註冊 Android 裝置Enroll Android devices

適用對象:Azure 入口網站的 IntuneApplies to: Intune in the Azure portal
您需要傳統入口網站的 Intune 相關文件嗎?Looking for documentation about Intune in the classic portal? 請移至這裡Go here.

身為 Intune 系統管理員,Intune 可讓您管理 Android 裝置,包括 Samsung Knox Standard 裝置。As an Intune administrator, Intune lets you manage Android devices, including Samsung Knox Standard devices. 您也可以管理 Android for Work 裝置上的工作設定檔。You can also manage the work profile on devices Android for Work devices.

Intune 的多使用者管理支援執行 Samsung KNOX Standard 的裝置。Devices that run Samsung KNOX Standard, are supported for multi-user management by Intune. 這代表使用者可以使用其 Azure AD 認證登入和登出裝置,而且該裝置不論是否正在使用,都會集中管理。This means that end users can sign in and out of the device with their Azure AD credentials, the device is centrally managed whether it’s in use or not. 當終端使用者登入時,他們可以存取應用程式,此外也可以將任何原則套用到這些應用程式。When end users sign-in, they have access to apps and additionally get any policies applied to them. 當使用者登出時,會清除所有應用程式資料。When users sign out, all app data is cleared.

必要條件Prerequisite

您必須將 MDM 授權單位設定為 Microsoft Intune準備管理行動裝置。You must set the MDM authority to Microsoft Intune to prepare to manage mobile devices. 請參閱設定 MDM 授權單以取得相關指示。See Set the MDM authority for instructions. 此項目只會設定一次,也就是第一次為行動裝置管理設定 Intune 之時。You set this item only once, when you are first setting up Intune for mobile device management.

設定 Android 註冊Set up Android enrollment

根據預設,Intune 允許註冊 Android 和 Samsung Knox Standard 裝置。By default, Intune allows enrollment of Android and Samsung Knox Standard devices.

若要封鎖 Android 裝置,或者僅封鎖註冊個人擁有的 Android 裝置,請參閱Set device type restrictions (設定裝置類型限制)。To block Android devices, or to block only personally owned Android devices from enrollment, see Set device type restrictions.

若要啟用裝置管理,您的使用者必須註冊其裝置,方法是下載從 Google Play 取得的 Intune 公司入口網站應用程式,然後開啟應用程式,並遵循提示進行註冊。To enable device management, your users must enroll their devices by downloading the Intune Company Portal app, which is available from Google Play, and then opening the app and following the prompts to enroll. 當 Android 裝置受到管理之後,您可以指派合規性原則管理應用程式等。Once Android devices are managed, you assign compliance policies, manage apps, and more.

啟用 Android for Work 裝置的註冊Enable enrollment of Android for Work devices

若要在支援 Android for Work (英文) 的裝置上啟用工作設定檔管理,您必須將 Android for Work 繫結新增至 Intune。To enable management of the work profile on devices that support Android for Work, you must add an Android for Work binding to Intune. 若要註冊支援 Android for Work 但先前註冊為一般 Android 裝置的裝置,必須將裝置取消註冊,再重新註冊。To enroll devices that support Android for Work but were previously enrolled as regular Android devices, the devices must be unenrolled and then re-enrolled.

新增 Intune 的 Android for Work 繫結Add Android for Work Binding for Intune

  1. 設定 Intune MDMSet up Intune MDM
    如果尚未這麼做,請將行動裝置管理授權單位設定為 Microsoft Intune,以針對行動裝置管理做準備。If you haven’t already, prepare for mobile device management by setting the mobile device management authority as Microsoft Intune.
  2. 設定 Android for Work 繫結Configure Android for Work binding
    以 Intune 系統管理員的身分,在 Azure 入口網站中選擇 [更多服務] > [監視 + 管理] > [Intune]。As an Intune administrator, in the Azure portal, choose More Services > Monitoring + Management > Intune.

    1. 在 [Intune] 刀鋒視窗上,選擇 [裝置註冊] > [Android for Work 註冊],然後按一下 [設定] 以開啟 Google Play 的 Android for Work 網站。On the Intune blade, choose Device enrollment, > Android for Work Enrollment, and click Configure to open Google Play's Android for Work website. 這會在瀏覽器中以新的索引標籤開啟。This will open in a new tab in your browser. 顯示設定 Android for Work 繫結之連結的螢幕擷取畫面Screenshot showing link to Configure the Android for Work binding

    2. 登入 GoogleLog in to Google
      在 Google 的登入頁面上,輸入要與此租用戶之所有 Android for Work 管理工作相關聯的 Google 帳戶。On Google's sign-in page, enter the Google account that will be associated with all Android for Work management tasks for this tenant. 這是您組織的 IT 系統管理員用來在 Play for Work 主控台中管理及發行應用程式所共用的 Google 帳戶。This is the Google account shared among your organization's IT admins that used to manage and publish apps in the Play for Work console.

