Comments on: How to start with Android Enterprise Corporate owned, fully managed user devices in Microsoft Intune

By: David Green

David Green — Tue, 11 Jul 2023 08:44:45 +0000

Hi, is there any danger of using user assigned groups to other devices? I have configured profiles, policies etc for Android enterprise fully managed devices, however when I use dynamic groups the pin is not enforced during enrollment and it only shows as an update in the intune app on the phone afterwards which means the user can just bypass setting up a pin. I can’t get around this and even microsoft states this is the case. When I use user assigned gourps eveything works perfectly during enrollment, however I am worried that these configurations and policies will follow the users onto other devices for example personal devices with the company portal on them. This has happened n the past on apple devices and a s a result a personal device was wiped. I have tested this for Android and there doesn’t appear to be any effect but I don’t want 1000 devices going out with this as a risk.

By: David green

David green — Mon, 10 Jul 2023 13:52:38 +0000

Hi, I am trying to find out if it is absolutely necessary to use dynamic device groups for enrolment. I like the idea and would prefer to use them however pins are not enforced during enrolment but is left to the user post enrolment which to me defeats the whole purpose of fully managed devices. If I use user assigned groups everything is done during enrolment perfectly. Are there any risks or consequences of using user assigned groups for example if people have the company portal on their personal device would being in that group change anything. I have 1000 android devices to go into production and this a major concern. Would this also mean the enrolment profile would not be needed and qr code would be default?

By: Jon Gibbons

Jon Gibbons — Thu, 02 Feb 2023 08:35:25 +0000

Is there a way for me to restrict what mobiles can enrol. For example if I want to deny phones that are below Android v11 from enrolling can I stop them but allow anything over v11

By: L. Smeets

L. Smeets — Thu, 12 May 2022 09:40:30 +0000

Hi,
I just followed the steps but at the user experience I wont get the step:
– Set a screen lock
I only got the steps for install work apps and Register your device. I tried the setup from Knox > Intune and from afw#setup. Created a configuration profile (assigned to a dynamic device group) and only selected the pincode to deploy with 4 digits. All my devices are Corporate and AndroidEnterprise.

Did I miss something?

By: Rahul

Rahul — Wed, 27 Apr 2022 22:45:48 +0000

Hi,
I am getting an error “Invalid QR code” even after scanning the code directly from Intune. I tried to enter the token manually as well but it’s giving the same error. Can anyone tell me what can be the issue? And how can I fix this?

By: Peter Klapwijk

Peter Klapwijk — Thu, 07 May 2020 18:10:50 +0000

In reply to Stuart.

Hi Stuart,

Completely depends on your needs. If an app is required/ available for everyone, you could assign it to all users or all devices.
If an app is only available for a group of users, use user assignment. If there is a reason that an app is only available for example for a device model, use a device group.
But keep in mind, (at this moment) you can not exclude an user group when a device assignment is used and vice versa.

By: Stuart

Stuart — Thu, 07 May 2020 15:14:43 +0000

hi
new to using in tune for android enterprise, do you assign Apps to user group or Device groups

By: Tee

Tee — Sat, 20 Jul 2019 13:52:54 +0000

Hi I have tried this and it works 2 out of 4 times…hence public preview – but all in all it works a treat and the way corp devices should be deployed.

By: Peter Klapwijk

Peter Klapwijk — Thu, 16 May 2019 14:17:59 +0000

In reply to Peter Klapwijk. Hi Roy, I can confirm when applying these three 'Users and accounts' settings, I`m not able to register the device using the Intune app. It gives me an error: This change isn`t allowed by your administrator.

By: Peter Klapwijk

Peter Klapwijk — Thu, 16 May 2019 13:55:21 +0000

In reply to Roy Scheepbouwer.

Hi Roy,
No I haven`t tested this with these settings, but let me give it a try and get back to you.
No I`m not using KME, it`s just a lab environment. Used the QR code to enroll the device.