通过 Microsoft Intune 中的 Zebra Mobility Extensions 来使用和管理 Zebra 设备Use and manage Zebra devices with Zebra Mobility Extensions in Microsoft Intune

Intune 提供丰富的功能,包括管理应用和配置设备设置。Intune includes a rich set of features, including managing apps and configuring device settings. 这些内置功能和设置管理 Zebra Technologies 公司制造的 Android 设备,这些设备也称为“Zebra 设备”。These built-in features and settings manage Android devices manufactured by Zebra Technologies, also known as "Zebra devices".

在 Android 设备上,使用 Zebra 的“Mobility Extensions (MX)”配置文件来自定义或添加更多 Zebra 特定设置 。On Android devices, use Zebra's Mobility Extensions (MX) profiles to customize or add more Zebra-specific settings.

本文介绍如何在 Microsoft Intune 中的 Zebra 设备上使用 Zebra Mobility Extensions (MX)。This article shows you how to use Zebra Mobility Extensions (MX) on Zebra devices in Microsoft Intune.

此功能适用于:This feature applies to:

  • Android 设备管理员Android device administrator

对于 Android Enterprise 设备,使用 OEMConfigFor Android Enterprise devices, use OEMConfig.

公司可能会将 Zebra 设备用于零售、工厂车间等。Your company may use Zebra devices for retail, on the factory floor, and more. 假设你是一名零售商,你的环境中有销售人员使用的数千种 Zebra 移动设备。For example, you're a retailer and your environment includes thousands of Zebra mobile devices used by sales associates. Intune 可以帮助管理这些设备,这是移动设备管理 (MDM) 解决方案的一部分。Intune can help manage these devices as part of your mobile device management (MDM) solution.

使用 Intune,可以注册 Zebra 设备,将业务线应用部署到设备。Using Intune, you can enroll Zebra devices to deploy your line-of-business apps to the devices. 通过“设备配置”配置文件,可以创建 MX 配置文件,用于管理 Zebra 特定的设置。"Device configuration" profiles let you create MX profiles to manage your Zebra-specific settings.

备注

默认情况下,Zebra MX API 在设备上未锁定。By default, the Zebra MX APIs aren't locked down on devices. 在 Intune 中注册设备之前,设备可能会受到恶意攻击。Before a device enrolls in Intune, it's possible the device can be compromised in a malicious manner. 当设备处于干净状态时,建议使用访问管理器 (AccessMgr) 锁定 MX API。When the device is in a clean state, we suggest you lock down MX APIs using Access Manager (AccessMgr). 例如,你可选择仅允许公司门户应用和你信任的应用调用 MX API。For example, you can choose that only the Company Portal app and apps you trust are allowed to call MX APIs.

有关详细信息,请参阅 Zebra 网站上的锁定设备For more information, see Locking down your device on Zebra's web site.

在开始之前Before you begin

  • 请确保拥有 Zebra Technologies 公司最新版的 StageNow 桌面应用。Be sure you have the latest version of the StageNow desktop app from Zebra Technologies.
  • 请务必检查 Zebra 的完整 MX 功能矩阵(打开 Zebra 网站),确认创建的配置文件与设备的 MX 版本、OS 版本和型号兼容。Be sure to check Zebra's full MX feature matrix (opens Zebra's web site) to confirm the profiles you create are compatible with the device's MX version, OS version, and model.
  • 某些设备(如 TC20/25 设备)不支持 StageNow 中的所有可用 MX 功能。Certain devices, such as TC20/25 devices, don't support all of the available MX features in StageNow. 请务必检查 Zebra 的功能矩阵(打开 Zebra 的网站),获取更新的支持信息。Be sure to check Zebra's feature matrix (opens Zebra's web site) for updated support info.

步骤 1:安装最新的公司门户应用Step 1: Install the latest Company Portal app

在设备上,打开 Google Play 商店。On the device, open the Google Play store. 从 Microsoft 下载并安装 Intune 公司门户应用。Download and install the Intune Company Portal app from Microsoft. 从 Google Play 安装后,公司门户应用会自动获取更新和修复程序。When installed from Google Play, the Company Portal app gets updates and fixes automatically.

