User Profile
Prathik
Level 2.0: Eclair
Joined 2 years ago
User Widgets
Contributions
Re: How to set policy through my emm in zero touch enable devices?
Hi, were you able to figure this out? I am running into the same issue. Did you figure out what DPC extra we should be passing? I am using AMA API and passing the DPC extra through iframe url https://developers.google.com/android/management/zero-touch-iframe#iframe_url_parameters23Views0likes1CommentMigration from Airwatch to Android Management API
One of our customers is currently onboarded to Airwatch to manage their devices, but they want to move to our Android Management API (AMA) based device management solution. Is there any support available to silently migrate these devices? Or is the only way to wipe the devices and onboard AMA. I see there is support if we own the custom DPC application. But in this case since its owned by Airwatch its out of our control.Managed configuration not getting pushed onto some devices in work profile
My team uses AMA API to managed devices. As part creation of enrollment token we push some applications and managed configuration to those applications as part of the policy. But we are noticing that this is not very reliable. We have many user stories where the app gets installed but the managed configuration is missing. This doesn't happen on all devices but the occurrence of this has been increasing. Is there any known issue or SLA on how long it takes for the managed configuration to be pushed? We have an Application that is set as Required for Setupin the policy. This Application has managed configuration setup, which is required for App registration. This is missing by the time app launches and app registration fails and consequently the work profile provisioning fails.Solved227Views1like10CommentsApplication report not getting collected on Xiaomi mix fold devices
We have couple of users who have the Xiaomi Fold device and in the application report section of status report notifications we are only getting the android device policy app. None of the other applications are getting returned. Is this a known issue? How can we debug the issue? I was not able to see anything obvious in the device logs. We are getting the full application report for the other devices.157Views0likes1CommentFew customers not able to install applications in personal profile after work profile is setup.
Hi, We have few customers reporting that they are not able to install applications in personal profile after work profile is setup. If they remove work profile they are able to install any application they want. Have we seen this behavior before? If the have work profile and try to install applications in personal profile they just get the error. `Can't install <appname>`. I validated that one of the device has enough storage(about 100gb). And the device logs is not showing anything obivous.506Views0likes2CommentsRe: Smart watch notifications for work profile are being blocked by Android Management Policy
We were able to enable it by using the personalAppsThatCanReadWorkNotifications setting. We had to add the applications supporting the smart watches into this field. And it works. Thanks for the support.3.1KViews2likes11CommentsSmart watch notifications for work profile are being blocked by Android Management Policy
Hi, Few of our work profile customers are facing issue accessing work profile notifications on their smart watches. This used to work before and it stopped working few weeks back. We have not done any changes to the Android Management API policies and are not sure what is causing this. Is there a specific policy setting applicable for this that we need to enable? Attached few screen shots. Thank you.Solved3KViews0likes14CommentsRe: Elevate the employee experience with Android 14
Hi, according to this articles the screen shots of work profile is supposed to get saved in the work profile in Android 14. But this doesnt seem to be working on my Samsung S23. The screen shots are still getting stored in the personal profile. Is these some setting I am missing. I am using the Android Management API to create these work profiles.3.1KViews1like0CommentsSystem updates behaving differently on Pixel and Samsung devices.
