Microsoft 365 Endpoint AdministratorManage identity and compliance (10-15%)Hard
A global organization uses Microsoft Intune to manage its mobile devices. They need to ensure that all corporate-owned Android devices are enrolled in a way that provides full management capabilities, including app deployment, device restrictions, and kiosk mode functionality for specific use cases. Users should not be able to add personal Google accounts to these devices. Which Android Enterprise enrollment profile should be used?
- AAndroid Enterprise (Dedicated devices)
- BAndroid device administrator
- CAndroid Enterprise (Work profile)
- DAndroid Enterprise (Fully managed)
Show answer & explanationAnswer & explanation
Correct answer: D. Android Enterprise (Fully managed)
Android Enterprise (Fully managed) enrollment is designed for corporate-owned devices that require full management and control, including the ability to prevent personal Google accounts and enable advanced features like kiosk mode. This profile provides the most comprehensive management capabilities.
Why the other options are wrong
- A. Dedicated devices (sometimes called COSU - Corporate Owned, Single Use) are for single-purpose devices, which might be part of the requirement but 'Fully managed' is the overarching profile for full control.
- B. Android device administrator is a legacy management method with limited capabilities compared to Android Enterprise and is being deprecated by Google.
- C. Work profile enrollment is for personally-owned devices (BYOD) to separate work and personal data, and it allows personal Google accounts.
Android Enterprise Fully Managed
Android Enterprise Fully Managed enrollment is for corporate-owned devices that are exclusively used for work. It provides comprehensive management, allowing administrators to control the entire device and restrict personal use.
- For corporate-owned devices only.
- Full device management and control.
- Can restrict personal Google accounts.
- Supports advanced features like kiosk mode.
Memory trick: To be 'Fully Managed' is like having the keys to the entire corporate Android castle, no personal guests allowed.