I'm assigning a few Android devices to users and I've set up an enrollment profile in Intune. My plan is to scan the QR code and go through the initial setup process with the users, having them sign into the Intune app to complete the setup. I've also created a configuration policy to restrict users from factory resetting the devices. My concern is, if they manage to reset the devices, will these devices still recognize they're linked to my Intune tenant and prevent the users from setting them up as their personal devices? Or do I need to get them managed through something like Android Zero Touch? I know that Android Zero Touch requires a zero-touch account created by an authorized reseller, but since I bought these devices directly and not through a reseller, I'm wondering if that's mandatory?
3 Answers
If your devices are Samsung, you can utilize Knox Mobile Enrollment. Keep in mind that for Google Zero Touch, you must have your devices added by a certified seller linked to your Zero Touch setup. Unfortunately, unlike Apple and Samsung, there's no manual way to add devices to Zero Touch after purchase.
Yes, you'll need Zero Touch for true ownership and seamless out-of-box enrollment. It's necessary that the devices be purchased through an authorized reseller for enrollment. Otherwise, if someone factory resets the device, it can become theirs easily.
What brand are your devices? Samsung has Knox, which is great for securing devices for business use. Most suppliers can add your devices to the Knox list, so check with them. Just be careful, as the Knox name is used for different products, so don’t confuse it with their other MDM solutions.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures