Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium
A Microsoft 365 Endpoint Administrator is configuring Microsoft Intune for a new set of shared corporate-owned Android Enterprise dedicated devices (kiosks). These devices will only run a single application and must prevent users from accessing settings, notifications, or other apps. Which enrollment profile type should be chosen in Intune for these devices?
- AAndroid device administrator
- BAndroid Enterprise dedicated devices
- CAndroid Enterprise fully managed
- DAndroid Enterprise corporate-owned work profile
Show answer & explanationAnswer & explanation
Correct answer: B. Android Enterprise dedicated devices
Android Enterprise dedicated devices (formerly known as COSU - Corporate-Owned, Single-Use) are specifically designed for kiosk, digital signage, or task-specific scenarios, where devices are locked down to a single app or a limited set of apps, preventing user access to general device functions.
Why the other options are wrong
- A. Android device administrator is a legacy management method with limited features and is generally not recommended for new deployments of corporate-owned devices.
- C. Fully managed devices are for corporate-owned devices used by a single user, providing full device management but not necessarily locking down to a single app mode without further configuration.
- D. Corporate-owned work profile is for corporate-owned devices that also allow personal use, keeping work and personal data separate but not restricting device functionality to a single app.
Android Enterprise Dedicated Devices
An Android Enterprise management solution in Intune for corporate-owned, single-purpose devices (kiosks, digital signage) that are locked down to a specific set of applications and prevent access to general device functions.
- Ideal for kiosk, shared, or task-specific scenarios.
- Devices are corporate-owned and have no user affinity.
- Can be configured to run a single app or a limited set of apps.
- Prevents access to settings, notifications, and other apps.
Memory trick: Dedicated devices are for specific, locked-down tasks.