Configure the Microsoft Managed Home App - Microsoft Intune (2023)

  • Article
  • 25 minutes to read

Managed Home is the app used for enterprise-owned dedicated Android devices enrolled through Intune and running in multi-app kiosk mode. For these devices, the managed home screen acts as a launcher for other approved apps that run on it. The managed home screen gives IT admins the ability to customize their devices and limit the features the end user can access. For more details seeHow to configure Microsoft managed splash screen on dedicated devices in multi-app kiosk mode.

When to configure the Microsoft Managed Home screen app

First, make sure your devices are compatible. Intune supports dedicated Android Enterprise device enrollment for Android devices running OS version 8.0 and later that reliably connect to Google mobile services. Likewise, the managed home screen is supported on Android devices running OS version 8.0 and later.

If the settings are available to you through device settings, then you usually configure the settings there. This saves time, minimizes errors, and provides a better Intune support experience. However, some of the managed home screen settings are only available throughApplication configuration policiesDashboard in the Intune console. Use this document to learn how to configure the various settings using the configuration designer or a JSON script. Also use this document to learn which home screen managed settings are available in device settings. you can also seeSet up dedicated devicesfor a complete list of settings available atdevice configurationaffecting the managed splash screen.

If you use app settings go toMicrosoft Endpoint Manager admin centerand selectforms>Application configuration policies. Add a configuration policy formanaged devicesin another placeAndroidand choosemanaged splash screenas a related app. Chooseconfiguration settingsto configure the various settings available for the managed home screen.

Choosing a configuration definition format

There are two methods you can use to configure managed home screen configuration settings:

  • configuration designerlets you configure settings with an easy-to-use interface that lets you turn features on or off and set values. In this method, there are some configuration keys disabled with value typeset of sets. These configuration keys can only be configured by entering JSON data.
  • json datalets you set all possible configuration keys using a JSON script.

When adding properties with the Configuration Designer, you can automatically convert those properties to JSON by selectingEnter the JSON datadoConfiguration settings formatDropdown list.

Configure the Microsoft Managed Home App - Microsoft Intune (1)

(Video) Microsoft Intune Suite - First Look

Using the configuration designer

The Configuration Designer allows you to select prepopulated configurations and their associated values.

Configure the Microsoft Managed Home App - Microsoft Intune (2)

The following table lists the available managed home screen configuration keys, value types, default values, and descriptions. The description provides expected device behavior based on the selected values. Enter the configuration keyset of setsare disabled in the configuration designer and are described in more detail inEnter the JSON datasection of this document.

Settings for customizing apps, folders, and the general appearance of the Managed Home screen:

Test-Configurationvalue typestandard valueDescriptionAvailable in device settings
Set whitelisted appsPackageArrayverEnter the JSON datasection of this document.Allows you to set the apps visible on the home screen among the apps installed on the device. You can define apps by entering the name of the app package you want to see. For example,com.microsoft.emmxwould make the settings accessible from the home screen. Apps whitelisted in this section must already be installed on the device to be visible on the home screen.✔️
Set pinned web linksPackageArrayverEnter the JSON datasection of this document.Allows you to pin websites as quick launch icons on your home screen. With this setting, you can define the URL and add it to the home screen so that the end user can launch it with a single browser tap. Note: We recommend that you create, assign, and approve managed Google Play web links for your devices. If you do, they will be treated as allowed apps.✔️
Create a managed folder to group appsPackageArrayverEnter the JSON datasection of this document.It lets you create and name folders and group apps within those folders. End users cannot move folders, rename folders, or move apps within folders. Folders are displayed in the order they were created, and apps in folders are displayed alphabetically. Note: Any apps that you want to group into folders must be assigned to the device and added to the Managed Home screen if needed.✔️
set grid sizelineAutoLets you set the grid size for apps to be placed on the managed home screen. You can set the number of rows and columns in the app to define the grid size in the following format:columns rows. When setting the grid size, the maximum number of apps that appear in a row on the home screen is the number of rows you set. The maximum number of apps that appear in a column on the Home screen is the number of columns you specify.✔️
lock home screenboolCERTAINLYRemoves the end user's ability to move around app icons on the home screen. Enabling this setting button will lock the app icons on the home screen. End users cannot drag and drop to different grid positions on the home screen. When set to false, end users can browse application icons and web links on the managed home screen.✔️
Activated app requestboolINCORRECTIf you change this setting to True, you can define the order of apps, web links, and folders on the managed home screen. Upon activation, set the order with app_order.✔️
application requestPackageArrayverEnter the JSON datasection of this document.Lets you set the order of apps, web links, and folders on the managed home screen. To use this setting, Lock Home Screen must be on, Set Grid Size set, and App Order Enabled set to True.✔️
Applications in the folder are sorted by nameboolCERTAINLYFalse allows items in a folder to appear in the specified order. Otherwise, they appear in the folder alphabetically.
Set app icon sizeall2Lets you set the icon size of apps that appear on the home screen. You can select the following values ​​for different sizes in this setting: 0 (smallest), 1 (small), 2 (normal), 3 (large), and 4 (largest).✔️
Set application folder iconall0Allows you to define the appearance of application folders on the home screen. You can choose the appearance from the following values: Dark square (0); dark circles (1); light square (2); circle of light (3).✔️
Adjust screen orientationall1Allows you to set the home screen orientation to portrait or landscape, or allows automatic rotation. You can set the orientation by entering the values ​​1 (for portrait), 2 (for landscape), 3 (for auto rotation).✔️
Set device wallpaperlinePatternLets you set a wallpaper of your choice. Enter the URL of the image you want to set as your wallpaper.✔️
Set theme colorlineinfernoSpecify whether the managed splash screen should run in "light" or "dark" mode.
Prevent browser webpages from being pinned to MHSboolINCORRECTPut this constraint onRIGHTto prevent users from pinning web pages from any browser to the managed home screen.✔️

