Intune_Support_Team I have gone down the path of removing DA as a valid enrollment path, however despite a number of support tickets with MS (unresolved) I have an issue where new users to the tenancy are only prompted with DA as an enrollment option, despite DA being implicitly blocked in Enrollment restrictions. How is this possible? Has anyone else had any issues where tenancies have moved to Android Enterprise but some legacy attribute (Clutching at straws) prevents new users from enrolling. I don't want to have extra DA policy overhead to allow people to enroll into Android Enterprise as described here: https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set
Android Enterprise (work profile) and Android device administrator platforms have the following behavior:
If both platforms are allowed for the same group, then users will be enrolled with a work profile if their device supports it, otherwise they will enroll as DA.