Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium
A Microsoft 365 Endpoint Administrator is managing a fleet of corporate-owned Android Enterprise devices set up in 'fully managed' mode. The organization requires that users are prevented from changing system settings, such as Wi-Fi, Bluetooth, or screen timeout, to maintain a consistent and secure environment. Which Intune configuration profile setting should the administrator use?
- AUnder 'Device compliance', create a policy requiring a device passcode.
- BUnder 'App protection policies', configure data transfer restrictions.
- CUnder 'Device features', enable 'Managed Home Screen' and configure allowed apps.
- DUnder 'Device restrictions', configure 'Allow access to device features' and disable specific toggles.
Show answer & explanationAnswer & explanation
Correct answer: D. Under 'Device restrictions', configure 'Allow access to device features' and disable specific toggles.
For Android Enterprise fully managed devices, 'Device restrictions' profiles allow administrators to granularly control access to various system settings and device features, including Wi-Fi, Bluetooth, and screen timeout, by disabling specific toggles.
Why the other options are wrong
- A. Device compliance policies assess the device's state but do not prevent users from changing settings; they flag non-compliant devices.
- B. App protection policies focus on data within apps and app interactions, not direct control over device system settings.
- C. Managed Home Screen creates a dedicated device (kiosk) experience, which might be overkill if the goal is only to restrict system settings while still allowing full device use.
Android Enterprise Device Restrictions
Intune configuration profiles for Android Enterprise that allow administrators to control various aspects of device functionality, including access to hardware features, system settings, and app behavior.
- Applies to fully managed, dedicated, and corporate-owned work profile devices.
- Granular control over settings like Wi-Fi, Bluetooth, camera, app installation.
- Helps enforce corporate security and usability policies.
Memory trick: Device Restrictions are the 'master switches' for Android settings.