Comments on: How to start with Android Enterprise work profiles in Microsoft Intune

By: Sudhir Gattu

Sudhir Gattu — Wed, 21 Sep 2022 13:01:24 +0000

Life becomes with such articles. Thanks for making it simple and clear with no jargons.

By: Ben

Ben — Tue, 06 Sep 2022 23:50:50 +0000

Thanks for all this information. I am having a small issue. I have tried to make apps available but not required. Its been 24 hours and they are not showing up in the google play app in the work profile yet.
I have tested a few apps. some i made available to enrolled and one available to Available with or without enrollment.
This has been tested on a Note 8, Galaxy tab s4 and a Fold 3

By: Bilal Khan

Bilal Khan — Wed, 29 Sep 2021 18:35:12 +0000

Hi Peter

I have a requirement where i need to deploy MDM+MAM for all the company and owned devices and only MAM for personal devices.

I can deploy MAM for personal devices however not able to find out a way of deploying MDM+MAM for company owned devices.

Any help would be highly appreciated.

Regards,
Bilal Khan

By: Peter Klapwijk

Peter Klapwijk — Mon, 03 Aug 2020 11:47:40 +0000

Hi Mirza,

1. You can use an App Configuration Policy for that.
2. No, not that I know.

By: Mirza

Mirza — Tue, 28 Jul 2020 10:28:34 +0000

Hi brother
No doubt your article is very useful. But u have a scenario in which I have to setup two situations.
1. The user when login to intune gets automatically logged in to outlook account.
2. The user in outlook cannot share the files outside of work profile but can attach files outside work profile in outlook email message.

By: Peter Klapwijk

Peter Klapwijk — Fri, 21 Feb 2020 07:44:15 +0000

In reply to Dan.

Hi Dan,

You should give the App Configuration Policy a try. As Device enrollment type choose Managed devices and choose Microsoft Outlook as Targeted app.
It will give you an overview of what can be configured with Intune for Outlook.

Regards,

Peter

By: Dan

Dan — Fri, 21 Feb 2020 02:53:58 +0000

Thanks for this
Can you configure a Email Profile to use the Outlook app when using the
Corporate-owned dedicated devices enrollment option?

By: Peter Klapwijk

Peter Klapwijk — Fri, 06 Dec 2019 11:46:12 +0000

In reply to Laurynas. You need to be in the Intune (Endpoint Manager) section to perform a wipe. Under devices, Android find the device from which you want to wipe the work profile. click on the device and on the Overview tab click Retire. This will remove company data (the work profile).

By: Laurynas

Laurynas — Mon, 18 Nov 2019 11:44:35 +0000

Very good article.
I have one question, is there any option to wipe work profile remotely, from Azure portal?

By: Peter Klapwijk

Peter Klapwijk — Fri, 18 Oct 2019 19:13:24 +0000

In reply to Dave Boxall.

Hi Dave,

Is a work profile a requirement?
Otherwise have a look at Fully Managed. With Fully managed you have control over the Play store; you can block access to the public Play store and only allow access to apps you publish via Intune. Have a look at this article https://inthecloud247.com/how-to-start-with-android-enterprise-corporate-owned-fully-managed-user-devices/
To block personal accounts in for example Outlook, you could use App Config policies combined with the Fully managed option.

But if you want a combination of a fully managed device with Work profile, that option is not (yet) available with Intune. That management scenario is called COPE, Corporate Owned Personally Enabled. But as the name says, personally enabled. So no idea if that will give you the option to lock everything outside the Work profile container.

Last option is the Fully managed kiosk scenario, but it is not really meant for personal use.

Regards,

Peter