如果无法使用 Google Play,请下载适用于 Android 的 Microsoft Intune 公司门户(打开另一个 Microsoft 网站),然后进行旁加载(本文有介绍)。If Google Play isn't available, download the Microsoft Intune Company Portal for Android (opens another Microsoft website), and sideload it (in this article). 以这种方式进行安装,应用不会自动接收更新或修复程序。When installed this way, the app doesn't receive updates or fixes automatically. 确保定期更新并手动修补应用。Be sure to regularly update and patch the app manually.

旁加载公司门户应用Sideload the Company Portal app

“旁加载”是指不使用 Google Play 安装应用。"Sideloading" is when you don't use Google Play to install an app. 要旁加载公司门户应用,请使用 StageNow。To sideload the Company Portal app, use StageNow.

以下是大概步骤。The following steps provide an overview. 有关具体步骤,请参阅 Zebra 的文档。For specific details, see Zebra's documentation. 可使用:使用 StageNow 在 MDM 中注册(打开 Zebra 的网站)。Enroll in an MDM using StageNow (opens Zebra's web site) may be a good resource.

  1. 在 StageNow 中,为“在 MDM 中注册”创建配置文件 。In StageNow, create a profile for Enroll in an MDM.

  2. 在“部署”中,选择下载 MDM 代理文件 。In Deployment, choose to download the MDM agent file.

  3. 将“支持应用”和“下载配置”步骤设置为“否” 。Set the Support App and Download Configuration steps to No.

  4. 在“下载 MDM”中,选择“传输/复制文件” 。In Download MDM, select Transfer/Copy File. 添加公司门户 Android 包 (APK) 的源和目标。Add the source and destination of the Company Portal Android package (APK).

  5. 在“启动 MDM”中,按原样保留默认值 。In Launch MDM, leave the default values as-is. 添加以下详细信息:Add the following details:

    • 程序包名称com.microsoft.windowsintune.companyportalPackage Name: com.microsoft.windowsintune.companyportal
    • 类名称com.microsoft.windowsintune.companyportal.views.SplashActivityClass Name: com.microsoft.windowsintune.companyportal.views.SplashActivity

继续发布配置文件,并在设备上的 StageNow 应用中使用该文件。Continue to publish the profile, and consume it with the StageNow app on the device. 公司门户应用已在设备上安装并打开。The Company Portal app is installed and opened on the device.

提示

有关 StageNow 及其功能的更多信息,请参阅 StageNow Android 设备暂存(打开 Zebra 的网站)。For more information on StageNow, and what it does, see StageNow Android device staging (opens Zebra's web site).

步骤 2:确认公司门户应用具有设备管理员角色Step 2: Confirm the Company Portal app has device administrator role

公司门户应用需要使用设备管理员来管理 Android 设备。The Company Portal app requires Device Administrator to manage Android devices. 为激活设备管理员角色,一些 Zebra 设备上会包含用户界面 (UI)。To activate the Device Administrator role, some Zebra devices include a user interface (UI) on the device. 如果设备包含 UI,则公司门户应用会在注册期间提示最终用户授予设备管理员权限(本文有介绍)。If the device includes a UI, the Company Portal app prompts the end user to grant Device Administrator during enrollment (in this article).

如果 UI 不可用,请使用 StageNow 中的“DevAdmin 管理员”创建一个配置文件,手动向公司门户应用授予设备管理员权限 。If a UI isn't available, use the DevAdmin Manager in StageNow to create a profile that manually grants Device Administrator to the Company Portal app.

以下是大概步骤。The following steps provide an overview. 有关具体步骤,请参阅 Zebra 的文档。For specific details, see Zebra's documentation. 可使用:以设备管理员身份设置电池交换模式(打开 Zebra 的网站)。Set battery swap mode as device administrator (opens Zebra's website) may be a good resource.

