Android Device Management via Microsoft Intune

Microsoft Intune allows for the management of Android devices. This includes managing the device lifecycle including device enrollment, configuration, software deployment, and remote commands such as wipe or lock. IT administrators can email euc-help@mit.edu to get set up with this service.

Device Enrollment

• Devices are enrolled via a custom QR code.
• Reset the device via factory settings. On the first setup screen tap 7 times and the camera will appear.
• Follow the enrollment steps on your device. Depending on configuration an end user may need to authenticate multiple times.

Console Access

• Log in at https://endpoint.microsoft.com/ with your kerberos account.

Device Inventory and Remote Commands

• Click Devices -> Android -> Android Devices
  • You can then individually click on devices.
  • Select your desired remote command:
  • 
  • You can also rename your device once enrolled. Click on the individual device, then Properties on the left.
    • Type in the preferred device name and click "rename." The console will update in about 10 minutes.

Device Configuration via Configuration Profiles

• Devices can be locked down via configuration profiles. You can make changes such as blocking use of camera / bluetooth. 
• Click Devices -> Android -> Configuration Profiles
  • Create Profile
  • Select "Android Device Administrator" and "Device Restrictions."
  • Configure as desired.
  • Apply your scope tag and assign to users or devices.

Software deployment

• Due to limitations in Intune you cannot purchase or assign apps. Request the desired app and deployment to EUC and they will take care of it. Please note Android / Intune only supports free apps, you cannot purchase paid software.

Please email euc-help@mit.edu to get set up with this service offering or to answer any questions.