on to install in the Work profile? Usually you only deploy corporate to the Work profile.

        Reply
    3. David on April 16, 2020 14:22

      Hi Peter,

      It is possible to add Android Enterprise system Apps to the Android for Work profile?

      Reply
      • Peter Klapwijk on April 18, 2020 22:28

        Hi David,

        Not that`s not possible. All other Google play apps can be added, but not the system apps.

        Reply
    4. Thorben on October 6, 2020 09:36

      Hi all,
      thanks a lot for this tutorial. But its not working for me.
      We use KME and Intune.
      I create System app Kamera for package com.sec.android.app.camera assigned for me, but no installtion. test with galery working fine.
      I dont know, why…
      my enviroment, Galaxy A50, Android 10, Knox 3.5.Have anybody a idea? thanks please stay healthly

      Reply
      • Peter Klapwijk on October 6, 2020 11:04

        Probably the package name is not correct as this URL gives an error https://play.google.com/store/apps/details?id=com.sec.android.app.camera

        Reply
        • Thorben on October 6, 2020 11:28

          Thats right, but with Package Viewer i see this Namen. look here..
          https://docs.samsungknox.com/admin/knox-platform-for-enterprise/kbas/kba-360050735713.htm

          Reply
    Leave A Reply Cancel Reply

    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Awards
    Sponsor
    Latest Posts

    Create deployment ring groups for Microsoft Intune

    June 27, 2025

    Update Windows Defender during Windows Autopilot enrollments

    May 16, 2025

    Hide the “Turn on an ad privacy feature” pop-up in Chrome with Microsoft Intune

    April 19, 2025

    How to set Google as default search provider with Microsoft Intune

    April 18, 2025
    follow me
    • Twitter 4.8K
    • LinkedIn 6.1K
    • YouTube
    • Bluesky 1.5K
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Teams Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

     

    Copyright © 2025 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved, No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand; Don’t pass off my work as yours, it’s not nice.

    Recent Comments
    • Parth Savjadiya on Using Visual Studio with Microsoft Endpoint Privilege Management, some notes
    • Chris Johnson on Assign Deny Local Log On user right to an (Azure) AD group by using Microsoft Intune
    • Northernsky on Automatically wipe a Windows 10 device after a number of authentication failures
    • Henrik on Intune Driver update for Windows – Get applicable devices
    • Adam on Get notified on expiring Azure App Registration client secrets
    most popular

    Application installation issues; Download pending

    October 1, 2024

    Restrict which users can logon into a Windows 10 device with Microsoft Intune

    April 11, 2020

    How to change the Windows 11 language with Intune

    November 11, 2022

    Update Microsoft Edge during Windows Autopilot enrollments

    July 9, 2024
    Peter Klapwijk – In The Cloud 24-7
    X (Twitter) LinkedIn YouTube RSS Bluesky
    © 2025 ThemeSphere. Designed by ThemeSphere.

    Type above and press Enter to search. Press Esc to cancel.

    Manage Cookie Consent
    To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
    View preferences
    {title} {title} {title}