Settings for Device Peripherals and Home Screen Managed Settings:

Test-Configurationvalue typestandard valueDescriptionAvailable in device settings
view managed settingsboolCERTAINLYManaged Settings is a managed home screen app that only appears if you have configured quick access settings. These settings may include viewing Wi-Fi settings, viewing Bluetooth settings, viewing volume settings, and viewing flashlight settings. You can also access these settings by swiping down on the screen. Set this key to False to hide the Managed Settings app and allow end users to swipe down to access settings.✔️
Show WiFi settingsboolINCORRECTChanging this setting to True allows the end user to connect to different Wi-Fi networks.✔️
Enable Wi-Fi WhitelistingboolINCORRECTTrue populate the WiFi whitelist key to limit the WiFi networks shown in the managed home screen. Set to False to show all possible available Wi-Fi networks that the device has detected. This setting is only relevant when Show Wi-Fi settings is set to True and the Wi-Fi whitelist is populated.✔️
Wi-Fi whitelistPackageArrayverEnter the JSON datasection of this document.Lets you list all the SSIDs of Wi-Fi networks that you want the device to display on the managed home screen. This list is only relevant when Show Wi-Fi Settings and Enable Wi-Fi Whitelist are set to True. If one of the values ​​is set to False, it is not necessary to change this setting.✔️
Show Bluetooth settingsboolINCORRECTChanging this setting to True allows the end user to turn Bluetooth on or off and connect to various Bluetooth enabled devices.✔️
Show volume settingboolINCORRECTChanging this setting to True gives the end user access to a volume slider to adjust the media volume.✔️
Show flashlight settingsboolINCORRECTChanging this setting to True allows the end user to turn the device's flashlight on or off. If your device doesn't support Flashlight, this setting won't appear, even if it's set to True.✔️
View device information settingsboolINCORRECTTrue allows end users to quickly access device information in the Managed Settings app or by swiping down. Accessible information includes device manufacturer, model, and serial number for OS 8.✔️
Show device names in MHSboolINCORRECTChange this setting to True to easily view the Device Name property from the Intune portal in the Managed Settings app or by swiping downView device information settingsis set to True. Be sure to also include the device name string property, which Intune will automatically fill in with the correct value.
View the serial number of all supported OS versions on MHSselection{{Serial number}}Make sure the device_serial_number application preference is set to show {{SerialNumber}}View device information settingsis set to True. Intune automatically populates this value with the correct value.
Enable virtual home buttonboolINCORRECTTrue allows end users to access a managed home screen home button that takes the user back to the managed home screen from the current task they are on.✔️
Virtual start button typelineincreasingUse swipe_up to access the home button with a swipe up gesture. Use Float to access a fixed, persistent home button that the end user can move around the screen.✔️
Enable notification badgeboolINCORRECTEnable the app icon notification badge which shows the number of new notifications in the app. If you enable this setting, end users will see notification badges for apps with unread notifications. If you leave this preference key disabled, the end user will not see notifications assigned to apps that may contain unread notifications.✔️
Battery and signal strength indicator barboolCERTAINLYChanging this setting to True displays the battery indicator bar and signal strength.

Important

The Managed Home Screen app has been updated at the API level to better meet the requirements of the Google Play Store. There have been some changes to how Wi-Fi settings work on the managed home screen. The changes include the following:

  • The device's Wi-Fi connection cannot be changed (enabled or disabled). Users can switch between networks, but cannot turn Wi-Fi on or off.
  • No automatic connection to a configured Wi-Fi network that requires a password the first time. The configured network is automatically connected after entering the password for the first time.

On Android devices running OS 11, when an end user tries to connect to a network through the Managed Home Screen app, they are prompted for a consent popup. This popup comes from the Android platform and is not specific to the Managed Home Screen app. Additionally, if an end user attempts to connect to a password protected network through the Managed Home Screen application, they will be prompted to enter the password. Even if the password is correct, the network will only change if the device is not connected to a network. Devices that are already connected to a stable network cannot connect to a password protected network using the Managed Home Screen app.

(Video) Microsoft Endpoint Manager Intune Configuration Profiles Part VIII KIOSK mode

On Android devices running OS 10, when an end user tries to connect to a network through the Managed Home Screen app, notifications ask for their consent. Due to this message, OS 10 users must have access to the status bar and notifications to complete the consent step. Use theGeneral settings for dedicated devicesto make the status bar and notifications available to your end users, if applicable. Additionally, if an end user attempts to connect to a password protected network through the Managed Home Screen application, they will be prompted to enter the password. Even if the password is correct, the network will only change if the device is not yet connected to a stable network.

Settings for a custom screensaver:

Test-Configurationvalue typestandard valueDescriptionAvailable in device settings
enable screensaverboolINCORRECTTo enable or disable screensaver mode. When set to true, you can set screen_saver_image, screen_saver_show_time, inactive_time_to_show_screen_saver and media_detect_screen_saver.✔️
screensaver imagelineSet the screensaver image URL. If no URL is defined, devices will display the default screensaver image when the screensaver is activated. The default image shows the managed home screen application icon.✔️
Screen saver display timeall0Provides the ability to set the amount of time in seconds that the device will display the screensaver in screensaver mode. If set to 0, the screensaver will remain in screensaver mode indefinitely until the device wakes up.✔️
Idle time to activate screensaverall30The number of seconds the device is idle before the screen saver activates. If set to 0, the device will never enter screen saver mode.✔️
Media detection before screen saver displayboolCERTAINLYChoose whether the device's screen should display the screensaver when audio/video is playing on the device. If set to true, the device will not play any audio/video regardless of the value in inactive_time_to_show_scree_saver. When set to false, the device screen will display the screensaver based on the value set in inactive_time_to_show_screen_saver.✔️

Use

The managed home screen launches the screensaver every time the lock screen is displayed. When system lock screen timeout is longer thanScreen saver display timethen the screen saver will be displayed until the lock screen appears. When system lock screen timeout is less thanIdle time to activate screensaverThe screensaver will appear as soon as the device's lock screen appears.

Settings to support device troubleshooting:

Test-Configurationvalue typestandard valueDescriptionAvailable in device settings
Exit password lock task modelineEnter a 4- to 6-digit code to temporarily exit Task Lock mode for troubleshooting.✔️
Enable debug menu for easy accessboolINCORRECTChange this setting to True to access the debug menu in the Managed Settings app or by swiping down from the managed home screen. The debug menu is currently the place to exit kiosk mode and is accessed by clicking the back button about 15 times. Leave this setting set to False so that the debug menu entry point is only accessible via the back button.✔️
Enable Max Idle Time Outside MHSboolINCORRECTChange this setting to True to automatically restart the managed splash screen after a period of inactivity. The timer counts idle time only and, if set, will reset whenever the user interacts with the device outside of the managed home screen. UseMAXIMUM downtime outside the MHSto set the idle timer. By default, this setting is disabled. This setting can only be used ifExit password lock task modeIt was set.
MAXIMUM downtime outside the MHSall180Set the maximum idle time in seconds that a user can spend outside the managed home screen before automatically restarting. By default, this setting is set to 180 seconds.Enable Max Idle Time Outside MHSmust be set to true to use this setting.
Enable MHS MAX timeoutboolINCORRECTChange this setting to True to automatically restart the managed splash screen after a specified period of time. The timer tracks idle and active time spent away from the managed home screen. UseMAX time removed from MHSto set the idle timer. By default, this setting is disabled. This setting can only be used ifExit password lock task modeIt was set.
MAX time removed from MHSall600Set the absolute maximum time in seconds that a user can spend outside the managed splash screen before being automatically restarted. By default, this setting is set to 600 seconds.Enable MHS MAX timeoutmust be set to true to use this setting.

Settings to customize the managed splash screen experience when the device is configured with Azure AD shared device mode:

Test-Configurationvalue typestandard valueDescriptionAvailable in device settings
enable loginboolINCORRECTChange this setting to True to allow end users to log in from the managed home screen. When used with Azure AD shared device mode, users who sign in from the managed home screen are automatically connected to all other apps on the device that participated in Azure AD shared device mode. By default, this setting is disabled.✔️
login typelineAADSet this setting to "AAD" to sign in with an AAD account. Otherwise, set this setting to "Other". Users who sign in with a non-AAD account will not have single sign-on to any apps integrated into Azure AD shared device mode, but will still be signed in to the managed home screen. By default, this setting uses "AAD" user accounts. This setting can only be used ifenable loginwas set to true.✔️
Set as Background Image URLlineAllows you to set a wallpaper of your choice for the login screen. To use this setting, enter the URL of the image you want to set as your login background. This image may differ from the managed splash screen background imageSet device wallpaper. This setting can only be used ifenable loginwas set to true.✔️
Allow the organization logo to be displayed on the login pageboolCERTAINLYChange this setting to True to use a company logo displayed on the login screen and session PIN screen. This setting is used withOrganization logo on login pageand can only be used ifenable loginwas set to true.✔️
Organization logo on login pagelineAllows you to brand your device with a logo of your choice on the managed home screen login screen and session PIN screen. To use this setting, enter the URL of the image you want to set for the logo. This setting can only be used ifAllow the organization logo to be displayed on the login pagejenable loginwere set to true.✔️
Enable session PINboolINCORRECTChange this setting to True if you want end users to create a local session PIN after they successfully log in to the managed home page. The session PIN prompt is presented before the end user accesses the home screen and can be used in conjunction with other features. The session PIN is valid during user login and is deleted when user logs out. By default, this setting is disabled. This setting can only be used ifenable loginwas set to true.✔️
Session PIN complexitylineChoose whether to use the local session PINsimply,Complex, Öalphanumeric complex. if you choosesimplyusers only need to enter a numeric PIN. if you chooseComplex, users are prompted to create a PIN using alphanumeric characters, and no repeating (444) or ordered (123, 432, 246) sequences are allowed. Evaluation of repetitive and sequential patterns starts with three (3) digits/characters. if you choosealphanumeric complex, users are prompted to create a PIN using alphanumeric characters and at least one symbol or letter is required. Repeated (444) and ordered (123, 432, 246) sequences are not allowed. Punctuation for repeating and sequential patterns starts at three (3) characters. The default value for this setting is one (1), where one (1) means the user must have at least one character in their session PIN. This setting can only be used ifEnable session PINjenable loginwere set to true.✔️

Observe thatalphanumeric complexThe option is only available in the app settings today.

