Intune Device Enrollment | Android Admin Guide

Table of Contents
1. Android Enterprise – User devices .............................................................................. 3
1.1. Supported Device Types ................................................................................... 3
1.2. Android for Work Device .................................................................................. 3
1.3. Dedicated Device (Zebra Scanner) ....................................................................... 4
1.4. Policy and Application Deployment ...................................................................... 4
2. Azure MFA.......................................................................................................... 6

Intune Device Enrollment | Android Admin Guide Page 2 of 6

1. Android Enterprise – User devices
1.1. Supported Device Types
There are currently two device types that are supported for Android Enterprise devices:
1.1.1. Personally-owned devices with work profile
1.1.2. Corporate-owned dedicated devices

Personally owned devices use the Work Profile method.

Zebra TC scanner devices should be enrolled using the Dedicated Device enrollment
method.

1.2. Android for Work Device

1.2.1. The android device serial number should be uploaded to the Intune MDM service as
a corporate device identifier
1.2.2. Navigate to the Intune portal at https://endpoint.microsoft.com
1.2.3. Browse to Devices > Enroll Devices > Corporate Device Identifiers (direct link here)
1.2.4. Manually add your device Serial Number e.g.

1.2.5. Assist the end user with setting up their mobile device like a regular android
phone including a personal Google account that is linked to their Barrick email
address
1.2.5.1. The user should skip Google account creation during the Android
setup wizard
1.2.5.2. Instead, launch the Chrome browser app, and search for “Google
Account”
1.2.5.3. Select the option to create an account (select “For Myself” if
you’re prompted)
1.2.5.4. Enter your first name and last name
1.2.5.5. Select the hyperlink to “Use my current email address”, and
enter your Barrick email address e.g. John.Smith@barrick.com

Intune Device Enrollment | Android Admin Guide Page 3 of 6

 1.2.5.6. Enter the verification code that you should receive in your
Barrick inbox and complete the Google account setup wizard
1.2.6. Download and install the Intune Company Portal app from the Google Play Store. A
link is available here
1.2.7. After launching the Company Portal app, the user will need to sign-in with their
Office 365 credentials, at which point they should follow the on-screen steps to
configure a Work Profile

1.3. Dedicated Device (Zebra Scanner)

1.3.1. On a newly unboxed or newly wiped device, tap the screen multiple times
(approximately 10 times) to open a QR reader using the devices camera (Android 7
and 8 devices will prompt you to install a QR reader)
1.3.2. You’ll then need to scan the QR code listed under the Intune admin portal under
Devices > Enroll devices > Android Enrollment > Corporate-owned dedicated
devices
1.3.3. Follow the on-screen instructions to complete the Intune enrollment process.
General guidance from Microsoft is available here

1.4. Policy and Application Deployment

1.4.1. Once the device has been enrolled into the Intune MDM service, all applicable
policies and applications will be automatically deployed to the device and user
1.4.2. By navigating to the device, deployment results can be viewed such as Device
Configurations. Clicking into a profile will surface details around the status of each
setting within the profile, and from which profile a setting was applied from

Intune Device Enrollment | Android Admin Guide Page 4 of 6

1.4.3. Application installation statuses can be viewed under the Managed Apps area
Note that the Microsoft Authenticator and Microsoft Outlook applications will be
installed automatically

1.4.4. Clicking into each application will surface additional details

Intune Device Enrollment | Android Admin Guide Page 5 of 6

2. Azure MFA
Users with Azure MFA already configured with the Microsoft Authenticator app will need to have
their MFA registration reset, so that it can be setup on their mobile device.
2.1. Navigate to the Users blade in the Azure portal, a link is available here
2.2. After selecting the user account, navigate to Authentication methods and select the
Require re-register MFA button

2.3. The user will then be prompted to setup MFA during their next Office 365 login attempt

Intune Device Enrollment | Android Admin Guide Page 6 of 6