I have a small question about Android Knox Enrollment, checking your two enrollment guides online I see that in the old one you use MS url for the APK : “https://aka.ms/intune_kme_deviceowner”” which is also what is on MS guides, and on this guide using “https://play.google.com/managed/downloadManagingApp?identifier=setup”” e.g. :

How to easily enroll Android Corporate with Work profile devices with Microsoft Intune and Samsung Knox ME | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com)
Setup Samsung Knox Mobile Enrollment to enroll Android devices in Microsoft Intune | Peter Klapwijk – In The Cloud 24-7 (inthecloud247.com)
​
We are enrolling to Intune MDM, using the Company Owned Work Profile,
I have 2 questions:

What is difference between these 2 URL for APK, are there any benefits or options one has the other not?
I am asking this also in regard to the step-in enrollment when the device is installing Work Apps, I know Intune and Authenticator are installed by default but where do I add more apps “Additional Apps” as I have not seen this option in our Knox,

This might be a Microsoft Question but maybe you know, When Microsoft Authenticator gets installed during enrollment it also automatically configures an Authentication Profile do you from where is that Profile is configured from?
​

Thanks

Hi Jeremy,

The Android Enterprise configuration types you`re referring to, indeed require a factory reset for existing devices. So does Samsung KME for these types of managed devices. I indeed think the documentation of Samsung refers to Android Device admin.

Thanks for this article. I am unable to get a trial for my lab started without a proper company name/URL and contact info, so I’m hoping to check with you on something. Eventually I’ll be doing a trial of KME with a client, but until then this is a mystery.

Samsung’s guide mentions that the KDA allows us to forego needing to factory reset the devices (https://docs.samsungknox.com/admin/knox-mobile-enrollment/about-kda.htm – 2nd paragraph in the “About” section). However, Microsoft Intune’s documentation says a factory reset is a must (https://docs.microsoft.com/en-us/mem/intune/enrollment/android-samsung-knox-mobile-enroll#frequently-asked-questions – 3rd FAQ). I realize with Android Enterprise device owner enrollment types (Fully Managed, Dedicated, and COPE), the usual answer is that a Factory Reset is required, since it is from the OOBE that we enter afw#setup to get started with enrollment.

So I feel like Samsung’s statement in the link above is purely referring to Android Device Administrator deployments, which we know are now legacy and Android Enterprise is the proper way to go. Just trying to find out if indeed the KDA can allow devices to enroll into Android Enterprise Fully Managed, without factory resetting. Any idea?

Thanks in advance.