Minimum session PIN durationlineSet the minimum amount of time a user's session PIN must be valid. This can be used with any of the session PIN complexity values. This setting can only be used ifEnable session PINjenable loginwere set to true.
Maximum number of session PIN attemptslineSet the maximum number of times a user can attempt to enter their session PIN before being automatically logged out of the managed home screen. The default is zero (0), where zero (0) means the user has infinite attempts. This can be used with any of the session PIN complexity values. This setting can only be used ifEnable session PINjenable loginwere set to true.
customer pasteboolINCORRECTUse this specification withCreate a managed folder to group appsto create a folder that cannot be closed without a user entering their session PIN. This setting can only be used ifEnable session PINjenable loginwere set to true.
PIN code required after returning from screensaverboolINCORRECTChange this setting to True if you want end users to be required to enter their session PIN to continue activity on the managed home screen after the screen saver is displayed. This setting can only be used ifenable loginwas set to true.✔️
Enable automatic logoutboolINCORRECTChange this setting to True to automatically sign the current user out of the managed home screen after a period of inactivity. When used with Azure AD shared device mode, users are also signed out of all apps on the device that participate in Azure AD shared device mode. By default, this setting is disabled. This setting can only be used ifenable loginwas set to true.✔️
Automatic departure timeall300Set a period of inactivity in seconds that can elapse before the user is automatically logged out of the managed home screen. This setting can only be used ifEnable automatic logoutjenable loginwere set to true.✔️
Countdown time for auto logoff dialogall60The amount of time, in seconds, that the user is prompted before exiting the managed splash screen. This setting can only be used ifEnable automatic logoutjenable loginwere set to true.✔️
Privacy policy titlelineOptionally, display your organization's custom privacy statement on the Managed Home screen next to the Microsoft privacy statement. Use this setting to name the link that contains your organization's privacy statement, specified inLink to privacy policy.
Link to privacy policylineOptionally, display your organization's custom privacy statement on the Managed Home screen next to the Microsoft privacy statement. If you link but don'tPrivacy policy title, the title is "Custom Privacy Policy".

Enter the JSON data

Enter JSON data to configure all available managed splash screen settings and disabled settingsconfiguration designer.

Configure the Microsoft Managed Home App - Microsoft Intune (3)

(Video) 18. How to deploy Microsoft 365 Apps with Microsoft Intune

In addition to the list of configurable settings included inconfiguration designer(above), the following table lists configuration keys that you can only configure via JSON data.

Test-Configurationvalue typestandard valueDescription
Set whitelisted appsPackageArrayConfigure the Microsoft Managed Home App - Microsoft Intune (4)Lets you set the apps visible on the home screen of all apps installed on the device. You can define apps by entering the name of the app package you want to make visible. For example,com.android.settingswould make the settings accessible from the home screen. Apps whitelisted in this section must already be installed on the device to be visible on the home screen.
Set pinned web linksPackageArrayConfigure the Microsoft Managed Home App - Microsoft Intune (5)Allows you to pin websites as quick launch icons on your home screen. With this setting, you can define the URL and add it to the home screen so that the end user can launch it with a single browser tap. Note: We recommend that you create, assign, and approveManaged Google Play Web Linksto your devices. If you do, they will be treated as allowed apps.
Create a managed folder to group appsPackageArrayConfigure the Microsoft Managed Home App - Microsoft Intune (6)It lets you create and name folders and group apps within those folders. End users cannot move folders, rename folders, or move apps within folders. Folders are displayed in the order they were created, and apps in folders are displayed alphabetically. Note: Any apps that you want to group into folders must be assigned to the device and added to the Managed Home screen if needed.

The following syntax is an example JSON script with all available configuration keys:

