Enroll Android devices

As an Intune administrator, you can enroll Android devices in the following ways:

  • Android Enterprise (offering a set of enrollment options that provide users with the most up-to-date and secure features):
    • Android Enterprise personally owned with a work profile: For personal devices granted permission to access corporate data. Admins can manage work accounts, apps, and data. Personal data on the device is kept separate from work data and admins don't control personal settings or data.
    • Android Enterprise dedicated: For corporate-owned, single use devices, such as digital signage, ticket printing, or inventory management. Admins lock down the usage of a device for a limited set of apps and web links. It also prevents users from adding other apps or taking other actions on the device.
    • Android Enterprise fully managed: For corporate-owned, single user devices used exclusively for work and not personal use. Admins can manage the entire device and enforce policy controls unavailable to personally owned/corporate-owned work profiles.
    • Android Enterprise corporate-owned with a work profile: For corporate-owned, single user devices intended for corporate and personal use.
  • Android device administrator, including Samsung Knox Standard devices and Zebra devices. Device administrator should be used in areas where Android Enterprise or Google Mobile Services (GMS) is unavailable. Google has decreased support for device administrator (DA) management in areas where Android Enterprise is available, and encourages organizations to migrate to Android Enterprise device management. For a list of countries and regions that support Android Enterprise, see Is Android Enterprise available in my country?
  • Android (AOSP) offers a set of enrollment options for devices that aren't integrated with Google Mobile services.


For guidance on which enrollment method is right for your organization, see Deployment guide: Enroll Android devices in Microsoft Intune.


To prepare to manage mobile devices, you must set the mobile device management (MDM) authority to Microsoft Intune. See Set the MDM authority for instructions. You set this item only once, when you’re first setting up Intune for mobile device management.

For Android Enterprise, refer to the following support article from Google to ensure that Android Enterprise is available in your country or region: https://support.google.com/work/android/answer/6270910

For devices manufactured by Zebra Technologies, you may need to grant the Company Portal more permissions depending on the capabilities of the specific device. Mobility Extensions on Zebra devices has more details.

For Samsung Knox Standard devices, there are more prerequisites.

Next steps