Replies posted by jasonbayton | Community
Skip to main content
Start post
Login
Home
Search
Replies posted by jasonbayton
552 Replies
Newest first
Oldest first
jarmo_akkanenLevel 2.0: Eclairasked in Android Enterprise General Discussions
[Updated] Widgets on COPE - MS Intune
Only 4 years? Microsoft is really turning that ship around 😂 Well done mate, good job persistently pestering them!
0
228
23
10 hours ago
KirkCommunity Managerpublished in Off-topic
Community Spotlight - MichelSpotlight
That was a good read ​@Michel, nice one 😎
10
230
7
4 days ago
AKiko NagataLevel 1.6: Donutasked in Android Enterprise General Discussions
Google Photos not showing on Managed Home Screen allow-list on Samsung Galaxy A25 5G (Android 15) - Confirmed system app issue
Something to consider - on Pixel and other devices Google Photos is _the_ gallery app, while Samsung uses their own version. This can explain why some devices have it enabled by default while others show installed but inaccessible.So you’ve got Google Photos deployed as a Public app from within intune, that should remove any other obstacles I can think of.. do you have the ability to pull a bug report? Perhaps MHS itself is falling over for some reason.If you’re only using MHS for kiosk (no SSO, intune features) you can try your kiosk experience through my kiosk app generator here - https://gen.bayton.org - you can build a kiosk experience from scratch and deploy it as a private google play app. If that works as intended, you’ll know it’s something with MHS.
1
226
15
5 days ago
KirkCommunity Managerpublished in Android Enterprise General Discussions
Happy 3rd Anniversary!
We're officially a toddler. Hear hear!
16
382
12
25 days ago
quickorderNew Memberasked in Android Enterprise General Discussions
Android Management API enrollment blocked with "Since your organization reached its usage limits"
+ in the GCP console, error messages, etc. Lots can be done to make this suck less indeed.
0
146
5
1 month ago
quickorderNew Memberasked in Android Enterprise General Discussions
Android Management API enrollment blocked with "Since your organization reached its usage limits"
Unfortunately it's not hidden, it's just not obvious enough in the right places to properly surface the requirements to new partners/orgs. https://developers.google.com/android/management/permissible-usage#quotas_and_restrictions
0
146
5
1 month ago
semhzaidNew Memberasked in Android Enterprise General Discussions
Android Management API Device Enrollment Successful but Device Not Showing in Active Devices List
Sorry for the delay, email alerts are rubbish  Have you got pubsub hooked up? If not, you’ll need to poll AMAPI for updates. You should also ensure your enterprise subscribes to the relevant topics. This little setup guide may help you.
0
144
3
1 month ago
drakkenLevel 1.5: Cupcakeasked in Android Enterprise General Discussions
Org usage limits error, no enrolled devices
I had a quick whip over their documentation but didn’t see anything explicit on self-hosting, but my assumption is they’re making you tie in your own Google Cloud Project?If so, that’ll be why - these are 0-quota by default and you must provide a business justification to Google to have your project granted any quota. More here: https://bayton.org/android/android-enterprise-faq/amapi-device-quota-limits/ If it’s just a personal use project you’re after, DM me and I’ll sort you out with management.
0
177
12
23 days ago
w4lterLevel 2.0: Eclairasked in Android Enterprise General Discussions
Android COPE with Samsung KME and Retire (Intune)
@w4lter I’m chatting with Samsung also, can I check if you’re using any other Knox services, and if the user tried disabling all other active Knox admin apps?
2
270
11
19 days ago
gaoyu1Level 2.0: Eclairasked in Android Enterprise General Discussions
eSIM silently (without user interaction) downloaded to the device and successfully activated
@gaoyu1 yep an activation code is required in both cases, the code determines whether it's importing a profile or just pointing at the server
1
235
13
1 month ago
gaoyu1Level 2.0: Eclairasked in Android Enterprise General Discussions
eSIM silently (without user interaction) downloaded to the device and successfully activated
@gaoyu1 a and b are the same process for you, the only difference is the activation code used. In a the EID isn't on SMDP, so you provide a full profile for the esim with the LPA URL, in b you provide an LPA that just points to sm-dp. Sm-dp gives the device the profile on connection to it.  Does the operator have experience with MDM?
