Intune Corporate-owned dedicated devices with inbuild Application for Android

Question

Hi all,

I am enrolling my device using Corporate-owned dedicated devices for android devices and I have run Managed Home screen to allow user to use multi app.
but right now I realize I cannot add inbuild application like camera , contacts , my files or settings to display in kiosk.
when by in iPad there is a Bundle IDs "https://learn.microsoft.com/en-us/mem/intune/configuration/bundle-ids-built-in-ios-apps" which allow me to show or hide it using the Bundle ID. is there anyway i can do it or is the limitation?

Thanks.

Answer 1

From the official blog, Kiosk settings apply only to Samsung Knox Standard devices, and only to apps you manage using Intune. Add apps you want to run when the device is in kiosk mode. In kiosk mode, only the apps you add run; apps not added don't run. Pre-installed browsers don't run as an app when the device is in kiosk mode.

Reference: https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android#kiosk

Based on my research, you can try to add the following app with the package name, and install the following built in system-apps:

Camera:
com.sec.android.app.camera

contacts
com.samsung.android.app.contacts

Samsung Calendar:
com.samsung.android.calendar

Clock:
com.sec.android.app.clockpackage

FM-radio:
com.sec.android.app.fm

Samsung Gallery:
com.sec.android.gallery3d

Reference: https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-enabling-kiosk-mode-on-android-and-ios-devices/ba-p/390965

---

If the response is helpful, please click "Accept Answer" and upvote it.

Answer 2

I thought Android administrator going to get superseded by Android Enterprise soon? Kiosk settings seem to be applying to Android device administrator only. I am using Android Enterprise enrollment using Corporate-owned dedicated devices. can it still be done?

Answer 3

There have been any information that indicates Android administrator going to get superseded by Android Enterprise. But Android device administrator (sometimes referred to "legacy" Android management and released with Android 2.2) is a way to manage Android devices. However, improved management functionality is now available with Android Enterprise (released with Android 5.0). In an effort to move to modern, richer, and more secure device management, Google is decreasing device administrator support in new Android releases.

Also, you are correct. Kiosk settings that mentioned above only apply to Android device administrator only currently. If there is any lasted information updated by official channel, I will inform you as soon as possible in this post.

Answer 4

Update latest information for Android device administrator:

Android device administrator management was released in Android 2.2 as a way to manage Android devices. Then beginning with Android 5, the more modern management framework of Android Enterprise was released (for devices that can reliably connect to Google Mobile Services). As previously shared in MC186863, Google is encouraging movement off of device administrator management by decreasing its management support in new Android releases. The date when devices would be impacted was previously communicated as third quarter of 2020, but is has been moved out based on the latest information from Google.

How this will affect your organization

Because of these changes by Google, in the fourth quarter of 2020, you will no longer have as extensive management capabilities on device administrator managed devices running Android 10 and later that are not manufactured by Samsung. If you use Intune to manage Android devices or plan to in the future, read the Intune Customer Success blog post and documentation for more information about the extent of the impact including impacted device types, impacted configuration and compliance settings, and the resultant user experience.

What you need to do to prepare
To avoid the reduction in functionality coming in the fourth quarter of 2020, we recommend the following:
• New enrollments: Onboard new devices into Android Enterprisemanagement (where available) and/or app protection policies. Avoid onboarding new devices into device administrator management.
• Previously enrolled devices: If a device administrator managed device is running Android 10 or later or may update to Android 10 or later (especially if it is not a Samsung device), move it off of device administrator management to Android Enterprise management and/or app protection policies. You can leverage the streamlined flow to move Android devices from device administrator to work profile management.

Additional Information: https://aka.ms/android_device_administrator and https://aka.ms/android_da_docs