Android Enterprise for Company Owned Phones

J
John
G4s Secure Solutions (usa) Inc.

We have recently upgraded to MC 14.4.7.1053 and I was excited to take advantage of the Android Enterprise features but from what I see at this point it looks like it's really beneficial for BYOD and not COBO (Company Owned, Business Only) unless I'm missing something. The work profile doesn't really work for us, we are still wanting to enable a lockdown screen, feature controls and so on. One of the features I'm really wanting to take advantage of is the Disable Factory Reset Protection. We have an issue with our employees adding personal Google accounts on our phones then they are factory resetting them making the phone useless. Any thoughts, comments or suggestions are welcome. 

5 years ago
SOTI MobiControl
ANSWERS
RC
Raymond Chan Diamond Contributor
5 years ago

You likely have only enrolled your devices to Android-Enterprise Work-Profile (also called Profile-Owner) mode.  You can confirm  that my checking if the active MDM API reported in your device agent configuration tab contains the entry "Work-Profile ###".  

To use kiosk mode and all the other features you mentioned, you need to get your device into Android-Enterprise Managed-Device (also called Device-Owner) mode.  You have to perform a device factory reset, and input "afw#mobicontrol"  when you are prompted for any existing/new Google account in the initial device set-up.   Your device will then be configured as AEDO mode and the latest device agent and Google support libraries will be downloaded to your device.  In this mode, the Active MDM API's field  reported in your device agent should include entry  "Managed-Device ###" . 

If your device model has the relevant h/w & s/w support, the provisioning/enrollment process can be speeded up by using QR-code or NFC instead of the above-mentioned hash tag approach.