1
235
13
1 month ago
gaoyu1Level 2.0: Eclairasked in Android Enterprise General Discussions
eSIM silently (without user interaction) downloaded to the device and successfully activated
Take two videos,  First use an activation code in the command with a full esim profile and set it to activated, show the device installing it silently Second use an activation code that just points to the sm-dp+ where the device has already been assigned a similar based on it's EID, set it to active, record it installing on the device
1
235
13
1 month ago
mauriceatkinsonNew Memberasked in Android Enterprise General Discussions
No response to AMAPI Initial Quota Request — two submissions over 30+ business day
Related: https://www.androidenterprise.community/android-enterprise-general-discussions-3/activating-device-owner-in-android-16-1434
1
82
1
1 month ago
mauriceatkinsonNew Memberasked in Android Enterprise General Discussions
Google refuses to allow amapi to be used for parental and sageguarding controls
Via https://www.androidenterprise.community/android-enterprise-general-discussions-3/activating-device-owner-in-android-16-1434 ​@Kirk
1
117
1
1 month ago
mauriceatkinsonNew Memberasked in Android Enterprise General Discussions
Activating Device Owner in Android 16
Google will usually point back to their family link option as *the* parental control offering they support. In terms of the documentation, their permissible use page explicitly calls out monitoring outside of enterprise management. You can’t really have a parental control app that doesn’t monitor the user, as that’s the fundamental USP for it.> Solutions developed exclusively for the purpose of device or user monitoring, fingerprinting, or eavesdropping, independent of enterprise management. Source. Normally I’d have suggested switching to a custom DPC, however more recently these rules were applied to that, also Which leaves you effectively abusing special permissions and working around the limitations these rules impose for family management, which I agree is detrimental to the ecosystem compared to embracing the use case and carefully guiding it through the device owner management route; no one will stop developing this given the demand simply because one avenue becomes untenable
0
652
4
1 month ago
SreekanthNew Memberasked in Android Enterprise General Discussions
When Lost Mode is exited manually by the user on the device, the device successfully exits Lost Mode locally, but the Android Management API device resource continues to report the device state as LOST
@Kirk FWIW I can’t replicate on my projects, ​@Sreekanth if you’re in the Partner Portal, raise it there also. (emm.androidenterprise.dev)
1
90
5
1 month ago
mattdermodyLevel 3.0: Honeycombposted in Android Enterprise General Discussions
What options are there for managing Google Play System (Mainline) Updates?
Yes, I’ll link to device trust because that’s clear on the API available: https://developers.google.com/android/management/device-trust-signals Device Security Patch Level			SoftwareInfo#getDeviceSecurityPatchInfos() returns the current security patch level of the device for different updatable components:			SYSTEM				KERNEL				SYSTEM_MODULES (also known as Android's mainline modules)					  And also available to DPCs - https://developers.google.com/android/work/security-posture-signals A DPC or application (because it’s not restricted) can also query the version of com.google.android.modulemetadata to get the device mainline version. This is what I do for Managed Info.
1
313
5
1 month ago
gaoyu1Level 2.0: Eclairasked in Android Enterprise General Discussions
eSIM silently (without user interaction) downloaded to the device and successfully activated
AMAPI's AddEsimParams.activationCode is mandatory by Google's design. I’m not sure I draw the same conclusion as you from the docs.. The activation code is the destination from which the profile is downloaded, it can either be a full profile or a partial profile, in the latter you don’t provide an activation code with a full eSIM configured, but rather point to an SM-DP+ server that has device identifiers mapped to an eSIM config on that end. If you want the admin not to type a code, the EMM has to fetch one via direct integration with the carrier. The EMM then calls AMAPI's AddEsim with the carrier-supplied code and the user sees nothing. I’ve implemented this a couple of times to date, perhaps these references will help:netlify/functions/_lib/amapi-command.ts (ADD_ESIM validation) - ADD_ESIM throws AmapiCommandValidationError('ADD_ESIM requires params.activationCode') if the field is missing.	src/components/device/CommandModal.tsx (Add eSIM form) - the UI marks activationCode as requ
1
235
13
1 month ago
w4lterLevel 2.0: Eclairasked in Android Enterprise General Discussions
Android COPE with Samsung KME and Retire (Intune)
@w4lter can I check, in your system do you use Knox Service Plugin? Samsung from what I recall added an auto-block for DA apps when that was in use.. I wonder if that was left over? The screenshot is not complaining about COPE per-se, it’s not blocking Intune enrolment because there’s a device admin, there’s a leftover restriction on DA apps by the looks which should have been removed when the device was relinquished.. which makes me believe it’s a Samsung bug. They’re in pastures-new now, so I wouldn’t bother them asking for logs or debugging.. but it’s definitely something I’d want to get to the bottom of.