{ "type": "androidenterprise# managedConfiguration", "productId": "app:com.microsoft.launcher.enterprise", "managedProperty": [ { "key": "lock_home_screen", "valueBool": true }, { " key": "wallpaper", "valueString": "default" }, { "key": "icon_size", "valueInteger": 2 }, { "key": "app_folder_icon", "valueInteger": 0 }, { " key": "screen_orientation", "valueInteger": 1 }, { "key": "applications", "valueBundleArray": [ { "managedProperty": [ { "key": "bundle", "valueString": " Nome do pacote Anwendungspaket here" } ] } ] }, { "key": "weblinks", "valueBundleArray": [ { "managedProperty": [ { "key": "link", "valueString": "link here" }, { " key ": "label", "valueString": "Weblink-Label hier" } ] } ] },{ "key": "widgets", "valueBundleArray": [ { "managedProperty": [ { "key" : "package" , "valueString": "Name des App-Pakets, das Widget hier verfügbar macht. Ein Beispiel: com.microsoft.launcher.enterprise" }, { "key": "widget_class", "valueString": "Name der Klasse e des Widgets aqui. Beispiel: Time" }, { "key": "interval _x", "valueInteger": 5 }, { "key": "span_y", "valueInteger": 2 } ] } ] }, { "key": "show_virtual_home", "valueBool ": false }, { "key": "virtual_home_type", "valueString": "swipe_up" }, { "key": "show_virtual_status_bar", "valueBool": true }, { "key": "exit_lock_task_mode_code", "valueString ": "123456" }, { " key": "show_wifi_setting", "valueBool": false }, { "key": "show_bluetooth_setting", "valueBool": false }, { "key": "show_flashlight_setting ", "valueBool ": false }, { "key": "show_volume_setting", "valueBool": false }, { "key": "show_device_info_setting", "valueBool": false },{ "key": "show_device_name", "valueBool": false }, { "key": " device_name", "valueString": "{{DeviceName}}" }, { "key": "device_serial_number", "valueString": "{{SerialNumber}}" } , { "Schlüssel ": "show_managed_setting", "valueBool": false }, { "key": "enable_easy_access_debugmenu", "valueBool": false }, { "key": "enable_wifi_allowlist", "valueBool": false }, { "Schlüssel": "wi fi_allo wlist", "valueBundleArray": [ { "managed pr operty": [ { "key": "SSID", "valueString": "WLAN-Netzwerkname 1 hier" } ] }, { "managedProperty": [ { " key" : "SSID", "valueString": "Wi-Fi 2-Netzwerkname hier" } ] } ] }, { "key": "grid_size", "valueString": "4;5" }, { "key" : " app_order_enabled", "valueBool": true }, { "key": "apps_in_folder_ordered_by_name", "valueBool": true }, { "key": "app_orders", "valueBundleArray": [ { "managedProperty": [ { " key" : "Paket", "valueString": "com.Microsoft.emmx" }, { "key": "type", "valueString": "application" }, { "key": "container" , "valueInteger": 1 }, { "key": " position", "valueInteger": 1 } ] }, { " managedProperty": [ { "key": "folder_name", "valueString": "Work" }, { "key" : " type", "valueString": " managed_folder" }, { "key": "container", "integerValue": 1 }, { "key": "position", "integerValue": 2 } ] }, { " managedproperty" : [ { "key": " package", "valueString": "com.microsoft.launcher.enterprise" }, { "key e": "type", "valueString": "appli cation" }, { "key": "class", "valueString": " com .microsoft.launcher.launcher" }, { "key": "container", " valueInteger": 1 }, { "key": " position", "valueInteger": 3 } ] },{ "managedProperty": [ { "key": "package", "valueString": "Klassenname für das Widget hier " }, { "key": "type", " valueString": "widget" }, { "key": "container", "valueInteger": 1 }, { "key": "position", "IntegerValue" : 1 } ] } ] }, { "key": " managed_folders", "valueBundleArray": [ { "managedproperty": [ { "key": "folder_name", "valueString": "Ordnername hier" }, { " key ": "Anwendungen", "valueBundleArray": [ { "managedProperty ": [ { "chave": "pacote", "valueString": "com .microsoft.emmx" } ] }, { "propriedade gerenciada": [ { "chave": "pacote", "string de valor": "com .microsoft.bing" } ] }, { "propriedade gerenciada": [ { "chave": "link", "valueString": "https:// microsoft. com/" } ] } ] } ] }, { "managementProperty": [ { "key": "folder_name", "valueString": "Beispiel für Ordnername 2 " },{ "Schlüssel": "is_customer_facing", "valueBool" : true }, { "key": "applications", "valueBundleArray": [ { "managedPropert y": [ { "key": " package ", "valueString": "com.microsoft.office.word" } ] } ] } ] } ] },{ "key": "show_notification_badge", "valueBool": true },{ "key": "show_screen_saver" , "valueBool": true }, { "key": "screen_saver_image", "valueString ": "URL zum gewünschten Bildschirmschonerbild hier" }, { "key": "screen_saver_show_time" , "valueInteger": 0 } ,{ " key": "inactive_time_to_show_screen_saver", "valueInteger": 30 }, { "key": "media_detect_before_screen_saver ", "valueBool": true }, { "key": "enable_max_inactive_time_outside_MHS", " valueBool": false }, { "key" : "enable_max_absolute_time_outside_MHS", "valueBool": false }, { "key": "max_inactive_time_outside_MHS", "valueInteger": 180 }, { "key": "max_absolute_time_outside_MHS", "valueInteger": 600 },{ "key": " theme_color", "valueString": "light" }, { "key": "enable_mhs_signin", "value Bool": true }, { "key": "block_pinning_browser_web_pages_to_MHS", "valueBool": true }, { "key": "signin_type", "valueString": "AAD" }, { "key": "signin_screen_wallpaper" , " valueString": "URL zum gewünschten Bild für den Hintergrund des Anmeldebildschirms hier" }, { "key": "enable_corporate_logo", "valueBool": true }, { "key": "signin_screen_branding_logo", "valueString": "URL zum gewünschten Bild für Markenlogo hier" }, { "Schlüssel": "enable_session_PIN", "valueBool": true } , { "key": "session_PIN_complexity", "valueString": "simples" },{ "key": "max_number_of_attempts_for_session_PIN ", "valueInteger": 0 }, { "key": "Minimum_length_for_session_PIN", "valueInteger": 1 } , { "key": "max_number_of_attempts_for_exit_PIN", "valueInteger": 0 }, { "key": "amount_of_time_before_try_exit_PIN_again", "valueInteger ": 0 } { "key": "enable_auto_signout", "valueBool": true }, { " key": "inactive_time_to_signout", "valueInteger": 300 }, { "key": " auto_signout_time_to_give_user_notice", " valueInteger" : 30 }, { "key": "enable_PIN_to_resume", "valueBool": true }, { "key": "custom_privacy_statement_title", "valueString ": "Name der benutzerdefinierten Datenschutzerklärung hier" }, { "key": "custom_privacy_statement _url", "valueString": "Link zur benutzerdefinierten Datenschutzerklärung hier" }, ]}

Managed splash screen debug screen

You can access the debug screen from the managed home screen by selectingas costasuntil the debug screen appears (select theas costaskey 15 times or more). From this debug screen, you can launch the Android Device Policy app, view and upload logs, or temporarily pause kiosk mode to update your device. For more information on pausing kiosk mode, seeExit kiosk modeElemento no Android Enterprisededicated device settings. If you want easier access to the debug screen from the managed splash screen, you can enable theQuick access to debug menuConfiguration using device configuration policies or you can configure theEnable debug menu for easy accessanRIGHTthrough application configuration policies.

