註冊 Android 裝置Enroll Android devices

適用對象:Azure 入口網站的 IntuneApplies to: Intune in the Azure portal
您需要傳統入口網站的 Intune 相關文件嗎?Looking for documentation about Intune in the classic portal? 請移至這裡Go here.

身為 Intune 系統管理員,您可以管理 Android 裝置,包括 Samsung Knox Standard 裝置。As an Intune administrator, you can manage Android devices, including Samsung Knox Standard devices. 您也可以管理 Android for Work 裝置工作設定檔。You can also manage the work profile Android for Work devices.

Intune 的多使用者管理支援執行 Samsung Knox Standard 的裝置。Devices that run Samsung Knox Standard are supported for multi-user management by Intune. 這表示使用者可以利用他們的 Azure AD 認證登入和登出裝置。This means that users can sign in and out of a device with their Azure AD credentials. 裝置不論是否處於使用狀態,都是集中管理。The device is centrally managed whether it’s in use or not. 當使用者登入時,他們可以存取應用程式,此外也可以將任何原則套用到這些應用程式。When users sign in, they have access to apps and additionally get any policies applied to them. 當使用者登出時,會清除所有應用程式資料。When users sign out, all app data is cleared.

必要條件Prerequisite

若要準備管理行動裝置,您必須將行動裝置管理 (MDM) 授權單位設定為 Microsoft IntuneTo prepare to manage mobile devices, you must set the mobile device management (MDM) authority to Microsoft Intune. 請參閱設定 MDM 授權單以取得相關指示。See Set the MDM authority for instructions. 此項目只會設定一次,也就是第一次為行動裝置管理設定 Intune 之時。You set this item only once, when you are first setting up Intune for mobile device management.

設定 Android 註冊Set up Android enrollment

根據預設,Intune 允許註冊 Android 和 Samsung Knox Standard 裝置。By default, Intune allows enrollment of Android and Samsung Knox Standard devices.

若要封鎖 Android 裝置,或者僅封鎖註冊個人擁有的 Android 裝置,請參閱Set device type restrictions (設定裝置類型限制)。To block Android devices, or to block only personally owned Android devices from enrollment, see Set device type restrictions.

若要啟用裝置管理,您的使用者必須註冊其裝置,方法是下載從 Google Play 取得的 Intune 公司入口網站應用程式,然後開啟應用程式並遵循提示。To enable device management, your users must enroll their devices by downloading the Intune Company Portal app (available from Google Play), and then opening the app and following the prompts. 當 Android 裝置受到管理之後,您可以指派合規性原則管理應用程式等。After Android devices are managed, you assign compliance policies, manage apps, and more.

啟用 Android for Work 裝置的註冊Enable enrollment of Android for Work devices

若要在支援 Android for Work (英文) 的裝置上啟用工作設定檔管理,您必須將 Android for Work 繫結新增至 Intune。To enable management of the work profile on devices that support Android for Work, you must add an Android for Work binding to Intune. 若要註冊支援 Android for Work 但先前註冊為一般 Android 裝置的裝置,您必須取消註冊裝置,然後重新註冊。To enroll devices that support Android for Work but were previously enrolled as regular Android devices, you must unenroll the devices and then re-enroll them.

如果要使用裝置註冊管理員帳戶註冊 Android for Work 裝置,每個帳戶只能註冊 10 部裝置。If you're enrolling Android for Work devices by using a Device Enrollment Manager account, there is a limit of 10 devices that can be enrolled per account.

新增 Intune 的 Android for Work 繫結Add Android for Work binding for Intune

  1. 設定 Intune MDMSet up Intune MDM
    如果尚未這麼做,請將行動裝置管理授權單位設定為 Microsoft Intune,以針對行動裝置管理做準備。If you haven’t already, prepare for mobile device management by setting the mobile device management authority as Microsoft Intune.
  2. 設定 Android for Work 繫結Configure Android for Work binding
    以 Intune 系統管理員的身分,在 Azure 入口網站中選擇 [更多服務] > [監視 + 管理] > [Intune]。As an Intune administrator, in the Azure portal, choose More Services > Monitoring + Management > Intune.

    a.a. 在 [Intune] 刀鋒視窗上,選擇 [裝置註冊] > [Android for Work 註冊],然後選擇 [設定] 以開啟 Google Play 的 Android for Work 網站。On the Intune blade, choose Device enrollment > Android for Work Enrollment, and choose Configure to open Google Play's Android for Work website. 在瀏覽器的新索引標籤中開啟網站。The website opens on a new tab in your browser. 顯示設定 Android for Work 繫結之連結的螢幕擷取畫面Screenshot showing link to configure the Android for Work binding

    b.b. 登入 GoogleSign in to Google
    在 Google 的登入頁面上,輸入要與此租用戶之所有 Android for Work 管理工作相關聯的 Google 帳戶。On Google's sign-in page, enter the Google account that will be associated with all Android for Work management tasks for this tenant. 這是貴公司 IT 管理員共用的 Google 帳戶,以在 Play for Work 主控台中管理及發行應用程式。This is the Google account that your company's IT admins share to manage and publish apps in the Play for Work console.

