Microsoft 365 Endpoint AdministratorManage identity and compliance (10-15%)Medium
A company policy requires that all corporate-owned Android devices must have a work profile for separating corporate and personal data. Additionally, all apps installed within the work profile must be approved by IT. Which Intune enrollment profile should be used for these devices?
- AAndroid Enterprise (Fully managed)
- BAndroid device administrator
- CAndroid Enterprise (Dedicated devices)
- DAndroid Enterprise (Work profile)
Show answer & explanationAnswer & explanation
Correct answer: D. Android Enterprise (Work profile)
Android Enterprise (Work profile) enrollment is specifically designed for corporate-owned devices where personal use is allowed but corporate data and apps need to be isolated and managed within a separate work profile.
Why the other options are wrong
- A. Fully managed devices are for corporate-owned, single-user devices with no personal use, where IT manages the entire device.
- B. Android device administrator is a legacy management method with limited capabilities compared to Android Enterprise and is not recommended.
- C. Dedicated devices are for corporate-owned, single-purpose devices (e.g., kiosks, digital signage) with very limited user interaction.
Android Enterprise (Work profile)
An Intune enrollment method for corporate-owned Android devices that creates a separate work profile to isolate and manage corporate apps and data, while allowing personal use of the device.
- Separates corporate and personal data.
- IT manages only the work profile.
- Suitable for corporate-owned devices with personal use.
Memory trick: Work Profile keeps your work life separate from your personal life on your phone.