2
270
11
19 days ago
w4lterLevel 2.0: Eclairasked in Android Enterprise General Discussions
Android COPE with Samsung KME and Retire (Intune)
Oh that’s interesting. I can’t comment on this specific scenario because it’s not something I’ve personally tested.. but it surprises me that a device admin would block Intune enrolment. Device admin apps aren’t rare. Did they share a screenshot or log/error with you?
2
270
11
19 days ago
w4lterLevel 2.0: Eclairasked in Android Enterprise General Discussions
Android COPE with Samsung KME and Retire (Intune)
Relinquishing is the process of fully removing control from MDM without a wipe on a company-owned device. A couple of linked-service artefacts aren’t really justification for fully wiping a device when all trace of MDM has been removed; consider if they hadn’t removed it from KME, that enrollment service app would trigger after the wipe too :)
2
270
11
19 days ago
w4lterLevel 2.0: Eclairasked in Android Enterprise General Discussions
Android COPE with Samsung KME and Retire (Intune)
Enrollment service is tied to KME, it is 1,000% a Samsung app & something Samsung preloads on their devices. Because you’ve relinquished ownership rather than wiped the device, it’s expected it would still be showing enabled; KME and EMM are two different solutions essentially, with limited knowledge of one another. You’ve removed the device from KME so the service isn’t in use, I wouldn’t personally worry, and would reassure the end user it’s a preloaded app, but fully disconnected from your control.
2
270
11
19 days ago
Manage Engine UserNew Memberposted in Android Enterprise General Discussions
Feedback: retain personal Google account support for Managed Google Play
Because I’ve been Google Workspace/G Suite for 10 years now, I’ve never had access to Google Family, Google One, etc.. EMM policies combined with custom-developed applications effectively replace Google Family for devices here.  I also have various desk/wall mounted kiosk tablets under kiosk policies doing their required jobs, including one outside directing delivery drivers and such :)   Wellbeing doesn’t suit the use case across the board, and since I’m not a fan of disparately setting up different methods of management, centralising it all to EMM is the obvious choice for me.
2
145
6
2 months ago
Manage Engine UserNew Memberposted in Android Enterprise General Discussions
Feedback: retain personal Google account support for Managed Google Play
Howdy, Google isn’t taking away Gmail signup. They’ve left it part of the signup flow intentionally and this isn’t changing. I like your use case, I do similar with my devices (as well as several other use cases), but I own my domain so the move into a workspace environment was not a concern for me.  ME’s guidance is incorrect, perhaps that’s something the team can reach out to them to correct ​@Lizzie?  But the short of it is, you can carry on with Gmail. You’re encouraged to move to a workspace but even if you do, you don’t have to validate the domain etc. It just means there’s a chance someone could buy a domain in future and look to claim it themselves.
2
145
6
2 months ago
LizzieCommunity Managerpublished in Android Enterprise General Discussions
[Survey] Enterprise Usage of USSD Codes for Call-ForwardingSurvey
Survey might need a tweak? Just because I don't now doesn't mean I wouldn't if the functionality was there for it though!  Also are you taking requests? Can we have one on AMAPI supporting multi/ephemeral user management next? I'd like to see that before I retire
3
306
6
20 days ago
1
2
3
4
...
23
Page 1 / 23
Powered by Gainsight
Terms & ConditionsCookie settingsAccessibility statement
Sign up
Already have an account? Login
Login with SSO
Google login
Login to the community
No account yet? Create an account
Login with SSO
Google login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Enter your e-mail address
Send
Back to overview