Next steps

  • For more information on dedicated Android Enterprise devices, seeConfigure Intune enrollment for dedicated Android Enterprise devices.
(Video) Intune fully managed enrollment with Microsoft Launcher - JSON Configuration Example

comment

Send and view feedback to

This ProductThis page

Show all page comments

(Video) Microsoft Intune Tutorial: How to Configure Featured Apps in Company Portal

FAQs

How do I add managed apps to Intune? ›

Use the following steps to add an app to Intune:
  1. Sign in to Microsoft Intune admin center, select Apps > All apps > Add.
  2. In the App type drop-down box, select Windows 10 and later from Microsoft 365 Apps.
  3. Click Select. ...
  4. Confirm the default details in the App suite information step and click Next.
Mar 2, 2023

How to configure an Android device in multi app Kiosk mode with Microsoft Intune? ›

Android KNOX Devices
  1. From the Intune portal, go to Device Configuration and create a new Device Restriction profile.
  2. In your profile, make sure the platform is set to Android and the profile type is set to Device Restrictions.
  3. Under Kiosk settings, add the apps you want to run in kiosk mode.
Mar 29, 2019

How to configure Microsoft Launcher on your fully managed devices? ›

Navigate to the Microsoft Endpoint Manager Admin Center and select Apps > App configuration policies. Add a configuration policy for Managed devices running Android and choose Microsoft Launcher as the associated app. Click on Configuration settings to configure the different available Microsoft Launcher settings.

What is a managed app in Intune? ›

Mobile Application Management (MAM) basics

Intune mobile application management refers to the suite of Intune management features that lets you publish, push, configure, secure, monitor, and update mobile apps for your users. MAM allows you to manage and protect your organization's data within an application.

What is managed app configuration? ›

Managed app configuration (commonly called managed configurations) is a feature that gives IT admins the flexibility to remotely configure for work apps for different users. App developers need to create apps with built-in support for managed configurations.

How do I make Managed Home Screen my default launcher? ›

1. In Admin Mode open the Settings panel and tap Home: 2. Tap on the Android Launcher to select it as the default launcher and Home screen.

How do I enable my home screen? ›

Go to Home screen
  1. Swipe up from the bottom of the screen.
  2. Tap Home or Home .

How do I set the Samsung Home app? ›

Others like to make it a little trickier...
  1. Samsung (Android 13) - Settings > Apps > Choose default apps > Home app.
  2. Oppo, OnePlus and Realme (Android 13) - Settings > Apps > Default App > Home app.
  3. Xiaomi/Redmi/Poco (Android 13) - Settings > Home screen > Default launcher.
Feb 9, 2023

How do I force my Intune to sync with Android? ›

To force a sync:
  1. Sign in to the Company Portal app.
  2. Tap the menu.
  3. Tap Settings.
  4. Scroll down to Management Policy and tap Sync.
  5. Wait while Company Portal syncs your device. When complete, the screen will show the timestamp of the last successful sync.
Feb 21, 2023

How do I bypass Android kiosk mode? ›

How to exit kiosk mode on Android devices?
  1. Method 1: Disable kiosk mode from instant management actions.
  2. Method 2: Remove Android devices from the policy.
  3. Method 3: Archive the policy.
  4. Method 4: Manually Exit Kiosk mode from the device.
  5. Global Exit Settings.
  6. Local passcode settings.
  7. Method 5: Exit kiosk while the app is open.

How do I get my Android to work in kiosk mode? ›

Part 3 : How to Setup Android Kiosk Mode on Devices?
  1. Enroll Android Devices in MDM Admin Console. ...
  2. Select Accessible Apps or Websites. ...
  3. Customize Home Screen Layout. ...
  4. Complete Settings for Home Screen and Notification Center. ...
  5. Complete Settings for Device Network. ...
  6. Provision Kiosk Mode Config to Android Devices. ...
  7. Change Secure Code.
Jan 18, 2023

How do I change the MDM and MAM settings in Microsoft Intune? ›

Enable Windows automatic enrollment
  1. Sign in to the Azure portal, and select Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune.
  2. Configure MDM User scope. Specify which users' devices should be managed by Microsoft Intune. ...
  3. Use the default values for the following URLs: MDM Terms of use URL. ...
  4. Select Save.
Mar 2, 2023

How do I set up Microsoft Launcher Intune? ›

How to configure the Microsoft Launcher app. Once the Microsoft Launcher application has been added to Intune, navigate to the Microsoft Intune admin center and select Apps > App configuration policies. Add a configuration policy for Managed devices running Android and choose Microsoft Launcher as the associated app.

How do I register a fully managed device on Intune? ›

Enable corporate owned user devices
  1. Sign in to the Microsoft Intune admin center and choose Devices > Android > Android enrollment > Corporate-owned, fully managed user devices.
  2. Under Allow users to enroll corporate-owned user devices, choose Yes.
Feb 22, 2023

What is the difference between managed apps and managed devices Intune? ›

Selecting Managed apps as the Device Enrollment Type specifically refers to apps configured by Intune configuration policies on a device that is not enrolled in device management, whereas Managed devices applies to apps deployed through the MDM channel and thus are managed by Intune.

What is the difference between Intune and Configuration Manager? ›

Both solutions are parts of Microsoft Endpoint Manager – a single, integrated platform for managing all the endpoints in the organization. Intune is a cloud-based solution that allows you to manage company-owned and personal devices, while SCCM is a more traditional on-premises solution.

What is the difference between MAM and MDM Intune? ›

MDM is a way of securing mobile devices such as smartphones and tablets, whereas MAM secures the applications on those devices that are used to access organizational data, such as Outlook, SharePoint, and OneDrive. MDM software is typically designed to support one or more operating systems such as iOS and Android.

How does managed app work? ›

All transactions are recorded on reports in real-time, receipts are issued to tenants via email, notifications can be sent to owners and you can expand a payment to see the dates, amounts, and payment methods in the app.

Why is software configuration management needed? ›

Configuration management is a necessary tool for managing complex software systems. Lack of configuration management can cause serious problems with reliability, uptime, and the ability to scale a system. Many current software development tools have configuration management features built in.

