Forum Discussion
SRPfr
Sep 16, 2020Copper Contributor
Best practice for the managed Google Play Account in Intune/MEM
Hi All, I'm looking for some advice on the best practice for setting the first step of Android enrollment in Microsoft Intune/MEM. What is the best practice for security and management, when ...
- Nov 03, 2020
There isn't a real, outlined best practices here.
You don't need a Exchange license per say, you could use this solution - https://msendpointmgr.com/2020/08/08/2-for-1-mail-enable-unlicensed-admin-accounts/
I would use one Professional account if possible, will be the easiest way
SRPfr
Nov 02, 2020Copper Contributor
Thanks, but what will be the best practice for you, with Android Zero-Touch and Intune Google Play Account :
- Two Professional Accounts.
- Two Gmail Accounts (Apparently not recommended by Google : is asking to use a professionnal account to access to Zero-Touch portal).
- Two Accounts (1 Gmail & 1 Pro) : 1 gmail Account for Intune Google Play Account & 1 Professional Accounts for Android Zero-Touch
- One unique Professional Account. So only one ExO licence and one account to secure. Any disadvantage ?
If we use a professional account, this account need also to have an Exchange Online licence always activated with an enabled mailbox or we don't need a mailbox ?
Do you know if we use also iOS and Samsung Knox : Best practice will be to use one different account for each or the same for all ? (Google Play, iOS AppStore, Android Zero-Touch, Knox)
Thanks,
Thijs Lecomte
Nov 03, 2020Bronze Contributor
There isn't a real, outlined best practices here.
You don't need a Exchange license per say, you could use this solution - https://msendpointmgr.com/2020/08/08/2-for-1-mail-enable-unlicensed-admin-accounts/
I would use one Professional account if possible, will be the easiest way
- MichaelOlivDec 22, 2023Iron ContributorHello,
Sorry I refresh an old post. 😉
But it's the one that I find for my research.
Is it a good thing to use the same account for managed Google Play and for the factory reset protection please?
I ask this because when I trie to connect to my Managed Google play account, it ask me to verify my account with phones that I don't have anymore. I think it's phones where the account was used to do a factory reset.
So I think it's better to have 2 differents accounts but I need your advice on this. 😉
And other question that was not answer here 2 years ago but now maybe. Is there an impact of adding an MFA method to the Managed Google play account? To avoid this problem of verification with phones that I don't have.
I thinks there is no problem but I need to be sure. If I remember correctly it's not possible to have no more MFA configuration in gmail if we had one previously. - SRPfrDec 21, 2020Copper Contributor
Thijs LecomteThanks,
An a very usefull article !