Summary

This article explains how to enrol a school-owned Android mobile phone into Microsoft Intune using Android Enterprise – Corporate‑owned dedicated device mode. This mode is recommended where devices may be reassigned to different users, as it is simpler to configure and manage.


Mode

For mobile phones that may be reused by different staff members, Dedicated Device Mode should be used.
This is the standard configuration currently used as it is significantly easier to manage and avoids user‑specific dependencies.

How to Enrol the Device

1. Start device setup

  1. Power on the Android phone.
  2. Proceed through the initial setup screens until prompted to sign in to Google.

2. Trigger Android Enterprise setup

  1. At the Google sign-in screen, tap the Email address field.
  2. Enter the following exactly:
afw#setup
  1. Continue through the setup by selecting Next as prompted.

3. Scan the Intune QR code

  1. When prompted, the device will request a QR code.
  2. On a PC, go to the Intune admin portal and navigate to the Android dedicated device enrollment profile.
  3. Select the profile named:

TAW300 Mobile Phones

  1. Choose:

    • Token
    • Show token

  2. A QR code will be displayed.

  3. Use the phone to scan the QR code.

4. Complete enrollment

  • The device will automatically:
    • Enrol into Microsoft Intune
    • Apply configuration policies
    • Install assigned apps

Allow several minutes for setup to complete.

App Management

  • Android apps should be assigned to the Entra ID group:

TAW300 Intune Android Devices - Mobile Phones

  • Apps already imported into Intune are immediately available for assignment.
  • If a required app is not listed:
    • Log a call with ICT Services
    • Provide a Play Store link to the app
    • ICT Services will add it to Intune

Configuration Changes

  • Device restrictions and behaviour are controlled by the configuration profile:

TAW300 Android Enterprise Device Restrictions - Mobile Phones

  • Only ICT Services should make changes to this profile.

Notes

  • Dedicated Device Mode does not rely on user sign-in.
  • Devices can be factory reset and re-enrolled for reuse.
  • App installation and configuration may take a few minutes after enrollment.
  • The device must have internet access during setup.