Enroll Android devices
As an Intune administrator, you can enroll Android devices in the following ways:
- Android Enterprise (offering a set of enrollment options that provide users with the most up-to-date and secure features):
- Android Enterprise personally-owned with a work profile: For personal devices granted permission to access corporate data. Admins can manage work accounts, apps, and data. Personal data on the device is kept separate from work data and admins don't control personal settings or data.
- Android Enterprise dedicated: For corporate-owned, single use devices, such as digital signage, ticket printing, or inventory management. Admins lock down the usage of a device for a limited set of apps and web links. It also prevents users from adding other apps or taking other actions on the device.
- Android Enterprise fully managed: For corporate-owned, single user devices used exclusively for work and not personal use. Admins can manage the entire device and enforce policy controls unavailable to personally-owned/corporate-owned work profiles.
- Android Enterprise corporate-owned with a work profile: For corporate-owned, single user devices intended for corporate and personal use.
- Android device administrator, including Samsung Knox Standard devices and Zebra devices. In areas where Android Enterprise is available, Google is encouraging movement off device administrator (DA) management by decreasing its management support in new Android releases. However, where Android Enterprise or Google Mobile Services (GMS) are unavailable, you'll want to use device administrator and familiarize yourself with these changes. For more information, see Is Android Enterprise available in my country?
- Android (AOSP), currently in public preview, offers a set of enrollment options for devices that aren't integrated with Google Mobile services.
- Corporate-owned, user associated devices: For corporate-owned, single user devices intended exclusively for work and not personal use. Admins can manage the entire device.
- Corporate-owned, userless devices: For corporate-owned, shared devices. Admins can manage the entire device.
Prerequisites
To prepare to manage mobile devices, you must set the mobile device management (MDM) authority to Microsoft Intune. See Set the MDM authority for instructions. You set this item only once, when you are first setting up Intune for mobile device management.
For Android Enterprise, refer to the following support article from Google to ensure that Android Enterprise is available in your country or region: https://support.google.com/work/android/answer/6270910
For devices manufactured by Zebra Technologies, you may need to grant the Company Portal additional permissions depending on the capabilities of the specific device. Mobility Extensions on Zebra devices has more details.
For Samsung Knox Standard devices, there are more prerequisites.
Next steps
- Set up Android Enterprise personally-owned work profile enrollment
- Set up Android Enterprise dedicated device enrollment
- Set up Android Enterprise fully managed enrollment
- Set up Android device administrator enrollment
- Set up Android Enterprise corporate-owned work profile
- Set up Android (AOSP) corporate-owned user-associated enrollment
- Set up Android (AOSP) corporate-owned userless enrollment