Contents
Docs
General
Provisioning
- Android Enterprise DPC identifier collection
- Android Enterprise provisioning guides
- Android Enterprise zero-touch DPC extras collection
- Infobyte: Did you know? Android Enterprise deployment scenarios
- Infobyte: Did you know? Android Enterprise fully managed provisioning methods
- Manual Android Enterprise work-managed QR code generation for MobileIron
Fully managed
Company owned work profile
Zero-touch
App management
- Set up Hypergate's Kerberos Authentication on MobileIron Core for Android Enterprise
- Managed Google Play, whitelist or blacklist?
- Considerations when deploying MTD with Android Enterprise
- Why you shouldn't install apps from unknown sources
- Create and manage private apps for Android Enterprise
- What is OEMConfig?
- Create and manage web apps for Android Enterprise
- How to locate a private Android app assigned to an organisation ID
- Handling Android 13 notifications permission
Security
- Set up Hypergate's Kerberos Authentication on MobileIron Core for Android Enterprise
- Why you shouldn't install apps from unknown sources
- Feature spotlight: Block unknown sources on work profile deployments
- Feature spotlight: Factory Reset Protection
- Feature spotlight: Android Smartlock
- Gartner comparison of security controls for mobile devices 2019
Android Enterprise Recommended
FAQ
- Is Android Enterprise supported on uncertified (non-GMS) devices?
- Does Samsung support Android Enterprise?
- What versions of Android support Android Enterprise?
- Can I change the account I used to bind Android Enterprise?
- How to check if an Android device is GMS/Play Protect certified?
- What is the Android Enterprise "bind"?
- To use Android Enterprise do I need to buy Google Workspace (G Suite) and register my domain?
- What devices should I buy for my organisation?
- If Android Enterprise is supported from Lollipop, why is Marshmallow often mentioned instead?
- What’s the difference between Device Admin and Android Enterprise?
- Is it possible to bind Android Enterprise with multiple EMMs?
- What is Android Enterprise Recommended?
- My AER device doesn’t work properly with Android Enterprise, what should I do?
- Is Android One better than AER? (Or the other way around?)
- What’s the best provisioning method?
- How do I configure Google Workspace domains for provisioning?
- What’s the difference between allow adding accounts vs allow configure credentials?
- Is it possible to utilise multiple VPN connections within a profile?
- Does Android support Kerberos natively?
- What’s the difference between device based accounts and user based accounts?
- How do I manage the new notifications runtime permission in Android 13?
- Can organisations see applications outside of the work profile?
- Can organisations deploy applications to the parent profile in a work profile deployment?
- Is it possible to migrate from DA to AE work profile without a re-enrol?
- What is a work challenge?
- Enrolment failed but the work profile was created. How do I remove it?
- How can I provision a fully managed device?
- Is it possible to “retire” (or enterprise wipe) a fully managed device?
- Devices factory reset as soon as they’re enrolled, why?
- Is Factory Reset Protection enabled on fully managed devices?
- Is it possible to migrate fully managed devices between EMM solutions?
- How has COPE changed in Android 11?
- Does Intune support COPE?
- Can organisations see applications outside of the work profile on a COPE device?
- Can organisations deploy applications to the parent profile in a COPE deployment?
- Is it possible to migrate from fully managed to work profiles on fully managed devices?
- How should system applications be handled on a COPE device?
- What OEMs currently support zero-touch?
- Where are zero-touch resellers located?
- Does zero-touch cost anything?
- Is an EMM still required with zero-touch?
- What happens if a fully set up device is added to the zero-touch console?
- What happens if a user starts setting up a device before the zero-touch config is applied?
- What happens if a zero-touch config is removed from an enrolled device?
- What happens if a new config for a different EMM or server is applied to an enrolled device?
- What happens if a zero-touch assigned device is reset?
- What happens if a device is unregistered from the zero-touch console?
- Can a device be OTA managed from the zero-touch console?
- Does enrolling via zero-touch slow down or cause any delay to the setup process while it’s retrieving the zero-touch config?
- What deployment scenario will a zero-touch device enrol under?
- Why does zero-touch require so much touching?
- Can anyone add a device to the zero-touch console?
- Is it possible for an organisation to add previously-purchased devices to zero-touch?
- Can anyone remove a device from the zero-touch console?
- Does Samsung support zero-touch?
- Is it possible to set a zero-touch default configuration?