How do you set up a configuration management system? ›

4 steps to implement an IT configuration management process
  1. Step 1: Create a configuration management baseline. ...
  2. Step 2: Don't let the baseline become obsolete. ...
  3. Step 3: Continuous auditing. ...
  4. Step 4: Test, test, test.
Jun 22, 2020

How do I change my default home app? ›

  1. Open your phone's Settings app.
  2. Tap Apps. Default apps.
  3. Tap the default that you want to change.
  4. Tap the app that you want to use by default.

How do I set a default home app? ›

Change the app launcher on your android phone
  1. Slide your finger downwards on your screen to pull down the settings screen.
  2. Click on the cog to enter the settings. ...
  3. In the settings menu, scroll down until you find the Apps submenu. ...
  4. Under the Apps settings, select default apps.
  5. Under Default apps, select Home app.

How do I enable apps on my home screen? ›

Add to Home screens
  1. From the bottom of your Home screen, swipe up. Learn how to open apps.
  2. Touch and drag the app. You'll find images of each Home screen.
  3. Slide the app to where you want it. Lift your finger.

How do I turn on the home button app? ›

Open your phone's Settings app. Swipe up on Home button. Turn Swipe up on Home button off or on. If you turn it on, you're using 2-button navigation.

How do I get my home screen app back? ›

Restore Android App From App Drawer

On some Android phones, you will have to tap on the All apps button on the home screen. Step 2: Find the app that you want to restore. You can use the search at the top to quickly find the missing app. Step 3: When you find the app, touch and hold it, and drag it to the home screen.

What is the default home app on Samsung? ›

One UI Home is Samsung's default launcher available on Android phones and tablets that run any version of One UI. The system launcher lets you change the look of the home screen, add and remove widgets, set up modes and themes, adjust how the app drawer works, and more.

How do I customize my Samsung home? ›

Touch and hold an empty space on the Home screen, and then tap Wallpaper and style. You can also navigate to Settings, and then tap Wallpaper and style. Tap Browse my wallpapers to select from preloaded wallpapers, or tap Gallery to select your desired photo.

What is Samsung home connect? ›

Samsung Connect Home is a Wi-Fi®-enabled network hub that connects smart devices to it and each other. With the SmartThings app, you'll be able to easily control your suite of connected appliances remotely.

Can Intune factory reset my phone? ›

Factory reset device

Open the Company Portal app on any managed device and sign in with your work or school account. Select DEVICES. Select the device you want to reset. Select the menu button > Factory Reset.

How do I push Android apps through Intune? ›

You can add an Android store app to Intune from the portal by doing the following:
  1. Sign in to the Microsoft Intune admin center.
  2. Select Apps > All apps > Add.
  3. In the Select app type pane, under the available Store app types, select Android store app.
  4. Click Select.
Feb 22, 2023

Can Microsoft Intune manage Android devices? ›

You can use Intune to manage the whole device (including apps) or use Intune to manage apps only. Add Android apps from the Google Play Store. Add store apps, line-of-business (LOB) apps, and web apps through the managed Google Play Store. Use Intune to enable and disable Android Enterprise system apps.

What is the purpose of Kiosk Mode? ›

Kiosk mode is a Windows operating system (OS) feature that only allows one application to run. Kiosk mode is a common way to lock down a Windows device when that device is used for a specific task or used in a public setting.

What is the default PIN for fully kiosk? ›

Either press the hardware menu button or menu button in the top right hand corner of the screen, tap Settings and then tap "Exit to Launcher/Exit" button. Enter the default password of 0000 (zero zero zero zero) and tap OK.

How do I bypass an Android administrator? ›

Go to your phone's settings and then click on “Security.” You'll see “Device Administration” as a security category. Click on it to see a list of apps that have been given administrator privileges. Click the app you want to remove and confirm that you want to deactivate administrator privileges.

Does Android have a built-in Kiosk Mode? ›

Does Android have A Built-in Kiosk Mode? Yes, Android devices have built-in Kiosk mode with a specific name, 'Screen Spinning. ' This feature helps to set up single-app Kiosk mode on Android devices.

Does Android have a native Kiosk Mode? ›

Yes. Built-in Kiosk Mode in Android is also known as Android Screen Pinning. Android Screen Pinning is a security feature in Android devices that allows you to limit the access to only one app.

What is the difference between Microsoft MDM and MAM? ›

Simply put, the main difference between MDM and EMM is that MDM manages all the features of the device while EMM manages the entire device. EMM provides policy compliance, app customization, data and document security and incorporates into the network directory services.

How do I change my configuration manager workloads to Intune? ›

Select the co-management object, and then choose Properties in the ribbon. Switch to the Workloads tab. By default, all workloads are set to the Configuration Manager setting. To switch a workload, move the slider control for that workload to the desired setting.

How do I turn off MDM restrictions? ›

How to optimize Battery usage and Data usage in Android?
...
Steps:
  1. Open "Settings" App.
  2. Scroll down and then tap on "General" section from the left menu.
  3. Scroll down all the way and then tap on "Device Management"
  4. Then tap on "MDM Profile"
  5. Then tap on "Remove Management"
  6. If it ask for a passcode, Please enter your passcode.
Jan 27, 2023

How do I assign an app to Intune? ›

Assign an app
  1. Sign in to the Microsoft Intune admin center.
  2. Select Apps > All apps.
  3. In the Apps pane, select the app you want to assign.
  4. In the Manage section of the menu, select Properties.
  5. Scroll down to Properties and select Assignments.
  6. Select Add Group to open the Add group pane that is related to the app.
Feb 24, 2023

How do I add a managed Intune app? ›

Use the following steps to add an app to Intune:
  1. Sign in to Microsoft Intune admin center, select Apps > All apps > Add.
  2. In the App type drop-down box, select Windows 10 and later from Microsoft 365 Apps.
  3. Click Select. ...
  4. Confirm the default details in the App suite information step and click Next.
Mar 2, 2023

Does Intune automatically install apps? ›

Intune installs the app on the device. App updates are automatic. Intune installs the app on the device (you supply the installation file). You must update the app.

