Silent installation of applications on TELPO devices using Android Enterprise
I have an Android application that I want to use on TELPO devices, but in a way that updates are downloaded silently on the device, meaning the user does not have to intervene to update or install an application. I understand that with the configurations offered by Android Enterprise, it is possible to set up a device to allow the actions I require.
Please help - new company, email & phone yet already enrolled??
I'm hoping someone can help, as I'm at a complete loss. I am the sole owner and operator for my newly formed design company, bought a new Moto G Play and created a new email for it. After some fiddling, though, I saw that it had Moto Device Management installed already, but asks for a code from my administrator... Again, it's only me and everything is brand new, but even Google won't let me sign up for an enterprise account, saying to talk to my admin. I've factory reset, yet the problem persists and strange apps/functions are happening with the phone, as if someone else is "managing" my company device already. I've scoured forums, FAQs and articles to no avail; in fact, learning of the capabilities, I'm quite worried. Luckily, I noticed it before putting anything besides that new email on it, but it's obviously compromised by someone else - there are many, many system apps now on it that aren't from the play store, nor came with the phone initially. What can I do? Any help is appreciated.
[Community survey] Android Enterprise training / certification
Hello everyone, We know security is an important area to many of you here in the customer community and we have heard here and there some interest in a security certification and or training. Based on this, we wanted to explore this a bit more - we have created a community survey to gauge your interest and gather your thoughts around this further. If you have any additional questions, please to reply to this topic below. Thank you for your time and feedback. Lizzie (and the Customer Community team) Loading…
Issue with Copy/Paste Restriction in Intune MDM on Android Devices (Clipboard Editor Interaction)
Hi all, I’m currently experiencing an issue while setting up Intune MDM on Android devices related to restricting copy and paste to unmanaged apps. Specifically, the issue occurs when users copy text from the Teams app and try to paste within teams app. Here's what happens: After copying text, a message "Your organisation's data cannot be pasted here" immediately appears in the clipboard hud. The copied data seems blocked from being viewed, as the error message appears even before a paste attempt. Despite this, users can manually paste the copied content by long-pressing or selecting "Paste" from the text box. However, when trying to use the "paste from clipboard" feature, the warning message above is pasted instead of the copied content. We’ve set the Intune policy to allow copy/paste within managed apps, but the clipboard interaction seems to be problematic, especially with Gboard. It appears that Gboard, possibly due to Android 13 and 14’s Clipboard Editor, is treated as an unmanaged app, causing Intune’s data protection policies to block its access to the clipboard in a read-only state. Just to clarify: I want users to be able to copy and paste txt within managed apps only. So the allowed behavior of pasting with long press is fine, but I want to get rid of the block that we're getting. Here’s what we’ve tried: Added various exclusions to the Intune policy, including Gboard, Clipboard Editor, and other related apps (full list below), but the issue persists. Testing different configurations hasn’t led to a final solution, and there seems to be limited documentation specifically addressing this clipboard component in relation to Intune's data policies. We’ve escalated the issue internally but wanted to see if anyone in the community has encountered a similar problem or found a solution. Here’s the list of exclusions we’ve already added to the policy: Clipboard: com.android.clipboard SMS: com.google.android.apps.messaging SMS: com.android.mms SMS: com.samsung.android.messaging Native phone app: com.android.phone Google Play Store: com.android.vending Android system settings: com.android.providers.settings Android system settings: com.android.settings Google Maps: com.google.android.apps.maps Gboard: com.google.android.inputmethod.english Samsung: com.sec.android.inputmethod Gboard: com.google.android.inputmethod.latin Gboard: com.google.android.apps.inputmethod.hindi Gboard: com.google.android.inputmethod.pinyin Gboard: com.google.android.inputmethod.japanese Gboard: com.google.android.inputmethod.korean Gboard: com.google.android.apps.handwriting.ime Gboard: com.google.android.googlequicksearchbox Gboard: com.samsung.android.svoiceime Gboard: com.samsung.android.honeyboard Gboard: com.android.inputmethod.latin Teams app: com.microsoft.teams Any insights or suggestions would be greatly appreciated! This is my first time posting so apologies if this is the wrong space.
Device doesn't show factory reset message (2 hours) after signing configuration in Zero Touch Portal
We have some devices registered on the Zero Touch portal that belong to the organization, and whenever we signed up for an enrollment configuration, since this device was not configured in our EMM, it would request a factory reset with a message saying that the device belonged to organization X and would be formatted within 2 hours. But that stopped working. Does anyone know if anything has changed in the Zero Touch portal's ownership policy?
Keyless authentication for Zerotouch enrollment
Documentation recommends creating Google Cloud Service account keys and passing the key to createResellerService[1]. This appears not to be best practice from a security perspective[2]. Are there other keyless authentication options like Workload ID federation etc ResellerService samsungResellerService = SamsungResellerServiceFactory.createResellerService(resellerId, serviceAccountKeyFilePath, clientIdentifier); [1] https://developers.google.com/zero-touch/guides/reseller-library/common-operations#create_resellerservice_objects [2] https://cloud.google.com/iam/docs/best-practices-service-accounts#service-account-keys
Installed device policy used for hacking.
This device policy was installed on my phone through firebase from Google. I I have reported this to Google in regards to the hacking and the device control I cannot uninstall it and I show a shell manifest on my phone to be using the developer platform to redirect everything through Androids system. So either someone has hacked into the Android platform and as redirected everything or this is an open-ended warrant for 5 years now for an invasion of my privacy. Either way the Google is liable by either not protecting my privacy or by complying with such an order for 5 years and never asking why. You can look at my Facebook page and see exactly why this invasion of privacy has been ongoing. Jim Mininno or Vincent Mininno. I plead with someone to help me get this results as me and my children has been made the victims of the department of defense and Google.Force settings on Dedicated devices during enrollment
Hello all, I'm trying to deploy a Dedicated device profile in Microsoft Intune, I created the configuration profiles and the compliance policy with some settings, in specific about PIN creation and complexity, but during the setup users are not asked to enter any PIN, and at the end the device result non-compliant until the PIN is set and is fulfilling the rules I set. Is there by any chance a way to force the PIN creation request during the enrollment phase as happens for user-associated devices? Thanks in advance /Lucius
Disable prompt for the user's consent for an app that records screen
We are working on an app that is used to test our software and products. The app is constantly running on test Android devices. It starts recording the screen based on an event and sends the recording to our backend servers to verify that the test passed. Currently, the whole process halts if the app or OS is restarted until a human approves the screen recording dialog that pops up when the app opens. Is there a way to pre-approve the screen recording for this app using the Enterprise Management APIs. As mentioned before, the app only runs on test devices that are not used by any employees. Currently, we have to constantly monitor these devices just to press the screen recording approval button when the app crashes, has to be restarted, or when the os is updated. I am trying to find a solution so that this is automated. Thanks for any help
