Android device administrator enrollment

Important

Microsoft Intune is ending support for Android device administrator management on devices with access to Google Mobile Services (GMS) on August 30, 2024. After that date, device enrollment, technical support, bug fixes, and security fixes will be unavailable. If you currently use device administrator management, we recommend switching to another Android management option in Intune before support ends. For more information, read Ending support for Android device administrator on GMS devices.

Android device administrator (sometimes referred to legacy Android management and released with Android 2.2) is a way to manage Android devices. However, improved management functionality is available with Android Enterprise in countries where Android Enterprise is available. In an effort to move to modern, richer, and more secure device management, Google deprecated Android device administrator management in 2020 and Intune will be ending support for device administrator devices with access to Google Mobile Services in August 2024.

Therefore, we advise against enrolling new devices using the device administrator process described here and we also recommend that you migrate devices off of device administrator management.

For information about using device administrator when Google Mobile Services is unavailable, see How to use Intune in environments without Google Mobile Services.

If you still decide to have users enroll their Android devices with device administrator management, continue to the next section.

Set up device administrator enrollment

  1. To prepare to manage mobile devices, you must set the mobile device management (MDM) authority to Microsoft Intune. See Set the MDM authority for instructions. You set this item only once, when you are first setting up Intune for mobile device management.
  2. Sign in to the Microsoft Intune admin center.
  3. Go to Devices > **Enrollment.
  4. Select the Android tab.
  5. Under Android device administrator, choose Personal and corporate-owned devices with device administration privileges.
  6. Select the checkmark next to Use device administrator to manage devices.
  7. Tell your users how to enroll their devices.

After a user has enrolled, you can begin managing their devices in Intune, including assigning compliance policies, managing apps, and more.

For information about other user tasks, see these articles:

Block device administrator enrollment

To block Android device administrator devices, or to block only personally owned Android device administrator devices from enrollment, see Set device type restrictions.

Microsoft Teams certified Android devices

Microsoft Teams certified Android devices should continue being managed with device administrator management until AOSP user-associated management becomes available for these devices.

To unenroll a Microsoft Teams certified Android device that's enrolled in Android device administrator, sign in to the Microsoft 365 admin center and deselect the Intune license from the Teams account for the Android device. After you remove an Intune license, there is a 30 day grace period in which the device still functions. The device will have to sign in again after this step to avoid enrolling in Intune under device administrator management again.

Next steps