  1. 在 StageNow 中,创建一个配置文件,然后选择“Xpert 模式” 。In StageNow, create a profile and select Xpert Mode.
  2. 将“DevAdmin 管理员”添加到配置文件 。Add DevAdmin Manager to the profile.
  3. 将“设备管理操作”设置为“以设备管理员身份打开” 。Set Device Administration Action to Turn On as Device Administrator.
  4. 将“设备管理员包名称”设置为 com.microsoft.windowsintune.companyportalSet Device Admin Package Name to com.microsoft.windowsintune.companyportal.
  5. 将“设备管理员类名”设置为 com.microsoft.omadm.client.PolicyManagerReceiverSet Device Admin Class Name to com.microsoft.omadm.client.PolicyManagerReceiver.

继续发布配置文件,并在设备上的 StageNow 应用中使用该文件。Continue to publish the profile, and consume it with the StageNow app on the device. 对公司门户应用授予设备管理员角色。The Company Portal app is granted the Device Administrator role.

步骤 3:将设备注册到 IntuneStep 3: Enroll the device in to Intune

完成前两个步骤后,设备上即安装公司门户应用。After completing the first two steps, the Company Portal app is installed on the device. 设备已准备好注册到 Intune。The device is ready to be enrolled in to Intune.

注册 Android 设备列出了相关步骤。Enroll Android devices lists the steps. 如果有多个 Zebra 设备,建议使用设备注册管理器 (DEM) 帐户If you have many Zebra devices, you may want to use a device enrollment manager (DEM) account. 使用 DEM 帐户还会删除“从公司门户应用取消注册”选项,以便用户不会轻易取消注册设备。Using a DEM account also removes the option to unenroll from the Company Portal app, so that users can't unenroll the device as easily.

步骤 4:在 StageNow 中创建设备管理配置文件Step 4: Create a device management profile in StageNow

使用 StageNow 创建配置文件,用于配置要在设备上管理的设置。Use StageNow to create a profile that configures the settings you want to manage on the device. 有关具体步骤,请参阅 Zebra 的文档。For specific details, see Zebra's documentation. 可使用:配置文件(打开 Zebra 网站)。Profiles (opens Zebra's website) may be a good resource.

在 StageNow 中创建配置文件时,在最后一步中,选择“导出到 MDM” 。When you create the profile in StageNow, on the last step, select Export to MDM. 此步骤会生成一个 XML 文件。This step generates an XML file. 请保存该文件。Save this file. 在后面的步骤中需要使用该文件。You need it in a later step.

  • 建议在将配置文件部署到组织中的设备之前对其进行测试。It's recommended to test the profile before you deploy it to devices in your organization. 要对其进行测试,在计算机上使用 StageNow 创建配置文件时,最后一步请使用“测试”选项 。To test, in the last step when creating profiles with StageNow on your computer, use the Test options. 然后,通过设备上的 StageNow 应用使用 StageNow 生成的文件。Then, consume the StageNow-generated file with the StageNow app on the device.

    设备上的 StageNow 应用会显示测试配置文件时生成的日志。The StageNow app on the device shows logs generated when you test the profile. 使用 StageNow 登录 Intune 中运行 Android 的 Zebra 设备中介绍了如何使用 StageNow 日志来获取错误信息。Use StageNow logs on Zebra devices running Android in Intune has information on using StageNow logs to understand errors.

  • 如果在 StageNow 配置文件中引用应用、更新包或其他文件,设备需要获取这些更新。If you reference apps, update packages, or update other files in your StageNow profile, you want the device to get these updates. 要获取更新,设备必须在应用配置文件后连接到 StageNow 部署服务器。To get the updates, the device must connect to the StageNow deployment server when the profile is applied.

    或者,可以使用 Intune 中的内置功能来获取这些更改,包括:Or, you can use built-in features in Intune to get these changes, including:

测试文件后,下一步是使用 Intune 将配置文件部署到设备。After you test the file, the next step is to deploy the profile to devices using Intune.

  • 你可将一个或多个 MX 配置文件部署到设备。You can deploy one or multiple MX profiles to a device.

