A Microsoft 365 Endpoint Administrator is configuring a new set of shared corporate-owned Android Enterprise dedicated devices (kiosk mode). These devices will be used by multiple users in shifts and should only allow access to a single, specific application. Users should not be able to access device settings, notifications, or the home screen. Which Android Enterprise management scenario and Intune profile type should be chosen?
- AAndroid Enterprise dedicated devices with a Device Restrictions profile and a Kiosk profile.
- BAndroid Enterprise fully managed with an App Configuration policy.
- CAndroid Enterprise corporate-owned work profile with an App Protection policy.
- DAndroid Enterprise personally-owned work profile with a Device Restrictions profile.
Show answer & explanationAnswer & explanation
Correct answer: A. Android Enterprise dedicated devices with a Device Restrictions profile and a Kiosk profile.
For shared corporate-owned devices in kiosk mode, 'Android Enterprise dedicated devices' is the correct management scenario. To restrict to a single app and disable system UI, a Device Restrictions profile combined with a Kiosk profile (which is part of Device Restrictions for dedicated devices) is necessary to lock down the device as required.
Why the other options are wrong
- B. Fully managed is correct, but an App Configuration policy manages app-specific settings, not device lockdown for kiosk mode.
- C. Corporate-owned work profile is for single-user corporate devices, and App Protection policies protect app data, not device lockdown.
- D. Personally-owned work profile is for BYOD, not corporate-owned shared devices in kiosk mode.
Android Enterprise Dedicated Devices (Kiosk)
Android Enterprise dedicated devices, managed by Intune, are corporate-owned devices used for a single purpose (e.g., kiosk, digital signage). They can be configured in kiosk mode to lock down the device to one or more specific applications, restricting user access to other device functions.
- Ideal for shared, single-purpose devices.
- Achieved through 'Dedicated devices' enrollment.
- Kiosk mode configured via device restriction profiles.
Memory trick: Dedicated Devices: For the Single-App Kiosk Life.