Managed Home Screen Woes
Setting up a Company Owned Dedicated (kiosk) Android device can be a bit challenging to get just right. After several hours of reading Reddit, Microsoft, and Personally owned blogs and threads, I figured I would consolidate everything I have found to hopefully have this show up on someone else's Google results. (Main link for Managed Home Screen Configuration: Configure the Microsoft Managed Home Screen app - Microsoft Intune | Microsoft Learn ) Calling issues with Managed Home Screen The Issue: Devices were able to receive phone calls, but the only notification was in the default system's notification tray; this was while the device was locked and unlocked. This posed an issue as we would like to 1) disable the default system tray and 2) We need at least the phone to light up when it was locked to let the users know they're getting a call. The Solution: After researching it is my assumption that the underlying issue is that while the phone is managed, and enrolled as a Company Owned Dedicated Device, for some reason the UI elements are NOT identified as managed items. So the administrator must deploy the following applications as Android Enterprise System Apps and set them as required installs: com.samsung.android.incallui --- I named this Call UI, Publisher Android com.android.server.telecom --- I named this Telecom (1 of 2 Req for Phone App), Publisher Android com.samsung.android.app.telephonyui --- I named this Telephony UI (2 of 2 Req for Phone App), Publisher Android (Yes, these are probably not the "Android Designated Application Name" but that's what they're staying as in my tenant.) That's it. Done. Phone was able to receive calls with the normal quarter of the top screen notification, as well as a full screen notification if the device was locked. However, some previous research also let me to these other items that may help someone else from googling: The Android Phone App Package ID / Android Phone App Bundle ID / Samsung Phone App is: com.samsung.android.dialer --- I named this Phone, Publisher Samsung (unsure for Google, Motorola, etc phones, this works for Samsung) This needs to be set as required as well, and assumedly placed on the managed home screen for the user to make calls (unsure if it is needed to receive calls only... if you have some type of use case for that?). Most predominant links relating to the issue: Article 1: Shared Android Phone/Calls from Kiosk Mode? : r/Intune (reddit.com) Article 2: Shared Android Phone - KIOSK device - Phone Calls - Samsung : r/Intune (reddit.com) Managed Home Screen Conflicts App Configuration Policies currently don’t really show you any information as to why or what a conflict is; just that it’s conflicting (thanks, Microsoft). Some common issues I’ve seen around is that while some configurations are available in both the Device Configuration Profile and the App Configuration Policy; you should not apply these settings in both places (see the tables of configurations on the Microsoft doc for Managed Home Screen at the top of this article). Personally, I like having the configurations setup as: Managed Home Screen App Config Policy: Configuration Key Value Type Configuration Value Exit lock task mode password string 123456 MAX time outside MHS integer 600 MAX inactive time outside MHS integer 180 Enable MAX time outside MHS bool TRUE Enable MAX inactive time outside MHS bool TRUE Enable easy access of debug menu bool TRUE Define Theme Color string light Applications in folder are ordered by name bool TRUE Application order enabled bool TRUE Device's serial number choice {{SerialNumber}} Show device name bool TRUE Show Device Info setting bool TRUE Show Volume setting bool TRUE Show Flashlight setting bool TRUE Show Bluetooth setting bool TRUE Show Managed Setting bool TRUE Show Wi-Fi setting bool TRUE Battery and Signal Strength indicator bar bool TRUE Set device wall paper string https://i.imgur.com/OPlCeFG.jpg Lock Home Screen bool TRUE Enable notifications badge bool TRUE (Exiting Kiosk mode is then within the Device Managed Settings > i > Exit Kiosk Mode with the ‘Exit lock task mode password’ pin.) Dedicated Device Configuration Policy: (In my experience, this is an overview of the settings that should / shouldn’t be set with Managed Home Screen. This is not all the settings, that’s a lot of typing. But this will give you a good start. I am sure not all of these affect the Managed Home Screen as well, but at least the ones under Device Experience do.) General: Permission Policy – Default Date and Time – Block Factory Reset, Status Bar – Blocked Skip first hints – Enable Power