How do I know if my device is Intune managed? ›

How to Confirm a Device Is Enrolled in Intune
  1. Click Start on your Windows device.
  2. Click on Settings.
  3. Click Accounts.
  4. Click Access work or school.
  5. Click Connected to MESA AD domain then click Info. Note: If the Info button does not appear on your device, your device has not been successfully enrolled.
Mar 2, 2021

What does device is managed by Intune mean? ›

In Intune, you create policies that configure features & settings and provide security & protection. The devices are fully managed by your organization, including the user identities that sign in, the apps that are installed, and the data that's accessed.

Do I need an Intune license for every device? ›

Each device that accesses and uses the online services and related software (including System Center software) must have a device license. If a device is used by more than one user, each device requires a device based software license or all users require a user software license.

How do I manage Apps in Intune Company Portal? ›

To do this, navigate to Microsoft Intune admin center, and select Tenant Administration > Customization, where you can either edit the default policy or create up to 10 group targeted policies. These settings will apply to the Company Portal apps, Company Portal website, and Intune app on Android.

How do I push iOS Apps to Intune? ›

Sign in to the Microsoft Intune admin center. Select Apps > All apps > Add. In the Select app type pane, under the available Store app types, select iOS store app. Click Select.

How do you deploy third party Apps on Intune? ›

Description
  1. Select the required third-party application that you wish to create in Intune/MEM, customize the deployment with pre/post scripts if required, and click 'Create Application' option.
  2. Now, you can see that the selected third-party application is created in the Apps section under Client Apps.

How do I set Intune default apps? ›

Set default apps with Intune
  1. On your reference computer login as administrator and browse to Settings -> Apps -> Default Apps. ...
  2. Configure the applications you want to use as default applications. ...
  3. After you configure default apps, run Powershell (ISE) as an administrator. ...
  4. Open the XML file and copy the contents.
Aug 19, 2021

How do I get my app to show up in Company Portal? ›

In the App information section, click Edit to modify the properties of the application. Under Edit application properties, Scroll down and select the Show this as a featured app in the Company Portal option, Toggle the switch to Yes.

How do I get my device into Intune? ›

3. Enrolling a device in Microsoft Intune
  1. Right-click on Windows > Settings > Accounts.
  2. Access Work or School Account and then click Connect.
  3. Click on Join this device to Azure AD Directory and add DEM user credentials and click on Next and Sign In.
  4. Click on Join and then click on Done.
Oct 31, 2022

Can Intune wipe my iPhone? ›

This is simply called a Wipe in Microsoft Intune. Selective wipe. This option wipes only the managed app data, MDM policies and settings by removing the management profile from the iPhone. A selective wipe leaves personal data untouched.

Can you force an iOS update via Intune? ›

You can use Microsoft Intune device configuration profiles to manage software updates for iOS/iPad devices that enrolled as supervised devices. Supervised devices are devices that enroll through one of Apple's Automated Device Enrollment (ADE) options.

How do I connect my iPhone to Intune? ›

The iOS/iPadOS device automatically installs the Company Portal app from the App Store. Users should launch the Company Portal app and sign in using the credentials (like the unique personal name or UPN) that are associated with their subscription in Intune. After logging in, enrollment is complete.

Can Intune manage third party apps? ›

If your Organization uses Microsoft Intune along with SCCM, or Microsoft Endpoint Manager, you can use Application Management for Intune/MEM in Patch Connect Plus to select the third party applications.

Which Office apps can be deployed using Intune? ›

One of the available app types is Microsoft 365 apps for Windows 10 devices. By selecting this app type in Intune, you can assign and install Microsoft 365 apps to devices you manage that run Windows 10.

Can Intune manage 3rd party patching? ›

Automated publishing of third-party patches in Intune

Patch Connect Plus identifies third-party applications that have been created within Intune and automatically publishes updates, as they get released by vendors.

Videos

1. How to configure Group Policy Using MS-Intune portal step by step | Microsoft Intune
(Teach Me Cloud)
2. Microsoft Intune Microsoft Store App (New) Deployment | Add Microsoft Store apps to Microsoft Intune
(Paddy Maddy)
3. Intune Enrollment for Windows Device | Personal BYO Scenario | Company Portal -Settings App - Manual
(Anoop C Nair)
4. 32. How to Create and Use Filters for Policy Assignments | Microsoft Intune
(MSFT WebCast)
5. S01E26 - Configuring Windows 10 Kiosk Mode with Microsoft Intune - (I.T)
(Intune Training)
6. Microsoft Intune - Module5.3- Configure and Deploy Intune Feature updates for Windows 10 / 11 Policy
(@Chander Mani Pandey)
Top Articles
Latest Posts
Article information

Author: Trent Wehner

Last Updated: 07/02/2023

Views: 5870

Rating: 4.6 / 5 (76 voted)

Reviews: 91% of readers found this page helpful

Author information

Name: Trent Wehner

Birthday: 1993-03-14

Address: 872 Kevin Squares, New Codyville, AK 01785-0416

Phone: +18698800304764

Job: Senior Farming Developer

Hobby: Paintball, Calligraphy, Hunting, Flying disc, Lapidary, Rafting, Inline skating

Introduction: My name is Trent Wehner, I am a talented, brainy, zealous, light, funny, gleaming, attractive person who loves writing and wants to share my knowledge and understanding with you.