Hi, I'm trying to get some explanation on why the system updates is behaving differently on Pixel and Samsung devices. The System update Type is set to "AUTOMATIC" in the Android Management Policy. On Google Pixel : the screen says "System software update of this device is controlled by your organization" and doesn't allow the user to manually update as well. It eventually updates to latest SPL but this is causing new corporate device enrollment a ~2hr delay to get the latest SPL and therefore delay in setup of some of the apps that have strict Security patch level requirement. On Samsung : The screen is not blocked and the user can manually update, but in case the user doesn't manully update the automatic update never happens. Curious on what is the reason for this behavior.1.8KViews0likes3CommentsRe: Seeing inconsistency in START_LOST_MODE in android management api
And sometimes I see the below response in the notification endpoint { "done":true, "error": { "code":2 }, "metadata": { "@type":"type.googleapis.com/google.android.devicemanagement.v1.Command", "type":"START_LOST_MODE", "createTime":"2023-11-29T18:10:11.970Z", "duration":"600s", "errorCode":"UNKNOWN", "userName":"enterprises/LC034k****/users/103356011475399598171", "startLostModeParams": { "lostMessage": { "defaultMessage":"Hello there, this is a lost device" }, "lostPhoneNumber": { "defaultMessage":"1231231234" }, "lostEmailAddress":"ganip@amazon.com", "lostStreetAddress": { "defaultMessage":"123lane WA" }, "lostOrganization": { "defaultMessage":"Amazon" } } }, "name":"enterprises/LC034k****/devices/315c78b0b91fbc21/operations/1701281411970" }1.5KViews0likes0CommentsSeeing inconsistency in START_LOST_MODE in android management api
Hi, I'm implementing the START_LOST_MODE for my organization. The command works and I see the notification on the device saying that its a lost device. If the user doesn't do anything on the device, we can send the STOP_LOST_MODE and START_LOST_MODE again and it works as expected. But if the user takes some action on the device to unlock or select not my device. Then none of the `START_LOST_MODE` commands work again. Is there a limit to how many times this command can be used? Below is the response I get for GET /operation for the issue command. { "name": "enterprises/LC02ot****/devices/3e4aa95e427****/operations/1701195873812", "metadata": { "@type": "type.googleapis.com/google.android.devicemanagement.v1.Command", "type": "START_LOST_MODE", "createTime": "2023-11-28T18:24:33.812Z", "duration": "3600s", "userName": "enterprises/LC02ot****/users/10750409941529692****", "startLostModeParams": { "lostStreetAddress": { "localizedMessages": { "en-US": "1800 Amphibious Blvd. Mountain View, CA 94045" }, "defaultMessage": "1800 Amphibious Blvd. Mountain View, CA 94045" }, "lostOrganization": { "localizedMessages": { "en-US": "Example Organisation" }, "defaultMessage": "Example Organisation" } } } }1.6KViews0likes2CommentsRe: Is there a way to force users to reset passcode without admin needing to give a temporary password.
Hey Jason, I'm running into some issues when trying this out. I'm able to reset password with or without input initially. But once the password restriction is setup in the policy. The reset command fails with any password that is not compliant with the password restriction(even empty password doesnt go through). After this any RESET_PASSWORD command i send (even compliant one) doesn't go through. When I do the GET operation command i get a response without the `done` or the `error` fields. { "name": "enterprises/LC02otg***/devices/3e4aa95e4274***/operations/1701193847359", "metadata": { "@type": "type.googleapis.com/google.android.devicemanagement.v1.Command", "type": "RESET_PASSWORD", "createTime": "2023-11-28T17:50:47.359Z", "duration": "600s", "newPassword": "222222", "resetPasswordFlags": [ "LOCK_NOW" ], "userName": "enterprises/LC02ot***/users/107504099415296****" } }4.6KViews0likes0CommentsRe: Is there a way to force users to reset passcode without admin needing to give a temporary password.
Okay thank you. We will go ahead with the following approach. 1. Set Password Policy 2. Set Policy enforcement rule for `passwordRequirement` with blockAction set to 0 days. 3. Send Reset password command with empty/static password which is not compliant with passwordRequirement. That should block the user until they reset password.4.8KViews0likes0CommentsRe: Is there a way to force users to reset passcode without admin needing to give a temporary password.
Yes I have tried this and it works. The concern is that, in the period between when the password is wiped and legit user gets the chance to set a new password, any one who gets access to the device will be able to unlock witout password and set their own password.4.8KViews1like1CommentIs there a way to force users to reset passcode without admin needing to give a temporary password.
Hi, We have a requirement to force few users to reset passcode. I have tried with https://developers.google.com/android/management/reference/rest/v1/enterprises.devices/issueCommand#CommandType and it works fine when we mention the new passcode. I am wondering if there is a way to force users to change passcode without us having to give and store temp passcodes for each user. I am aware that we can do this with password restrictions as part of policy https://developers.google.com/android/management/reference/rest/v1/PasswordRequirements, but is it possible with a one time issue command. Thank youSolved4.9KViews1like8Comments