Now booking Q1 Intune migrations — talk to an engineer.

CyberSystem
← Back to Blog

Intune Android Enterprise Enrollment: Complete Guide

Learn how to set up and configure Android Enterprise enrollment in Intune, including fully managed devices, work profile, dedicated devices, and corporate-owned work profile scenarios.

By Ali Alame•
intuneandroid-enterpriseenrollmentfully-managedwork-profilededicated-devicescope

Android Enterprise enrollment in Microsoft Intune provides multiple management scenarios for Android devices, including fully managed devices, work profile devices, and dedicated devices. Each scenario offers different levels of management and user experience.

Understanding Android Enterprise

Android Enterprise provides several enrollment options for managing Android devices in Intune. These options offer different levels of device management and user experience, from full device management to work profile separation.

Android Enterprise Scenarios

  1. Fully Managed (COBO): Complete device management for corporate-owned devices
  2. Work Profile (BYOD): Personal device with separate work profile
  3. Dedicated Devices (COSU): Single-purpose or kiosk devices
  4. Corporate-Owned Work Profile (COPE): Corporate device with work profile

For an overview, see Enrollment guide: Enroll Android devices in Microsoft Intune.

Prerequisites

Before setting up Android Enterprise enrollment:

  1. Google Account: Google account for Android Enterprise
  2. Intune Subscription: Active Microsoft Intune license
  3. Android Enterprise Setup: Complete Android Enterprise setup in Intune
  4. Device Requirements: Devices must support Android Enterprise
  5. Permissions: Intune Administrator role

Setting Up Android Enterprise

Step 1: Connect to Android Enterprise

  1. Sign in to the Microsoft Intune admin center
  2. Navigate to Devices > By platform > Android > Enrollment
  3. Complete Android Enterprise setup
  4. Connect Google account to Intune

Step 2: Configure Enrollment Profiles

Create enrollment profiles for each scenario:

Fully Managed Devices:

  • Create enrollment profile for fully managed devices
  • Configure device naming
  • Set up device groups

Work Profile Devices:

  • Configure work profile enrollment
  • Set up app protection
  • Configure user experience

Dedicated Devices:

  • Create dedicated device profile
  • Configure kiosk mode
  • Set up device restrictions

Fully Managed Device Enrollment

Creating Enrollment Profile

  1. Navigate to Devices > Enrollment > Android > Enrollment Profiles
  2. Select Corporate-owned, fully managed user devices
  3. Select Create policy
  4. Configure:
    • Name: Profile name
    • Description: Optional description
    • Token type: Corporate-owned, fully managed
    • Device naming: Configure naming template
    • Device group: Optional enrollment-time grouping

For details, see Set up enrollment for Android Enterprise fully managed devices.

Enrollment Methods

QR Code (Recommended):

  1. Wipe device
  2. Tap first screen repeatedly
  3. Scan QR code from enrollment profile
  4. Follow on-screen prompts

Token:

  1. Turn on device
  2. Enter afw#setup on Google sign-in
  3. Install Android Device Policy app
  4. Enter enrollment token

Google Zero Touch:

  1. Link zero-touch account to Intune
  2. Configure zero-touch in Google portal
  3. Devices enroll automatically

For details, see Enroll your Android Enterprise dedicated, fully managed, or corporate-owned with work profile devices.

Work Profile Enrollment

Personal Device with Work Profile

User Steps:

  1. Install Company Portal app
  2. Sign in with work account
  3. Follow enrollment prompts
  4. Work profile created automatically

Configuration:

  • Apps install in work profile
  • Work data separated from personal data
  • Personal apps remain unmanaged
  • Work apps managed by Intune

Corporate-Owned Work Profile (COPE)

Setting Up COPE

  1. Navigate to Devices > Enrollment > Android
  2. Configure corporate-owned work profile
  3. Create enrollment profile
  4. Configure device management

Benefits:

  • Corporate device ownership
  • Work profile separation
  • Personal use allowed
  • Enhanced management

For details, see Set up Intune enrollment of Android Enterprise corporate-owned devices with work profile.

Dedicated Device Enrollment

Kiosk and Single-Purpose Devices

Configuration:

  1. Create dedicated device enrollment profile
  2. Configure kiosk mode
  3. Set device restrictions
  4. Assign apps to device

Use Cases:

  • Digital signage
  • Point of sale
  • Inventory scanning
  • Shared devices

Enrollment Methods

QR Code Enrollment

  1. Generate QR code from enrollment profile
  2. Wipe device or use new device
  3. Scan QR code during setup
  4. Complete enrollment

Token Enrollment

  1. Create enrollment token
  2. Share token with users
  3. Enter token during device setup
  4. Complete enrollment

Google Zero Touch

  1. Link zero-touch account
  2. Configure in zero-touch portal
  3. Devices enroll automatically
  4. No user interaction required

Samsung Knox Mobile Enrollment

  1. Set up KME in Samsung portal
  2. Configure Intune integration
  3. Devices enroll automatically
  4. Supports bulk enrollment

For details, see Enroll your Android Enterprise dedicated, fully managed, or corporate-owned with work profile devices.

Best Practices

1. Choose Appropriate Scenario

  • Fully Managed: Corporate-owned, single-user devices
  • Work Profile: Personal devices (BYOD)
  • Dedicated: Kiosk or shared devices
  • COPE: Corporate devices with personal use

2. Configure Enrollment Profiles

  • Use descriptive profile names
  • Configure device naming templates
  • Set up enrollment-time grouping
  • Document profile purposes

3. Test Enrollment Methods

  • Test QR code enrollment
  • Verify token enrollment
  • Test zero-touch if available
  • Validate user experience

4. Provide User Guidance

  • Create enrollment instructions
  • Provide support resources
  • Guide users through process
  • Document common issues

5. Monitor Enrollment

  • Review enrollment status
  • Track enrollment failures
  • Monitor device compliance
  • Address issues promptly

Troubleshooting

Common Issues

  1. Enrollment Fails

    • Verify Android Enterprise setup
    • Check device compatibility
    • Review enrollment profile
    • Test with different method

  2. Devices Not Appearing

    • Verify enrollment completion
    • Check device check-in
    • Review enrollment logs
    • Verify group assignments

  3. Profile Not Applying

    • Check enrollment profile assignment
    • Verify device compatibility
    • Review profile configuration
    • Test with different device

Additional Resources

Conclusion

Android Enterprise enrollment provides flexible management options for Android devices. By following these best practices:

✅ Choose appropriate enrollment scenario
✅ Configure enrollment profiles properly
✅ Test enrollment methods thoroughly
✅ Provide clear user guidance
✅ Monitor enrollment status regularly

You can successfully enroll Android devices in Intune using the appropriate management scenario for your organization's needs.

Remember: Android Enterprise offers multiple enrollment scenarios. Choose the scenario that best fits your device ownership model and management requirements. Test enrollment methods with pilot devices before broad deployment.