跳到主要内容

084: Android Device Administrator Retirement

Implementation Effort: Medium
User Impact: High

Overview​

Android Device Administrator is a legacy management approach that Google has deprecated for years and that is no longer the strategic path for Microsoft Intune. For most organizations using Google Mobile Services, Android Enterprise should be the standard target state for both personally owned and corporate-owned devices. The important workshop outcome is not remembering retirement dates; it is ensuring that legacy Android management is discovered, blocked for new use, and replaced with supported enrollment models that can participate fully in Zero Trust controls such as compliance, app protection, and Conditional Access.

Implementation Guidance​

  1. Use Intune reporting to inventory devices and users still managed with Android Device Administrator or other legacy methods.
  2. Map each device population to a replacement mode: work profile for BYOD, fully managed or corporate-owned work profile for assigned corporate devices, dedicated devices for kiosks, and AOSP where Google Mobile Services are unavailable and Microsoft supports the scenario.
  3. Review policy parity carefully. Legacy settings often do not translate one-for-one to Android Enterprise, so new configuration, compliance, certificate, and app policies may be required.
  4. Block new Android Device Administrator enrollment wherever possible and communicate a firm migration timeline to affected users and support teams.
  5. Pilot migrations by device persona, document enrollment steps, and confirm that app delivery, network access, and device compliance behave correctly after transition.
  6. Retire old policies and documentation once the migration is complete so administrators do not accidentally continue using unsupported guidance.

Reference​