    c.c. 提供組織詳細資料Provide organization details
    提供您的公司名稱作為組織名稱Provide your company's name for Organization name. 針對企業行動管理 (EMM) 提供者,應該顯示 Microsoft IntuneFor Enterprise mobility management (EMM) provider, Microsoft Intune should be displayed. 同意 Android for Work 合約,然後選擇 [確認]。Agree to the Android for Work agreement, and then choose Confirm. 您的要求將會被處理。Your request will be processed.

指定 Android for Work 註冊設定Specify Android for Work enrollment settings

只有特定 Android 裝置才支援 Android for Work。Android for Work is supported on only certain Android devices. 請參閱 Google 的使用 Android for Work 的必備條件See Google's Android for Work requirements. 支援 Android for Work 的所有裝置也會支援傳統 Android 管理。Any device that supports Android for Work also supports conventional Android management. Intune 可讓您指定應該如何管理支援 Android for Work 的裝置:Intune lets you specify how devices that support Android for Work should be managed:

  • 將所有裝置當成 Android 管理Manage all devices as Android. 所有 Android 裝置 (包括支援 Android for Work 的裝置) 都會註冊為傳統 Android 裝置。All Android devices, including devices that support Android for Work, will be enrolled as conventional Android devices.
  • 將支援的裝置當成 Android for Work 管理Manage supported devices as Android for Work. 所有支援 Android for Work 的裝置都會註冊為 Android for Work 裝置。All devices that support Android for Work are enrolled as Android for Work devices. 不支援 Android for Work 的任何 Android 裝置會註冊為傳統 Android 裝置。Any Android device that does not support Android for Work is enrolled as a conventional Android device.
  • 將這些使用者群組中僅限使用者的受支援裝置當成 Android for Work 管理Manage supported devices for users only in these user groups as Android for Work. 您可將 Android for Work 管理的目標設為一組有限的使用者。You can target Android for Work management to a limited set of users. 只有註冊支援 Android for Work 之裝置的所選群組成員,才能註冊為 Android for Work 裝置。Only members of the selected groups who enroll a device that supports Android for Work are enrolled as Android for Work devices. 所有其他成員則會註冊為 Android 裝置。All others are enrolled as Android devices. 這在 Android for Work 試驗期間會很有用。This is useful during Android for Work pilots.

告知使用者如何註冊其裝置才可存取公司資源Tell your users how to enroll their devices to access company resources

通知您的使用者移至 Google Play 來下載 Intune 公司入口網站應用程式,然後開啟應用程式,並遵循提示以註冊其裝置。Tell your users to go to Google Play to download the Intune Company Portal app, and then open the app and follow the prompts to enroll their device. 應用程式會引導使用者進行註冊程序,即說明使用者能獲得什麼,以及 IT 系統管理員可以和無法在其裝置上看到什麼。The app guides users through the enrollment process, explaining what users can expect and what IT administrators can and can't see on their devices.

您也可以將線上註冊步驟的連結傳送給他們︰在 Intune 註冊 Android 裝置You can also send them a link to online enrollment steps: Enroll your Android device in Intune.

如需其他使用者工作的資訊,請參閱下列文章:For information about other user tasks, see these articles:

解除 Android for Work 系統管理帳戶繫結Unbind your Android for Work administrative account

您可以關閉 Android for Work 註冊和管理。You can turn off Android for Work enrollment and management. 在 Intune 管理主控台選擇 [解除繫結],移除所有已註冊 Android for Work 裝置的註冊。Choosing Unbind in the Intune administration console removes all enrolled Android for Work devices from enrollment. 它也會移除 Android for Work 帳戶與 Intune 之間的關聯性。It also removes the relationship between the Android for Work account and Intune.

解除 Android for Work 帳戶的繫結To unbind an Android for Work account

  1. 解除 Android for Work 繫結Unbind Android for Work binding
    以 Intune 系統管理員的身分,在 Azure 入口網站中選擇 [更多服務] > [監視 + 管理] > [Intune]。As an Intune administrator, in the Azure portal, choose More Services > Monitoring + Management > Intune. 在 [Intune] 刀鋒視窗上,選擇 [裝置註冊] > [Android for Work 註冊],然後選擇 [解除繫結]。On the Intune blade, choose Device enrollment, > Android for Work Enrollment, and then choose Unbind.

  2. 同意刪除 Android for Work 繫結Agree to delete Android for Work binding
    選擇 [是] 刪除繫結,並從 Intune 取消註冊所有 Android for Work 裝置。Choose Yes to delete the binding and unenroll all Android for Work devices from Intune.