  • 还可以导出多个 StageNow 配置文件,并将设置合并到单个 XML 文件。You can also export multiple StageNow profiles, and combine the settings into a single XML file. 然后,将 XML 文件上传到 Intune,以便部署到设备。Then, upload the XML file to Intune to deploy to your devices.

    警告

    如果多个 MX 配置文件以同一组为目标,并配置相同的属性,则设备上会出现冲突。If multiple MX profiles are targeted to the same group, and configure the same property, there will be conflicts on the device.

    如果同一个属性在单个 MX 配置文件中进行了多次配置,则以最后一个配置为准。If the same property is configured multiple times in a single MX profile, the last configuration wins.

步骤 5:在 Intune 中创建配置文件Step 5: Create a profile in Intune

在 Intune 中,创建设备配置文件:In Intune, create a device configuration profile:

  1. 登录到 Microsoft 终结点管理器管理中心Sign in to the Microsoft Endpoint Manager admin center.

  2. 选择“设备” > “配置文件” > “创建配置文件” 。Select Devices > Configuration profiles > Create profile.

  3. 输入以下属性:Enter the following properties:

    • 名称:输入新配置文件的描述性名称。Name: Enter a descriptive name for the new profile.
    • 描述:输入配置文件的说明。Description: Enter a description for the profile. 此设置是可选的,但建议进行。This setting is optional, but recommended.
    • 平台:选择“Android 设备管理员” 。Platform: Select Android device administrator.
    • 配置文件类型:选择“MX 配置文件”(仅限 Zebra) 。Profile type: Select MX profile (Zebra only).
  4. 在“格式为 .xml 的 MX 配置文件”中 ,添加从 StageNow 导出的 XML 配置文件(本文有介绍)。In MX profile in .xml format, add the XML profile file you exported from StageNow (in this article).

  5. 选择“确定” > “创建” 以保存所做的更改。Select OK > Create to save your changes. 此时,策略创建完成,并出现在列表中。The policy is created and shown in the list.

    提示

    出于安全原因,保存后无法看到配置文件 XML 文本。For security reasons, you won't see the profile XML text after you save it. 文本已加密,只能看到星号 (****)。The text is encrypted, and you only see asterisks (****). 为了便于参考,建议在将 MX 配置文件添加到 Intune 之前保存其副本。For your reference, it's recommended to save copies of the MX profiles before you add them to Intune.

配置文件已创建,但它尚未起到任何作用。The profile is created, but it's not doing anything yet. 下一步,分配配置文件监视其状态Next, assign the profile and monitor its status.

下次设备检查配置更新时,MX 配置文件会部署到设备。The next time the device checks for configuration updates, the MX profile is deployed to the device. 设备注册时,会与 Intune 进行同步,然后约每隔 8 小时同步一次。Devices sync with Intune when devices enroll, and then approximately every 8 hours. 还可以在 Intune 中强制执行同步You can also force a sync in Intune. 或者,在设备上,打开“公司门户应用” > “设置” > “同步” 。Or, on the device, open the Company Portal app > Settings > Sync.

在分配 Zebra MX 配置后更新该配置Update a Zebra MX configuration after it's assigned

若要更新 Zebra 设备的 MX 特定配置,可以执行以下操作:To update the MX-specific configuration of a Zebra device, you can:

  • 创建更新的 StageNow XML 文件,编辑现有 Intune MX 配置文件,并上传新的 StageNow XML 文件。Create an updated StageNow XML file, edit the existing Intune MX profile, and upload the new StageNow XML file. 这一新文件将覆盖配置文件中以前的策略,并替换以前的配置。This new file overwrites the previous policy in the profile, and replaces the previous configuration.
  • 创建配置不同设置的新 StageNow XML 文件,创建新的 Intune MX 配置文件,上传新的 StageNow XML 文件,并将其分配给同一个组。Create a new StageNow XML file that configures different settings, create a new Intune MX profile, upload the new StageNow XML file, and assign it to the same group. 部署了多个配置文件。Multiple profiles are deployed. 如果新配置文件配置了现有配置文件中已存在的设置,则会发生冲突。If the new profile configures settings that already exist in existing profiles, conflicts will occur.

后续步骤Next steps