question

Olga-0700 avatar image
0 Votes"
Olga-0700 asked Olga-0700 commented

Intune BYOD & google mail. Restrict users from using personal app

Hi all,

My company uses google mail services (as a part of google workspace) and we want to manage employee's Android Enterprise devices via Intune.

When I enroll a BYOD android with Intune I can use my google workspace account both in private and corporate profile.

How to deny using corporate gmail account in private Android profile with the help of Intune? All recommendations I have seen were about Exchange, not google or others.

mem-intune-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
1 Vote"
Jason-MSFT answered Olga-0700 commented

To my knowledge, there is no way to accomplish this as the built-in Google Mail app has no configuration or policies that can be applied to it to restrict this and since the mail service does not use AAD, conditional access cannot be used either.

Asking in Google Android forum may get a different answer on whether or not the mail app has any configuration possibilities. If it does and assuming they are standard app config policies, then Intune should be able to push them out, but as noted, I don't think there are.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I'll try to ask in Google forum, but anyway I think you are right. The problem in not only with mail because google accounts are used to login to 3rd-party services. And it seems that only google can control the usage of these accounts.

0 Votes 0 ·
CiciWu2-MSFT avatar image
1 Vote"
CiciWu2-MSFT answered

Agree with Jason, what Intune can do with Email setting is only add and remove accounts, factory reset protection emails or something as follows:

Android Enterprise device settings to configure email, authentication, and synchronization in Intune
Android Enterprise device settings to allow or restrict features using Intune

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.