Android Zero Touch Enrolment with Intune
Вставка
- Опубліковано 12 лип 2024
- In this video Andy walks through the setup and demonstration for an Android Zero Touch Enrolment using Microsoft Intune. It covers:
- What it is
- How to configure both Android Zero Touch and Intune
- Demonstration of the Enrolment experience
Table of Contents:
00:00 - Introduction
00:51 - Configure a Corp Owned Fully Managed Enrolment Android Profile with Intune
01:56 - Refer to Microsoft documentation
03:07 - Refer to Google documentation for Android Zero Touch
05:32 - Prepare a configuration and device in the Android Zero Touch Portal
08:52 - Configuration Recap
09:27 - Apps to deploy
10:21 - Android device enrolment demonstration
16:34 - Verify device enrolment and details within Intune
18:28 - Wrap Up
Andy Jones is a Microsoft Technical Architect at BT and Organiser at CloudManagement.Community. He's on Twitter @Andy_69Jones. Any views or opinions expressed here are his own. - Наука та технологія
Hi Andy, Thanks for the video, very informative.
Great Video, Crisp, short and exactly what is needed. looking forward for more of them.
Awesome, thank you!
11:40
Thanks for providing a great walkthrough of the ZTE process. I have setup all the pre requisites including a fully managed profile in Intune, an enrollment profile in the Android partner portal (and set it as the default) etc but once I connect a ZTE device to wifi during oobe it doesn't seem to pick up the enrollment profile, instead the camera opens and ask for a QR code.. I can scan the QR code from the Intune token manually and the enrollment will finnish just fine, but I like the profile to be picked up automatically. Do you have any idea what might be missing? Thanks! 😊👍
Is there any option that can auto login the microsoft account instead of loging i-n manually?
The main concept of ZTE is seamless right?
Seamless in the sense that IT admins are relieved from touching the device. Users still need to do some stuff themselves but if configured correctly a lot of stuff like company applications, settings , certificates etc will be installed automatically, and the Google login/account creation screen will be bypassed as well so the out of box experience is somewhat simplified to get them up and running quickly. However, the end user do need to authenticate during the enrollment as a security precaution. Otherwise anyone who got hold of the device would've been able to enroll the device with a user profile that doesn't belong to them.
Hello Andy,
Thanks for the video. Is it at all possible to pre configure the options like :
- Downloading Chrome
- Google services (Location)
- The work applications (Installment is mandatory so my collegues dont have to see this one)
All that because i work with some people who are Digital illiterate. So when i ask them to do this themself. They will be stuck and come to the IT Team again.
Mitty you can’t eliminate user interaction completely. I suggest you provide a user guide, intro video or group sessions to take colleagues through the enrolment and prevent ad hoc help requests
Thanks for this nice video i have a question Andy. What if a Corporate Device is stolen? Can we then Wipe it? And what if the stolen device is reset to factory by the other peole? Can they then use the device as a new device for private use?
Hi Hossein, theres a few answers to that question really. You can set the Google FRP Factory reset protection so the user with the phone needs to know the last logon details. Thats for Android. Witin Intune you can delete, wipe it if still enrolled, lock it too. If say for example the device is dropped in the water and unusable then you would simply delete the device from Intune.
Hello Andy, Thanks for the video, very informative. And would you let me know the contact information of the Device Reseller Registration manager ?
Hi There in terms of contact information Zero touch targets the enterprise deployment and zero-touch enrollment needs to be purchased directly from an enterprise reseller or Google partner and not through a consumer store. Reseller partners are listed in Android's Enterprise Solutions Directory androidenterprisepartners.withgoogle.com/resellers/ . Is this what you are referring to ?
Thanks for the Video. I´m trying to get a Samsung A53 Device enrollt, but i get stuck at 13:08min. The Company Portal says: Page not found.
Mark Ill take a look. do you have any additional background info ?
I had the same problem because I was an DEM (Device enrollment managers). DEM cannot enroll fully managed devices...
Do you happen to know why it's called "Zero Touch Enrolment" when this isn't actually the case? There's still a heap of steps for the user to go through, so the name and sales pitch seems misleading.
That's Microsoft for you, I was hoping for what you were.
Its funny that this is classed as zero touch yet still requires user account login so not zero touch. I was hoping for a true zero touch setup so I don't need the user to put in their details.
How do I get to the demo of the zero touch is this only in the partner portal ?
OMG this is "zero touch" looks a loooooong way away from that to me.