- Is it possible to bulk update zero-touch devices?
- Is it possible to change zero-touch resellers?
- Are all zero-touch devices Android Enterprise Recommended?
- What are DPC extras?
- What should I put in DPC extras?
- What happens if a device is uploaded to zero-touch with the wrong manufacturer?
- The device registered with zero-touch, but doesn’t launch during setup, why?
- Does Android Go support zero-touch?
- Are employee-owned devices eligible for zero-touch?
- What’s the recommended way of managing in-house (private) applications?
- Is it possible to deploy app shortcuts to the homescreen of an Android Enterprise device?
- The Google Play iFrame is missing a feature in my UEM. How do I enable it?
- How do I configure allowlist/blocklist domains for Google Chrome?
- How do I configure Chrome managed bookmarks?
Device admin
Resources
- How to become a zero-touch enrolment reseller
- Android Enterprise DPC identifier collection
- Android Enterprise provisioning guides
- Android Enterprise zero-touch DPC extras collection
- Android glossary
- Android version evolution graphics
- Infobyte: Did you know? Android Enterprise deployment scenarios
- Infobyte: Did you know? Android Enterprise fully managed provisioning methods
- Infobyte: Did you know? Device Admin deprecation
- How to submit a device for Android Enterprise Recommended validation
- Gartner comparison of security controls for mobile devices 2019
Vendor specific
Hardware validation
- Android Enterprise device testing
- Google Pixel 3a Android Enterprise validation report
- Moto G7 Power Android Enterprise validation report
- OnePlus 6T Android Enterprise validation report
- POCO F1 Android Enterprise validation report
- Sony Xperia L3 Android Enterprise validation report
- Honor Play Android Enterprise validation report
- Android Enterprise independent validation process and information
Android
Contents
If you manage Android devices in the enterprise, you’ve come to the right place! Below you’ll find a selection of documents covering all aspects of Android and Android Enterprise.
Whether you’re just discovering Android Enterprise or are looking to boost existing knowledge, the below should be helpful across the board. Looking for something specific that hasn’t been documented? Submit your question on GitHub (account required)!
What's new for enterprise in Android 14?
#The official release of Android 14 will be upon us in the next few months. Is your organisation prepared for what's to come? Check out what's new in Android 14!
Android Management API's forgotten release notes
#Google hasn't provided release notes for the Android Management API & Android Device Policy app in months. How long exactly? Check out the public tracker and help hold Google to account.
General
#Provisioning
#Zero-touch
#App management
#Security
#Android Enterprise Recommended
#FAQ
#Device admin
#Resources
#Vendor specific
#
Something missing?
#Are you looking for information not published here? Feel free to get in touch to ask a question or request a new document! (GitHub account required)
Docs
General
Provisioning
- Android Enterprise DPC identifier collection
- Android Enterprise provisioning guides
- Android Enterprise zero-touch DPC extras collection
- Infobyte: Did you know? Android Enterprise deployment scenarios
- Infobyte: Did you know? Android Enterprise fully managed provisioning methods
- Manual Android Enterprise work-managed QR code generation for MobileIron
Fully managed
Company owned work profile
Zero-touch
App management
- Set up Hypergate's Kerberos Authentication on MobileIron Core for Android Enterprise
- Managed Google Play, whitelist or blacklist?
- Considerations when deploying MTD with Android Enterprise
- Why you shouldn't install apps from unknown sources
- Create and manage private apps for Android Enterprise
- What is OEMConfig?
- Create and manage web apps for Android Enterprise
- How to locate a private Android app assigned to an organisation ID
- Handling Android 13 notifications permission
Security
- Set up Hypergate's Kerberos Authentication on MobileIron Core for Android Enterprise
- Why you shouldn't install apps from unknown sources
- Feature spotlight: Block unknown sources on work profile deployments
- Feature spotlight: Factory Reset Protection
- Feature spotlight: Android Smartlock
- Gartner comparison of security controls for mobile devices 2019
Android Enterprise Recommended
FAQ
- Is Android Enterprise supported on uncertified (non-GMS) devices?
- Does Samsung support Android Enterprise?
- What versions of Android support Android Enterprise?
- Can I change the account I used to bind Android Enterprise?
- How to check if an Android device is GMS/Play Protect certified?
- What is the Android Enterprise "bind"?
- To use Android Enterprise do I need to buy Google Workspace (G Suite) and register my domain?
- What devices should I buy for my organisation?
