Enroll Android Devices Using Android Enterprise
Link Google Play Account to Intune
Before we can enroll Android devices, we need to connect to Google Play Store.
There is no need for a developer account to connect to Intune.
1. On https://intune.microsoft.com/, go to Devices.
2. Under Android, click on Android enrollment and select Managed Google Play.
3. Check the “I agree” checkbox and click on Launch Google to connect now.
4. Follow the prompts and sign in using a Google account.
5. Green Status will be obtained once signed in and connected.
Enrollment Profile
There are several enrollment profiles on Intune. In this example, we use Corporate-owned, fully managed user devices.
Warning: To enroll as a Corporate-owned, fully managed profile, devices must reset.
1. Click on Corporate-owned, fully managed user devices.
2. On the next page, click on Create Profile.
3. Type in the device name to be enrolled with the proper description.
a. After creating a profile, a Token will be received to enroll a device.
b. On your Android device, perform a factory reset.
c. On the Google sign-in screen, in the email or phone, type “afw#setup”.
d. Enter the code or scan the QR code to enroll the device.
Note: For personally-owned devices with work profiles, you can enroll by downloading the MS Company Portal (Available on Play Stores) and logging into your work account.
For more information, visit Enroll device.
Deploy the EKW app using Intune
1. In the https://intune.microsoft.com/, click Apps and select Android.
2. Click on the Add button.
3. Click on the Managed Google Play app.
4. Search for Epicor Kinetic Warehouse.
5. Click on Select and Sync.
6. Once synced, Epicor Kinetic Warehouse will be included in the list.
For more information on App deployment, please visit https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work#add-a-managed-google-play-store-app-directly-in-the-microsoft-intune-admin-center
Creating Group in Intune
1. In the https://intune.microsoft.com/, click Apps and select Android.
Go to Group and select New Group.
3. Under the Group Type, in the drop-down, select either Security or Microsoft 365.
4. Then select “No members selected” to add users or devices.
We can assign enrolled devices in the Security group while Microsoft 365 can only assign to users.
Intune supports both assignments.
More information: https://learn.microsoft.com/en-us/mem/intune/apps/apps-deploy
5. Search for users or devices to add to the group.
6. Click Create.
Application Assignment
Updates for the app can be postponed for 90 days for certain groups of users or devices using Intune.
1. In the Microsoft Intune Admin Center, click on Apps.
2. Click on Android and select the EKW.
EKW is managed by the Google Play Store.
3. In the Epicor Kinetic Warehouse(EKW) app, select Properties and under Assignments, click on Edit.
Assume that we have two groups of users, the nyuth and the Security Team. We want the security team to get an update as soon as possible and postpone the update to nyuth team until the security team completes testing. We can do that by updating the priority.
4. Click on Default to change the update priority.
5. Change the update priority for nyuth team to Postponed.
6. Meanwhile, change priority for the security team to High Priority.
7. Refer to the screenshot.
8. Click Save.
When the EKW release a new version to the Play Store, the security team will get an update. If we want the nyuth team to get the latest update after testing, we need to change the update priority from Postponed to High Priority.
Warning: Make sure we change the nyuth team back to Postponed to avoid auto-update when the new version gets released.
Note: High Priority means the devices will get the update soon after the new release becomes available on the Play Store, while Postponed means the devices will get the update after 90 days of the released date. Unfortunately, this 90 days cannot be changed.