    3. 提供組織詳細資料Provide organization details
      提供您的公司名稱作為組織名稱Provide your company's name for the Organization name. 針對企業行動管理 (EMM) 提供者,應該顯示 Microsoft IntuneFor Enterprise mobility management (EMM) provider, Microsoft Intune should be displayed. 同意 Android for Work 合約,然後按一下 [確認]。Agree to the Android for Work agreement, and then click Confirm. 您的要求將會被處理。Your request will be processed.

指定 Android for Work 註冊設定Specify Android for Work Enrollment Settings

只有特定 Android 裝置才支援 Android for Work。Android for Work is only supported on certain Android devices. 請參閱 Google 的使用 Android for Work 的必備條件See Google's Android for Work requirements. 支援 Android for Work 的所有裝置也會支援傳統 Android 管理。Any device that supports Android for Work will also support conventional Android management. Intune 可讓您指定應該如何管理支援 Android for Work 的裝置:Intune lets you specify how devices that support Android for Work should be managed:

  • 將所有裝置作為 Android 管理 - 所有 Android 裝置 (包括支援 Android for Work 的裝置) 將會註冊為傳統 Android 裝置。Manage all devices as Android - All Android devices, including devices that support Android for Work, will be enrolled as conventional Android devices.
  • 將受支援的裝置作為 Android for Work 管理 - 所有支援 Android for Work 的裝置都會註冊為 Android for Work 裝置。Manage supported devices as Android for Work - All devices that support Android for Work are enrolled as Android for Work devices. 不支援 Android for Work 的任何 Android 裝置會註冊為傳統 Android 裝置。Any Android device that does not support Android for Work is enrolled as a conventional Android device.
  • 只為這些使用者群組中的使用者將支援的裝置當做 Android for Work 來管理 - 可讓您將 Android for Work 管理的目標設為有限的一組使用者。Manage supported devices for users only in these user groups as Android for Work - Lets you target Android for Work management to a limited set of users. 只有註冊支援 Android for Work 之裝置的所選群組成員,才能註冊為 Android for Work 裝置。Only members of the selected groups who enroll a device that supports Android for Work are enrolled as Android for Work devices. 所有其他成員則會註冊為 Android 裝置。All others are enrolled as Android devices. 這在 Android for Work 試驗期間會很有用。This is useful during Android for Work pilots.

告知使用者如何註冊其裝置才可存取公司資源Tell your users how to enroll their devices to access company resources

您需要告訴使用者移至 Google Play 來下載 Intune 公司入口網站應用程式,然後開啟應用程式,並遵循提示以註冊其裝置。You'll need to tell your end users to go to Google Play to download the Intune Company Portal app, and then open the app and follow the prompts to enroll their device. 應用程式會引導使用者進行註冊程序,即說明使用者能獲得什麼,以及 IT 系統管理員可以和無法在其裝置上看到什麼。The app guides users through the enrollment process, explaining what users can expect and what IT administrators can and can't see on their devices.

您也可以將線上註冊步驟的連結傳送給他們︰在 Intune 註冊 Android 裝置You can also send them a link to online enrollment steps: Enroll your Android device in Intune.

如需其他使用者工作的資訊,請參閱下列文章:For information about other end-user tasks, see these articles:

解除 Android for Work 系統管理帳戶繫結Unbinding your Android for Work administrative account

您可以關閉 Android for Work 註冊和管理。You can turn off Android for Work enrollment and management. 按一下 Intune 管理主控台中的 [解除繫結] 將所有註冊的 Android for Work 裝置取消註冊,並移除 Android for Work 帳戶與 Intune 之間的關聯性。Clicking Unbind in the Intune administration console removes all enrolled Android for Work devices from enrollment and removes the relationship between the Android for Work account and Intune.

如何解除 Android for Work 帳戶繫結How to unbind an Android for Work account

  1. 解除 Android for Work 繫結Unbind Android for Work binding
    以 Intune 系統管理員的身分,在 Azure 入口網站中選擇 [更多服務] > [監視 + 管理] > [Intune]。As an Intune administrator, in the Azure portal, choose More Services > Monitoring + Management > Intune. 在 [Intune] 刀鋒視窗上,選擇 [裝置註冊] > [Android for Work 註冊],然後按一下 [解除繫結]。On the Intune blade, choose Device enrollment, > Android for Work Enrollment, and click Unbind.

  2. 同意刪除 Android for Work 繫結Agree to delete Android for Work binding
    按一下 [是] 刪除繫結,並從 Intune 取消註冊所有 Android for Work 裝置。Click Yes to delete the binding and unenroll all Android for Work devices from Intune.