FAQ (#faq)

Avoiding configuration issues in Google Workspace with GEM & 3rd party EMM

What happens when a managed device receives a major Android update?

What is the key attestation root certificate change in 2026?

Is Android Enterprise supported on XR headsets?

Why does Samsung Smart Switch not work on fully managed devices?

Can I purchase paid apps through managed Google Play?

What is enhanced fraud protection, and can it block enterprise apps?

Why are my zero-touch devices randomly factory resetting?

Does Android Enterprise support WearOS?

How do I prevent users from escaping kiosk (lock task) mode?

Is it possible to bulk update zero-touch devices?

How do Samsung Knox and Android Enterprise policies interact?

Is it possible to set a zero-touch default configuration?

Can a device be OTA managed from the zero-touch console?

What’s the best provisioning method?

Why are managed Google Play apps stuck on pending?

What is Android Enterprise Recommended?

Is Android One better than AER? (Or the other way around?)

Can Google Play Protect remove apps from managed devices without admin approval?

Can I rename my managed Google Play organisation?

Why is my kiosk app UI broken after updating to Android 15?

How does cross-profile data sharing work in a work profile?

How does conditional access work with Android Enterprise?

What enterprise features are new in Android 15?

What is the AMAPI MCP server?

What is a managed Google domain, and should I upgrade?

How has COPE changed in Android 11?

Play Protect blocked my DPC, why?

What enterprise features are new in Android 16?

What are the AMAPI device quota limits?

What are DPC extras?

Can organisations deploy applications to the parent profile in a COPE deployment?

Why is work profile enrolment failing?

Are Google Play System Updates managed by Android Enterprise system update policies?

What is the difference between GMS and EDLA certification for enterprise?

Why is my organisation name showing on managed devices?

Can I manage APNs through AMAPI?

The device registered with zero-touch, but doesn’t launch during setup, why?

Does Samsung support zero-touch?

Are employee-owned devices eligible for zero-touch?

Does Samsung support Android Enterprise?

Is it possible to backup & restore device data on a fully managed device?

What is the difference between AMAPI and a custom DPC?

Can I add/remove users on a fully managed device?

Is it possible to “retire” (or enterprise wipe) a fully managed device?

Is it possible to migrate from fully managed to COPE without a factory reset?

What happens if a new config for a different EMM or server is applied to an enrolled device?

Is it possible to utilise a single VPN connection across the entire device?

How do I set up zero-touch enrollment when my device reseller is not a zero-touch partner?

What can my employer see on my personal device with a work profile?

Can organisations see applications outside of the work profile?

What is the difference between MAM and work profiles for BYOD?

What is Identity Check on Android?

Devices factory reset as soon as they’re enrolled, why?

Can I turn off my work profile?

What is Google Play developer verification, and how does it affect enterprise?

What is the content protection policy in AMAPI?

Does Android Auto work on fully managed devices?

What are AMAPI application roles?

What devices should I buy for my organisation?

What’s the recommended way of managing private (in-house) applications?

Why are my work profile notifications delayed or missing?

Why does the work profile drain my battery?

What network requirements does Android Enterprise have?

What is the difference between FRP and Enterprise FRP?

How do I choose an EMM for Android Enterprise?

Is it possible to migrate fully managed devices between EMM solutions?

Is Factory Reset Protection enabled on fully managed devices?

Is Android Enterprise supported in China?

What deployment scenario will a zero-touch device enrol under?

What is Lost Mode on Android Enterprise?

What is Device Trust from Android Enterprise?

What is Advanced Protection, and can it be managed?

What happens to my data when the work profile is removed?

How can I provision a fully managed device?

Has Play Protect changed how it handles sideloaded apps on managed devices?

Does Picture-in-Picture work in kiosk (lock task) mode?

Why don't managed configurations work with app tracks?

Is it possible to manage eSIM?

What is the Intune AMAPI migration for personally-owned work profiles?

Can I migrate devices from a custom DPC to AMAPI?

Does Android support Kerberos natively?

How do I remove the Android Enterprise bind from my current EMM?

What’s the difference between Device Admin and Android Enterprise?

Can I set Device Owner without a factory reset?

What happens if my Android Enterprise bind account is disabled or deleted?

Why can't I find apps in managed Google Play after approving them?

Why does zero-touch or KME not trigger after a factory reset on Android 15+?

Can I manage Private DNS settings through AMAPI?

Does AMAPI support direct APK installation?

Can I control default applications through AMAPI?

If Android Enterprise is supported from Lollipop, why is Marshmallow often mentioned instead?

Why can’t I install or uninstall apps on my managed device?

My AMAPI project returns a usage limit error, why?

How can I access a Wi-Fi captive portal when devices are in Kiosk?

Can I make /system writable on Android devices?

Can I change the account I used to bind Android Enterprise?

Are Private Space applications truly hidden?

How do I turn off Google Play app collections?

Are Private Space apps visible to enterprise admins?

How can apps be managed in the Private Space?

What happens if a device is unregistered from the zero-touch console?

How to check if an Android device is GMS/Play Protect certified?

Enrolment failed but the work profile was created. How do I remove it?

Is an EMM still required with zero-touch?

Does Intune support COPE?

How to configure Chrome managed bookmarks

Is it possible to bind Android Enterprise with multiple EMMs using one account?

My AER device doesn’t work properly with Android Enterprise, what should I do?

To use Android Enterprise do I need to buy Google Workspace (G Suite) and register my domain?

Is it possible to manage personal applications on a work profile device?

Can organisations deploy applications to the parent profile in a work profile deployment?

Why don't Private Space apps go through VPN?

Is Private Space supported on fully managed devices?

Can apps be sideloaded into the Private Space?

Can I sideload an APK to the work profile (or other users)?

What versions of Android support Android Enterprise?

What is a work challenge?

What is the Android Enterprise bind?

Why has USB data access been disabled suddenly?

Is Android Enterprise supported on uncertified (non-GMS) devices?

Can a MADA device be converted to EDLA?

Can organisations see applications outside of the work profile on a COPE device?

How should system applications be handled on a COPE device?

How do I configure Google Workspace domains for provisioning?

What’s the difference between allow adding accounts vs allow configure credentials?

How do I configure allowlist/blocklist domains for Google Chrome?

What happens if a device is uploaded to zero-touch with the wrong manufacturer?

Why does zero-touch require so much touching?

Does enrolling via zero-touch slow down or cause any delay to the setup process while it’s retrieving the zero-touch config?

Can anyone remove a device from the zero-touch console?

Can anyone add a device to the zero-touch console?

Where are zero-touch resellers located?

What should I put in DPC extras?

What OEMs currently support zero-touch?

What happens if a fully set up device is added to the zero-touch console?

What happens if a user starts setting up a device before the zero-touch config is applied?

What happens if a zero-touch assigned device is reset?

What happens if a zero-touch config is removed from an enrolled device?

Is it possible to utilise multiple VPN connections within a profile?

Is it possible to migrate from DA to AE work profile without a re-enrol?

The Google Play iFrame is missing a feature in my UEM. How do I enable it?

Is it possible to deploy app shortcuts to the homescreen of an Android Enterprise device?

Does zero-touch cost anything?

What’s the difference between device based accounts and user based accounts?

Is it possible to change zero-touch resellers?

Are all zero-touch devices Android Enterprise Recommended?

Does Android Go support zero-touch?

How do I manage the new notifications runtime permission in Android 13?

Is it possible for an organisation to add previously-purchased devices to zero-touch?

mail Reply by email | edit_note Edit this page | code_blocks Code
Ask MIKA
MIKA Mobile Intelligence & Knowledge Assistant