Corporate-owned dedicated device enrollment for Android

Enrollment for Android Enterprise dedicated devices - Kiosk

COD Dedicated Device (Default) - Kiosk mode.

Prerequisites:

  1. Android OS version 8.0 or Later
  2. Device must have GMS available and must be able to connect to GMS.
  3. Link your managed google play account for Intune.
  4. To enroll COD dedicated device, the device will be formatted or new device.

Step by Step Configuration

Dedicated device Token Generation


Step 1

Endpoint.microsoft.com

Step 2

Devices > Android > Android Enrollment > Corporate-owned dedicated devices > Create profile > Token type - Corporate-owned dedicated device (default) > Give a Token expiration date > next to create a profile.

Step 3

Click the created profile > Click Token > Here you can check the Token and QR code.

Dynamic Group Creation


Reason for dynamic group creation: User does not enroll their device using User ID and Password, here we enroll the device directly. In the portal, Only the device name is visible.


Step 1

Groups > New group > Group type - Security > Membership type - Dynamic device > Add Dynamic query > Property ( Enablementprofilename) - Operator (Equals) - Value (COD dedicated device)

Step 2

Configure all these settings and create the group.


Create Configuration profile for kiosk device

Step 1

Devices > Android > Configuration profiles > Create profile > Platform as Android Enterprise > Profile type as Device restriction > Then follow the steps in Picture.

Step 2

Step 3


Step 4


Step 5

Must add the Managed Home screen for kiosk device.

Step 6

If you need any other settings to configure, please check the below settings and add a dynamic group here then create a policy.


Application deployment



Step 1

Click Apps > Android > Add the application by Managed google play store > Assign the Dynamic group.

Step 2

 


These are the steps we want to configure in the portal.

Steps for Mobile Configuration using QR code scanning method


Step 1

Take the new device or fully formatted device.

Step 2

Tap 5 or 8 times in the Screen, suddenly camera will turn on.

Step 3

Scan the QR code in the portal then it asks the basic steps to follow.

Step 4

Give next and continue to complete the process.

Step 5

After the completion, which are the deployed by the admin that apps only visible in the screen other than that, there is no application in the device.


Steps for Mobile Configuration using Token method


Step 1

Take the new device or fully formatted device.

Step 2

Choose the language and start setup the device.

Step 3

Before entering the Google account sign in, enter afw#setup in the Username column.

Step 4

After the entry of afw#setup, device will redirect to the token validation or QR scanning page to enter the Token code.

Step 5

Give next and continue to complete the process.

Step 6

After the completion, which are the Applications deployed by the admin that apps only visible in the screen other than that, there is no application in the device.


Click here to check the Dedicated device enrollment document by Microsoft. (For your reference)

This is my first blog, if the attached pictures are not clear I will insert the high-quality pictures in the upcoming blogs.


Comments