Comments on: How to configure Android Corporate owned, personally enabled user devices with Microsoft Intune

By: Arty

Arty — Wed, 16 Mar 2022 17:33:16 +0000

Hi Peter,

Great guide and I just wanted to check something.
In terms of user experience, it is absolutely fantastic that you can simply send them a device and it will set up two profiles for them and if we remote wipe it will not effect their personal data etc.
The question is: If a user has a personal account added to it with personal settings, pin, password etc and the user needs to return the device back to the company. As we do not know the password to access personal settings is it essentially now a brick device as there is no way we can factory reset it for re-use?

It is of course completely different for fully-managed devices as we have the powers to do it but not corporate owned personal devices.

Hope the question makes sense?

Many thanks in advance,
Arty

By: Peter Klapwijk

Peter Klapwijk — Tue, 29 Jun 2021 08:41:44 +0000

In reply to Aron. Android 11 still supports 'tapping' on the first OOBE screen to start the QR Scanner and enroll in, for example, COPE. Haven't seen any issues with that.

By: Seb

Seb — Fri, 25 Jun 2021 14:20:15 +0000

Thank you for this very detailed and helpful guide (I initially used “afw#setup” to enroll.

However there is one strange problem I can’t really get behind: the installation of Intune and Authenticator during enrollment doesn’t seem to work whatever I’d try. Both apps show a red exclamation mark instead of a checkmark and when I hit “Next” ist just says that the device can’t be set up and needs to be reset.

By: Aron

Aron — Tue, 25 May 2021 23:09:27 +0000

Peter, great guide but you kind of skipped the QR code scanning part in the End User Experience chapter of the article.
Android 11 + QR code scanning = how? No amount of tapping does anything.

In my experience the Intune COPE QR scanning does not invoke Work Profile setup in any way. This is today, 26.05.2021.
You can invoke it by typing the (Intune QR- ) URL to the browser manually but how is that 21st century…
Part Microsoft issue but also part Android issue.
I do understand the release date of the article.
BYOD works great with Intune.

By: Peter Klapwijk

Peter Klapwijk — Tue, 13 Apr 2021 15:01:46 +0000

In reply to Sven Van thielen. Hi Sven, It's known dynamic groups are slow, if you can avoid using those groups, do it. If you for example only manage personally en corporate-owned device with work profile, you could assign the profiles to all users/ device. The COPE profile isn't applied on personally owned devices and vice-versa.

By: Sven Van thielen

Sven Van thielen — Tue, 13 Apr 2021 12:05:15 +0000

Hi, Great guide indeed but same issue here, the device is only registered in the dynamic group until i sign in to the intune portal which is a few step too late. so my pin code is not enforced, what can we do about this?

By: Carsten Nielsen

Carsten Nielsen — Tue, 03 Nov 2020 10:29:45 +0000

Hello

Great guide, but I can’t register my device, the secure part is failing, do you have an idea why?

By: Ronald

Ronald — Thu, 03 Sep 2020 11:50:13 +0000

i had the same thing when configuring a Exchange online mailbox with the Outlook app. Turned off the app protection policy and now it works. When i use on premise Exchange it works though. The only downside to that is i don’t see phone numbers in the GAL (Global address list)