Forum Discussion

AdamPickett's avatar
AdamPickett
Level 1.5: Cupcake
6 months ago

DPC Extras true/false entries not taken effect

Hello Everyone,

 

I'm trying to determine if I have a config issue, or a device issue with a Zero Touch Configuration.

 

My configuration for DPC extras is as follows.

{
"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":false,
"android.app.extra.PROVISIONING_LOCALE":"en_GB",
"android.app.extra.PROVISIONING_USE_MOBILE_DATA":true,
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{
"com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "TOKEN"
}
}

 

So this works to the point that the language is being set and the enrolment token is being applied to the device. However the two config lines where there is a true\false option don't seam to be applying or working in the way I would expect.

 

When the device is reset it always asks for the WiFi connection even when mobile data is present.

And after enrolment all the system apps are installed.

The device in questions is a Samsung A15

 

Two initial questions;

 - Is there anything wrong with this config?

- Can a manufacturer chose to disregard these flags?

For reference I have disucssed this here: https://www.reddit.com/r/Intune/comments/1fct5pq/android_corporate_owned_work_profile_devices_and/

 

  • Moombas's avatar
    Moombas
    Level 4.1: Jelly Bean
    6 months ago
    "android.app.extra.PROVISIONING_USE_MOBILE_DATA":true,

    Doesn't mean to skip the wifi part, it only allows you to enroll even via mobile data (i think true is default, most likely false is used to force device being enrolled using Wifi).

     

    "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":false,

    Have you tried with set it to true and compared the amount of apps being present on the device?

    I bet there will be a difference. "system apps" doesn't include apps which the system needs (otherwise it would break your device), it does mean to block apps coming with the OS being somehow optional (bloatware for example can be part of it).

    Example from Zebra devices: StageNow will be removed/deactivated.

    • George's avatar
      George
      Level 1.5: Cupcake
      8 days ago

      Hi Moombas,

       

      We use the Google Zero-Touch enrollment method (as we don't only own Samsung devices, so we don't want to use Samsung Knox), and I managed to get the "LEAVE_ALL_SYSTEM_APPS_ENABLED" option working (works inside and outside the "ADMIN_EXTRAS_BUNDLE" part, so not sure what the preference would be).

       

      But the "USE_MOBILE_DATA" option does not seem to do anything (always asks for WiFi (with the option to choose for mobile internet) instead of skipping that step and directly use mobile internet), both inside and outside the "ADMIN_EXTRAS_BUNDLE" part (and I also tried both true and false, but no differences whatsoever).
      The "USE_MOBILE_DATA" option does seem to have the described behaviour when you add this setting to the QR-code enrollment method (or only wifi, or only mobile internet, not both), but we don't want to use that.
      See documentation for described behaviour:
      https://developer.android.com/reference/android/app/admin/DevicePolicyManager#EXTRA_PROVISIONING_USE_MOBILE_DATA

       

      And there are more settings which do not seem to do anything, for example:
      "android.app.extra.PROVISIONING_DISCLAIMERS"
      "android.app.extra.PROVISIONING_DISCLAIMER_HEADER"
      "android.app.extra.PROVISIONING_DISCLAIMER_CONTENT"
      "android.app.extra.PROVISIONING_SKIP_EDUCATION_SCREENS"
      "android.app.extra.PROVISIONING_SKIP_USER_CONSENT" (this one is already deprecated, so sounds logical that this one no longer works, but I do want to mention it)

       

      But maybe I do not use them properly.
      That's why I'm trying them inside and outside of the "ADMIN_EXTRAS_BUNDLE" part, and it seems the 3 DISCLAIMER ones need to be used as a bundle (but how).

       

      Like I said we don't want to use Samsung Knox, but it seems within Free part of Samsung Knox there are some settings which make the enrollment procedure to skip some enduser actions, which makes the enrollent procedure a little bit shorter for our endusers.
      And to me it looks like the same should be possible via the PDC Extra's in Google Zero-Touch as well (for example: "SKIP_USER_CONSENT" and/or "SKIP_EDUCATION_SCREENS").
      (same goes for the extra Agreements option in Knox, it sounds like this is done via the 3 DISCLAIMER extra's)

       

      So perhaps you have some more information for me?

       

      Thanks
      George

      • Moombas's avatar
        Moombas
        Level 4.1: Jelly Bean
        5 days ago

        As i understand, you trry to use "USE_MOBILE_DATA" in the ZTP configuration, right?

         

        Regarding the disclaimers, you should look here (never used them yet):

        https://developer.android.com/reference/android/app/admin/DevicePolicyManager#EXTRA_PROVISIONING_DISCLAIMERS

         

        "android.app.extra.PROVISIONING_SKIP_EDUCATION_SCREENS" worked for me in the past when i tried it out (but is not in use yet). There should be less screens be shown during enrollment than without (but still some are there, i guess depending on the OEM).

  • AdamPickett's avatar
    AdamPickett
    Level 1.5: Cupcake
    6 months ago

    Thanks for your reply.

     

    I'll run the test with all system apps enabled set to true.

     

    However when set to false I'm getting apps like Facebook and Spotify installed into the personal profile.

     

    Kind Regards

    Adam

    • Moombas's avatar
      Moombas
      Level 4.1: Jelly Bean
      6 months ago

      Not all apps are affected, this very depends on the oem.

      And top be honest i only work with fully managed so not sure how this works for COPE devices.