Overview
This knowledge base article will show the steps on how to create App Configuration Profiles for managed Android Enterprise devices.
The breakdown of this article will cover:
- App Configuration: Corporate-Owned Dedicated Devices (COSU): Managed Home Screen
- App Configuration: Corporate-owned, fully managed user devices and Corporate-owned devices with work profile
For Corporate-Owned Dedicated devices (COSU)
1. By navigating to Microsoft Intune portal, then select Apps then under Policy, select app configuration policies then select Add then Managed devices.
2. Under Basics, enter and select the following:
Name: Corporate-owned dedicated devices: Managed Home Screen
Description: Corporate-owned dedicated devices: Managed Home Screen
Device enrollment type: Managed devices
Platform: Android Enterprise
Profile Type: Fully Managed, Dedicated, and Corporate-Owned Work Profile Only.
Targeted app: Managed Home Screen.
Then select Next.
3. Under Settings, select the following:
Configuration settings format: Use configuration designer
Then select Add then on the right hand side, search for the following:
Set app folder icon
Set screen orientation
Application order enabled
Lock Home Screen
Auto Sign-out time
Enable Auto Sign-out
Sign in type
Enable sign in.
MAX inactive time outside MHS
Show Managed Setting
Show Wi-Fi setting
Enable notifications badge
View more for Configure the Managed Home Screen settings.
Update the following configuration value as required.
4. Under Assignments, select the required groups then select Next.
5. Under Review + create, review the settings and select Create.
For Corporate-owned, fully managed users devices (COBO) and with Corporate-owned devices with work profiles (COPE)
1. By navigating to Microsoft Intune portal, then select Apps then under Policy, select app configuration policies then select Add then Managed devices.
2. Under Basics, enter and select the following:
Name: Android Enterprise Corporate Owned: Microsoft Outlook
Description: Android Enterprise Corporate Owned: Microsoft Outlook
Device enrollment type: Managed devices
Platform: Android Enterprise
Profile Type: Fully Managed, Dedicated, and Corporate-Owned Work Profile Only.
Targeted app: Microsoft Outlook
Then select Next.
3. Under Settings, select the following:
Configuration settings format: Use configuration designer
Then configure the following to your desired options.
Under S/MIME settings, you can configure to what you the required changes. View S/MIME for Outlook for iOS and Android in Exchange Online for more information.
4. Under Assignments, select group: Corporate-owned, fully managed user devices then select Next.
5. Under Review + create, review the settings and select Create.
6. To add other App Configuration policies, navigate to Microsoft Intune portal, then select Apps then under Policy, select app configuration policies then select Add then Managed devices. Enter the following name like:
Name: Android Enterprise Corporate Owned: Microsoft OneDrive
Description: Android Enterprise Corporate Owned: Microsoft OneDrive
Device enrollment type: Managed devices
Platform: Android Enterprise
Profile Type: Fully Managed, Dedicated, and Corporate-Owned Work Profile Only.
Targeted app: Microsoft OneDrive
Under settings, you can select Enter JSON data where the following.
{
"kind": "androidenterprise#managedConfiguration",
"productId": "app:com.microsoft.skydrive",
"managedProperty": [
{
"key": "com.microsoft.intune.mam.AllowedAccountUPNs",
"valueString": ""
}
]
}
Select Next.
7. Under Assignments, select group: Corporate-owned, fully managed user devices then select Next.
8. Under Review + create, review the settings and select Create.