Button Menu – Block System Error Warnings – Allow Enabled System Navigation Features – Home and overview buttons System Notifications and Information – Show both Device Experience: Enrollment Type – Dedicated Device Kiosk Mode – Multi-App Custom Layout – Enable (Note: all of these apps need to be deployed and set as required) App Notification Badges – Enable Virtual Home Button thru Wi-Fi Configuration– ALL Not Configured (as these are configured within the App Configuration Policy!) Bluetooth, Flashlight, Media, Quick access to device info – Enabled Managed Home Screen Background I found that the best place to configure this is only within the App Configuration Policy. The main issue everyone seems to face is that the image URL must end with a ‘.jpg’. This is very easily overcome; find an image on Google, Download it, Go to Imgur, Upload it (watch your ad), Right click it afterwards, then click Copy Image Link. Boom imgur.com/somerandomletters.jpg Finding the Android App Identifier Honestly, this is a lot more complicated than it needs to be. Note: Adding the Managed Home Screen app to the Home Screen shows up as Managed Settings and works great. Here’s a list of the common ones: App Name Store URL App Identifier Calendar https://play.google.com/store/apps/details?id=com.samsung.android.calendar com.samsung.android.calendar Camera https://play.google.com/store/apps/details?id=com.sec.android.app.camera com.sec.android.app.camera Clock https://play.google.com/store/apps/details?id=com.google.android.deskclock&hl=en-US com.google.android.deskclock Gallery https://play.google.com/store/apps/details?id=com.sec.android.gallery3d com.sec.android.gallery3d Google Play Store com.android.vending Microsoft Intune https://play.google.com/store/apps/details?id=com.microsoft.intune&hl=en-US com.microsoft.intune Managed Home Screen https://play.google.com/store/apps/details?id=com.microsoft.launcher.enterprise&hl=en-US com.microsoft.launcher.enterprise Microsoft OneDrive https://play.google.com/store/apps/details?id=com.microsoft.skydrive&hl=en-US com.microsoft.skydrive Microsoft Outlook https://play.google.com/store/apps/details?id=com.microsoft.office.outlook&hl=en-US com.microsoft.office.outlook Microsoft Teams https://play.google.com/store/apps/details?id=com.microsoft.teams&hl=en-US com.microsoft.teams Phone https://play.google.com/store/apps/details?id=com.samsung.android.dialer com.samsung.android.dialer Samsung Notes https://play.google.com/store/apps/details?id=com.samsung.android.app.notes&hl=en-US com.samsung.android.app.notes Settings https://play.google.com/store/apps/details?id=com.android.settings com.android.settings There were a LOT of articles and treads I read about these issues and I cannot possibly find them all again to post here. But here are a few to try and give credit: Configure the Microsoft Managed Home Screen app - Microsoft Intune | Microsoft Learn Shared Android Phone/Calls from Kiosk Mode? : r/Intune (reddit.com) Shared Android Phone - KIOSK device - Phone Calls - Samsung : r/Intune (reddit.com) GitHub - petarov/google-android-app-ids: Google Android apps found on the Play Store (Some of these are incorrect for my use cases (needed Android apps not Google Apps)) Corporate-owned Android Enterprise device restriction settings in Microsoft Intune | Microsoft Learn Manage Android Enterprise system apps in Microsoft Intune | Microsoft Learn
Managed Home Screen, Overlay permission, not able to allow site permissions
Hi, We use shared devices, enrolled as dedicated devices with Azure AD, and deploy Managed Home Screen to them. Overlay permission is granted for MHS. When browsing to a website (in Edge) that requires permissons to use the device Location or Camera the expected pop-up asking you to Allow or Block the permission is shown, however nothing happens when pressing any of the options. Meaning you cannot allow site permissions. I know this is related to the Overlay permission that is granted for MHS, since it works if I exit kiosk mode. We had a similar problem a few months ago, where we got another message saying “This site can´t ask for your permissions…” when we tapped the Allow button. That problem was solved by adding an app configuration for Edge, “Enable Overlay Permission Detection” and set it to False. That setting is still applied but since some weeks ago, probably since last Edge update, it does not help. I have found a workaround, not very user friendly though. If I refresh the web site 3-4 times until the permission pop-up stops showing, I can tap the lock-icon in the address bar and switch the required permission from blocked to allowed.