- If Android Enterprise is supported from Lollipop, why is Marshmallow often mentioned instead?
- What’s the difference between Device Admin and Android Enterprise?
- Is it possible to bind Android Enterprise with multiple EMMs?
- What is Android Enterprise Recommended?
- My AER device doesn’t work properly with Android Enterprise, what should I do?
- Is Android One better than AER? (Or the other way around?)
- What’s the best provisioning method?
- How do I configure Google Workspace domains for provisioning?
- What’s the difference between allow adding accounts vs allow configure credentials?
- Is it possible to utilise multiple VPN connections within a profile?
- Does Android support Kerberos natively?
- What’s the difference between device based accounts and user based accounts?
- How do I manage the new notifications runtime permission in Android 13?
- Can organisations see applications outside of the work profile?
- Can organisations deploy applications to the parent profile in a work profile deployment?
- Is it possible to migrate from DA to AE work profile without a re-enrol?
- What is a work challenge?
- Enrolment failed but the work profile was created. How do I remove it?
- How can I provision a fully managed device?
- Is it possible to “retire” (or enterprise wipe) a fully managed device?
- Devices factory reset as soon as they’re enrolled, why?
- Is Factory Reset Protection enabled on fully managed devices?
- Is it possible to migrate fully managed devices between EMM solutions?
- How has COPE changed in Android 11?
- Does Intune support COPE?
- Can organisations see applications outside of the work profile on a COPE device?
- Can organisations deploy applications to the parent profile in a COPE deployment?
- Is it possible to migrate from fully managed to work profiles on fully managed devices?
- How should system applications be handled on a COPE device?
- What OEMs currently support zero-touch?
- Where are zero-touch resellers located?
- Does zero-touch cost anything?
- Is an EMM still required with zero-touch?
- What happens if a fully set up device is added to the zero-touch console?
- What happens if a user starts setting up a device before the zero-touch config is applied?
- What happens if a zero-touch config is removed from an enrolled device?
- What happens if a new config for a different EMM or server is applied to an enrolled device?
- What happens if a zero-touch assigned device is reset?
- What happens if a device is unregistered from the zero-touch console?
- Can a device be OTA managed from the zero-touch console?
- Does enrolling via zero-touch slow down or cause any delay to the setup process while it’s retrieving the zero-touch config?
- What deployment scenario will a zero-touch device enrol under?
- Why does zero-touch require so much touching?
- Can anyone add a device to the zero-touch console?
- Is it possible for an organisation to add previously-purchased devices to zero-touch?
- Can anyone remove a device from the zero-touch console?
- Does Samsung support zero-touch?
- Is it possible to set a zero-touch default configuration?
- Is it possible to bulk update zero-touch devices?
- Is it possible to change zero-touch resellers?
- Are all zero-touch devices Android Enterprise Recommended?
- What are DPC extras?
- What should I put in DPC extras?
- What happens if a device is uploaded to zero-touch with the wrong manufacturer?
- The device registered with zero-touch, but doesn’t launch during setup, why?
- Does Android Go support zero-touch?
- Are employee-owned devices eligible for zero-touch?
- What’s the recommended way of managing in-house (private) applications?
- Is it possible to deploy app shortcuts to the homescreen of an Android Enterprise device?
- The Google Play iFrame is missing a feature in my UEM. How do I enable it?
- How do I configure allowlist/blocklist domains for Google Chrome?
- How do I configure Chrome managed bookmarks?
Device admin
Resources
- How to become a zero-touch enrolment reseller
- Android Enterprise DPC identifier collection
- Android Enterprise provisioning guides
- Android Enterprise zero-touch DPC extras collection
- Android glossary
- Android version evolution graphics
- Infobyte: Did you know? Android Enterprise deployment scenarios
- Infobyte: Did you know? Android Enterprise fully managed provisioning methods
- Infobyte: Did you know? Device Admin deprecation
- How to submit a device for Android Enterprise Recommended validation
- Gartner comparison of security controls for mobile devices 2019
Vendor specific
Hardware validation
- Android Enterprise device testing
- Google Pixel 3a Android Enterprise validation report
- Moto G7 Power Android Enterprise validation report
- OnePlus 6T Android Enterprise validation report
- POCO F1 Android Enterprise validation report
- Sony Xperia L3 Android Enterprise validation report
- Honor Play Android Enterprise validation report
- Android Enterprise independent validation process and information