Hello and welcome to Enrollment Options for Android Devices. In this lesson, you’ll be introduced to the many different ways that you can enroll Android devices in Intune. We’ll take a quick, high-level, look at the methods that you see on your screen. We’ll take an introductory look at the Android Enterprise options, at Android Device Manager, and at the Android AOSP options, which, at the time of this lecture recording, are in preview.

However, before we dive into the different enrollment options, it’s important to note that before you can begin managing mobile devices, you have to set the MDM authority to Microsoft Intune. This is done only one time, during the initial setup up of Intune for mobile device management. 

So, as you saw on your screen, you can enroll Android devices in several ways:

Android Enterprise is actually a set of a few different enrollment options that are available. It includes Android Enterprise personally-owned with a work profile, Android Enterprise dedicated, Android Enterprise fully managed, and Android Enterprise corporate-owned with a work profile.

• The Android Enterprise personally-owned with a work profile option is designed for personal devices that need to be granted access to corporate data. Using this option, you can manage work accounts, apps, and data, while keeping personal data on the device separate from work data. It’s also important to note that admins do not control personal settings, nor personal data on the device.

• Android Enterprise dedicated is for single-use corporate-owned devices. In other words, it’s for device providing services like digital signage, ticket printing, or inventory management. By using this enrollment option, you can lock down devices so that only certain apps or web links are available. It also prevents users from adding other apps and from taking other actions on the device.

• Android Enterprise corporate-owned with a work profile is designed for corporate-owned, single user devices that are intended for both corporate use and personal use.

• And then you have the Android Enterprise fully managed option. This option is designed for corporate-owned devices that are assigned to a specific user, and not allowed for personal use. Using this fully managed option, you can manage the entire device, meaning you can enforce policy controls that are no available to personally-owned and corporate-owned work profiles.

• Android device administrator is an option that Google is actually asking people to move off of when they can. So, its lifecycle is probably coming to an end. That said, it can still be used in places where Android Enterprise or Google Mobile Services are unavailable. The URL on your screen shows the countries where Android Enterprise is available:

• And finally, we have Android (AOSP), which refers to the Android Open Source Project. This option is currently in public preview (at least at the time of this lecture creation). It provides a couple enrollment options for devices that aren't integrated with Google Mobile services. It offers the Corporate-owned, user associated devices option, and the Corporate-owned, userless devices option.

• The Corporate-owned, user associated devices option is designed for corporate-owned, single user devices that are to be used exclusively for work, which means no personal use. This option allows you to manage the entire device.

• The Corporate-owned, userless devices option is designed for shared devices that are corporate-owned. In other words, it’s for devices that are used by multiple users. This option also allows you to manage the entire device.

So, now that you’ve been introduced to each of the Android enrollment options that are available, we can take a more detailed look at the setup of the MDM authority and a more detailed look at each of the Android enrollment options we just talked about.