Cannot allow site permissions Edge + MHS
We are deploying Edge in Managed Home Screen on our Android shared device (with Azure AD). When browsing to a web site that asks for permissions (Location, Camera, etc) we get the pop-up for selecting Block or Allow but the nothing happens when tapping any option. If we exit kiosk-mode (turn of Managed Home Screen) it works as expected, but as soon as MHS is active we cannot grant any site permissions. One workaround we found is to refresh the site several times and then tap the padlock in the address bar. The permission is now set to "automatically blocked" and can be changed to "allowed" but this is not a very user friendly way of course. I should also inform that the overlay detection setting in Edge is disabled. Please advice! //Niklas
Edge (Android) "Send to Phone" ; Replicate w. Intune?
Hello, If I try and deploy either a "managed web app" to get a shortcut on my Android device OR using Microsoft Managed Home Screen (configuring it using an app configuration policy) both of those ways open up the "normal" Edge browser. However if I select "Send to phone" the website / shortcut then open Edge without any menus so it becomes like a mobile app; how can I replicate that behavior when using Intune i.e. to deploy such a shortcut on the home screen of a Intune managed Android device? Best Regards - Karl Update: Solved it by using Chrome instead of Edge, if I use Chrome then the weblink deployed through Google Play (see link below) honor the "display"-setting in the weblink; Add and assign Managed Google Play apps to Android Enterprise devices - Microsoft Intune | Microsoft Docs Disappointed that it doesn't work w. Edge since both Chrome and Edge are chromium-based.
Android KIOSK, Managed Home Screen and uninstall
Hello! I've run into huge issue. If I activate KIOSK mode on Android devices, then Managed Home Screen app is installed. Now, if I remove KIOSK mode, then Managed Home Screen app is NOT uninstalled and it cannot be uninstalled via app properties group assignment as well. Why is it an issue? Because I have some devices that have KIOSK mode and Managed Home Screen is installed. I also have some devices that don't have KIOSK mode, but they still have Managed Home Screen app installed and by pressing "home" button Android asks if One UI or Managed Home Screen should be default launcher. If user chooses Managed Home Screen as default launcher, then it's empty, no apps, nothinManaged Homescreen asking for Overlay permissions again
Hi Everyone, Not sure if anyone else has seen this behaviour (seems to be very recent). This issue was previously logged here The Microsoft Managed Home Screen App requires overlay permissions in order to show the floating home button. Despite having permissions, it still requests it and no matter what you do, it just doesn't allow it. No changes made to inTune and when this was previously logged, it suddenly started working. Keen to see if anyone else has this issue and if they have been able to overcome it. Quite confident that this is not an Android update as we have some older tablets (with older versions) that are experiencing the same issue. DanManaged Home Screen Dedicated Devices in Multi-app Kiosk Mode_No Virtual Home Button
Hi All, I'm testing out the Managed Home Screen with 2-3 apps on dedicated devices in multi-app kiosk mode. I tested them on a Zebra TC77, which has physical buttons below the display, and all worked as expected. However, when testing on a Zebra TC57, the Home Button and Recent Apps buttons disappear shortly after rebooting the device, or immediately after opening any of the 2-3 apps. I've spoken with Microsoft and this is by design, which makes sense. However, both the Device Configuration Profile and Managed Home Screen App Configuration Profile offers settings for a Virtual Home Button. I have attempted to enable this as both a "swipe-up" and a "floating" virtual home button, in both the Device Config Profile and the App Config Profile, and the Virtual Home Button does not appear. I believe the issue is related to the Overlay Permissions, because when I have the Virtual Home Button enabled, the Managed Home Screen Settings shows a red notification which wants me to grant Overlay Permissions for the app. Those permissions have already been granted. When I turn off the Virtual Home Button, that notification goes away. Does anyone have any ideas on a solution for this issue? I do have an open ticket with Microsoft and will update this post if we reach a resolution. *Resolved* - The issue ended up being the 'Notification Windows' setting in the Device Configuration Profile. You have to turn that to 'Not Configured', and that will resolve the issue of the Overlay Permission alert (you'll still get this alert one time when the scanner is first setup, but after that it will go away), and it also resolves the issue of the Virtual Home Button not appearing if you have that setting turned on.
