Widgets on COPE - MS Intune
Hey, Unfortunately there are no settings and/or no chance configure Widgets on COPE in MS Intune. There is specific setting in Intune restrictions config profile to allow/disallow Widgets for BYOD method. Is this problem tied only MS Intune or is this something for Google? Majority of our 10k fleet enrolled as COPE and it's a big gap not having widgets available for Work Apps. Thanks Jarmo
Testing Apps on BYOD Work Profile
We are a game app development company and we use both company-owned and personally owned devices (BYOD) to test our apps. We have been managing BYOD as Android device administrator, but recently migrated to Android Enterprise. The Android Enterprise BYOD work profile does not allow app installation from anything other than managed google play, so we are unable to install apps from Firebase App Distribution or Microsoft App Center, which we have been using to test apps. We tried uploading the app to Managed Google Play, but it was not sufficient for testing, as had to update the version code after each upload, and past versions could not be installed, and it took longer (than before) for the updates to take effect (Also, the app must be uploaded as a production version and cannot be used for internal test). What we would like to know is how to test the app in the Android Enterprise BYOD work profile (as we have done in the past); it would be great if we could install the app from Firebase App Distribution, or use Google Play's internal app sharing (not available right now) would be fine. Does anyone have any ideas? Or are there any plans for improvements on the Android Enterprise roadmap?
Work Profile Password Complexity affects Personal Space device password that unlocks the device : Intune
Hi, Personally owned devices with a work profile running on Android 12 and above devices today, we are over controlling their personal space by demanding complex password setup. there are two passwords affected by this Password complexity setting in Intune : The device password that unlocks the device The work profile password that allows users to access the work profile Even we choose medium complexity, user are getting a notification to change the device password to complex. this is not feasible for the BYOD scenario. Yes, i can understand security perspective avoid simple passcode, but policy shouldn't force for lengthy and complex passwords. how you configured this password complexity your environment ?.Install Certificate Authority on personnally owned device via Android Management API Policies
Hello community, I am trying to install a Certificate Authority on android devices via work profiles. The devices have been enrolled via Android Management API, and the policy is applied on devices without any problems (as reported by Android Management API). I used the openNetworkConfiguration field on the policy as followed : "openNetworkConfiguration": { "Type": "UnencryptedConfiguration", "NetworkConfigurations": [], "Certificates": [ { "GUID": "company-certificate-authority-19201", "Type": "Authority", "X509": "MIIF... (base64 encoded DER certificate authority)", "TrustBits": ["Web"] } ] } Nevertheless, this do not seem to work. I checked in the phone settings > certificate authorities and there is no certificate authority on the work profile. When I try to visit a website with a certificate signed by the aforementionned CA, I get certificate authority unknown error. Are these settings ignored on-purpose ? Did I missed something ? By the way, I already tried the following without success: Use PEM-encoded-base64ed in the X509 field instead of DER-encoded (DER-encoded certs is used in the example provided in the openNetworkConfiguration spec). Use "Server" type instead of "Authority" Do not use the "TrustBits" setting Thanks for your help 🙂
BYOD AE Work Profile - Samsung Device with Android 12, 13 - Sharing Serial no/IMEI details with Intune MDM
We are observing, Intune started displaying the Serial no's /IMEI's of Samsung Android 12, 13 device and device type is BYOD -> Work Profile. did you see this in your environment? Model affected are SM-A,G,S,G,M SERIES.
Allow only one domain in Work Profile
Hi All, We have registered Android EMM with Managed Play Account (gmail) in Workspace ONE. We use Google Workspace for Google apps like email, calendar etc. I need to allow only adding our domain (mycompany.com) in Google Apps inside Work Profile. Is this possible? If yes, please guide me. PS: We are not registering Android EMM with Google Workspace because the email domain is different from our IDP (Okta). Thanks.
SMS Broadcast works only in Samsung Devices
Hi Folks, As there's a limitation to the reception of SMS Broadcast in WorkProfile, I can receive SMS events in Work Profile (only on Samsung devices), and not on any device from other manufacturers. Is it an explicit feature from Samsung or a limitation of other manufacturers? Any kind of help is appreciated. jasonbayton