Android device administrator enrollment

Android device administrator (sometimes referred to “legacy” Android management and released with Android 2.2) is a way to manage Android devices. However, improved management functionality is now available with Android Enterprise (released with Android 5.0). In an effort to move to modern, richer, and more secure device management, Google is decreasing device administrator support in new Android releases.

Therefore, to avoid such reduced functionality, we advise against enrolling new devices using the device administrator process described below.

For the same reasons, we also recommend that you migrate devices off of device administrator management if the devices are going to update to Android 10.

For more information about Intune support for Android device administrator support, see the Notices section.

If you still decide to have users enroll their Android devices with device administrator management, continue to the next section.

For more information about Google's Android Enterprise features, see these articles:

Set up device administrator enrollment

  1. To prepare to manage mobile devices, you must set the mobile device management (MDM) authority to Microsoft Intune. See Set the MDM authority for instructions. You set this item only once, when you are first setting up Intune for mobile device management.
  2. Sign in to the Microsoft Endpoint Manager Admin Center and choose > Devices > Android > Android enrollment > Personal and corporate-owned devices with device administration privileges > Use device administrator to manage devices.
  3. Tell your users how to enroll their devices.

After a user has enrolled, you can begin managing their devices in Intune, including assigning compliance policies, managing apps, and more.

For information about other user tasks, see these articles:

Block device administrator enrollment

To block Android device administrator devices, or to block only personally owned Android device administrator devices from enrollment, see Set device type restrictions.

Next steps