Posted September 7, 20231 yr Back in 2020, Google deprecated Android device administrator management, and has been encouraging moving off of device administrator since 2017. Google continues to remove device administrator management capabilities and they no longer provide fixes or improvements. Due to these changes, Microsoft Intune will be ending support for device administrator management on devices with access to Google Mobile Services (GMS), beginning August 30, 2024. Until that time, we’ll continue supporting device administrator management on devices running Android 14 or earlier. Impact of ending support For devices with access to GMS After Intune ends support for Android device administrator, devices with access to GMS will be impacted in the following ways: Users won’t be able to enroll devices with Android device administrator. Intune won’t make changes or updates to Android device administrator management, such as bug fixes, security fixes, or fixes to address changes in new Android versions. Intune technical support will no longer support these devices. For devices without access to GMS Microsoft Teams certified Android devices will be migrated to Android Open Source Project (AOSP) management in Intune with a firmware update in the first half of the 2024 calendar year. Policies will not be migrated automatically, so IT admins will need to create the appropriate new policies for AOSP management. You can read more about this in the Microsoft 365 or Microsoft Intune admin center Message center under MC665936. For all other devices without GMS access running Android 14 or earlier, Intune will continue allowing device administrator enrollment and will maintain limited support, since Android Enterprise management is unavailable to these devices. Device administrator is not recommended for these devices, since Google’s device administrator deprecation could impact functionality in the future. Refer to the following section for recommended device management alternatives. Alternatives to Android device administrator Intune offers many alternatives to device administrator that provide rich functionality for the many different scenarios for which you use device administrator today. Our recommendations depend on device ownership and whether the device has access to GMS. You may want to review the list of countries where Android Enterprise is available. The table below provides suggested alternate management methods for common device administrator use cases. Scenario Suggested alternative Personal device with access to GMS. Personally-owned work profile and/or app protection policies. See move Android devices from device administrator to personally-owned work profile management for guidance. Corporate device with access to GMS. Corporate-owned work profile, fully managed, or dedicated. If desired, combine with app protection policies. Personal device without access to GMS. App protection policies. Corporate device without access to GMS. For Intune AOSP supported devices, use AOSP user-associated or AOSP userless. Teams devices. These devices will be migrated to AOSP user-associated management with a firmware update in the first half of the 2024 calendar year. Identifying device administrator devices You can check your Intune reporting to see which devices and users may be affected. Go to Devices > All devices and filter the OS column to Android (device administrator) to see the list of devices. Feedback The Intune Android product team is here to support you through this transition. If you have feedback on this change, you can send it to them directly by filling out this feedback form, leaving a comment on this post or reaching out on Twitter @IntuneSuppteam. Stay tuned to this blog for updates! We’ll provide more information about the changes as it becomes available. Additional resources Intune blog from 2020 about decreasing device administrator support Google's guidance for migration from device administrator to Android Enterprise Continue reading...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.