Skip to content

Latest commit

 

History

History
72 lines (53 loc) · 4.33 KB

android-enroll-device-administrator.md

File metadata and controls

72 lines (53 loc) · 4.33 KB
Raw
title titleSuffix description keywords author ms.author manager ms.date ms.topic ms.service ms.subservice ms.localizationpriority ms.assetid ms.reviewer ms.suite search.appverid ms.custom ms.collection
Manage Intune devices with Android device administrator
Use Android device administrator with Intune to manage devices.
Lenewsad
lanewsad
dougeby
04/05/2024
how-to
microsoft-intune
enrollment
high
esalter
ems
MET150
intune-azure
tier2
M365-identity-device-management

Android device administrator enrollment

[!INCLUDE android_device_administrator_support]

Android device administrator (sometimes referred to legacy Android management and released with Android 2.2) is a way to manage Android devices. However, improved management functionality is available with Android Enterprise in countries where Android Enterprise is available. In an effort to move to modern, richer, and more secure device management, Google deprecated Android device administrator management in 2020 and Intune will be ending support for device administrator devices with access to Google Mobile Services at the end of 2024.

Therefore, we advise against enrolling new devices using the device administrator process described here and we also recommend that you migrate devices off of device administrator management.

For information about using device administrator when Google Mobile Services is unavailable, see How to use Intune in environments without Google Mobile Services.

If you still decide to have users enroll their Android devices with device administrator management, continue to the next section.

Set up device administrator enrollment

  1. To prepare to manage mobile devices, you must set the mobile device management (MDM) authority to Microsoft Intune. See Set the MDM authority for instructions. You set this item only once, when you are first setting up Intune for mobile device management.
  2. Sign in to the Microsoft Intune admin center.
  3. Go to Devices > **Enrollment.
  4. Select the Android tab.
  5. Under Android device administrator, choose Personal and corporate-owned devices with device administration privileges.
  6. Select the checkmark next to Use device administrator to manage devices.
  7. Tell your users how to enroll their devices.

After a user has enrolled, you can begin managing their devices in Intune, including assigning compliance policies, managing apps, and more.

For information about other user tasks, see these articles:

Block device administrator enrollment

To block Android device administrator devices, or to block only personally owned Android device administrator devices from enrollment, see Set device type restrictions.

Microsoft Teams certified Android devices

Microsoft Teams certified Android devices should continue being managed with device administrator management until AOSP user-associated management becomes available for these devices.

To unenroll a Microsoft Teams certified Android device that's enrolled in Android device administrator, sign in to the Microsoft 365 admin center and deselect the Intune license from the Teams account for the Android device. After you remove an Intune license, there is a 30 day grace period in which the device still functions. The device will have to sign in again after this step to avoid enrolling in Intune under device administrator management again.

Next steps