erik365.blog<p><strong>Transitioning Teams Android Devices to AOSP Device Management from Device Administrator</strong></p><p>This blog post is about the required transition of <strong>Teams Android devices</strong> to the <strong>Android Open Source Project (AOSP) Device Management </strong>in Microsoft Intune. This is a <strong>new mobile device enrollment method</strong> which requires some actions to be completed to keep your Teams Android devices up and running. The current method is the Android Device Administrator for Teams Devices on Android.</p><ol><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#device-management-changes-for-microsoft-teams-android-devices" rel="nofollow noopener" target="_blank">Device Management Changes for Microsoft Teams Android Devices</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#what-is-android-device-administrator" rel="nofollow noopener" target="_blank">What is Android Device Administrator?</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#what-is-aosp" rel="nofollow noopener" target="_blank">What is AOSP?</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#what-steps-do-i-have-to-configure-at-least" rel="nofollow noopener" target="_blank">What steps do I have to configure at least?</a><ol><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#configure-new-aosp-management-enrollment-profiles" rel="nofollow noopener" target="_blank">Configure new AOSP management enrollment profiles</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#configure-aosp-management-configuration-policies" rel="nofollow noopener" target="_blank">Configure AOSP Management Configuration Policies</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#configure-aosp-management-compliance-policies" rel="nofollow noopener" target="_blank">Configure AOSP Management Compliance Policies</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#deploy-aosp-management-capable-device-firmware" rel="nofollow noopener" target="_blank">Deploy AOSP Management capable device firmware</a></li></ol></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#extended-token-expiration-in-intune-aosp-device-enrollment-profile-october-8-2024" rel="nofollow noopener" target="_blank">Extended Token Expiration in Intune AOSP Device Enrollment Profile (October 8, 2024)</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#updating-teams-phone-yealink-mp56-october-8-2024" rel="nofollow noopener" target="_blank">Updating Teams Phone (Yealink MP56, October 8, 2024)</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#update-december-10-2024" rel="nofollow noopener" target="_blank">📫 Update December 10, 2024 📫</a></li><li><a class="" href="https://erik365.blog/2024/08/13/transitioning-teams-android-devices-to-aosp-device-management-from-device-administrator/#update-june-22-2025" rel="nofollow noopener" target="_blank">📫 Update June 22, 2025 📫</a></li></ol><p><strong>Device Management Changes for Microsoft Teams Android Devices</strong></p><a href="https://erik365.blog/wp-content/uploads/2024/08/image-5.png" rel="nofollow noopener" target="_blank"></a>Source: <a href="https://admin.microsoft.com/#/MessageCenter/:/messages/MC665936" rel="nofollow noopener" target="_blank">Microsoft 365 message center MC665936 Device Management Changes for Microsoft Teams Android Devices</a><p><strong>What is Android Device Administrator?</strong></p><p><strong>Android Device Administrator</strong> in Microsoft Intune is a <strong>legacy method</strong> for managing Android devices, allowing IT admins to enforce policies and manage apps on enrolled devices. However, this method <strong>is being deprecated</strong>, with support ending on <strong>December 31, 2024</strong>, for devices with access to Google Mobile Services (GMS). Admins are encouraged to transition to Android Enterprise for more advanced and secure management options. In case of Teams Android Devices AOSP is the way to go.</p><p><strong>What is AOSP?</strong></p><p>Android Open Source Project (AOSP) Management in Microsoft Intune is designed for <strong>managing</strong> corporate-owned <strong>Android devices that do not use Google Mobile Services (GMS)</strong>. It allows IT admins to enforce policies and manage apps on these devices, which are often used for specific tasks or shared among multiple users. Transitioning to AOSP Device Management is recommended if you have been using Android Device Administrator, as it provides a more secure and modern management solution.</p><p><strong>What steps do I have to configure at least?</strong></p><p>To enable AOSP you must enable and configure it in your Microsoft Intune tenant accordingly. The following steps provide an overview:</p><ol><li>Configure new AOSP management enrollment profiles</li><li>Configure AOSP Management Configuration & Compliance Policies</li><li>Deploy AOSP Management capable device firmware</li></ol><p><strong>Configure new AOSP management enrollment profiles</strong></p><ul><li><a href="https://intune.microsoft.com/" rel="nofollow noopener" target="_blank">https://intune.microsoft.com/</a></li><li>Devices</li><li>Enrollment</li><li>Android</li></ul><a href="https://erik365.blog/wp-content/uploads/2024/08/image-6.png" rel="nofollow noopener" target="_blank"></a><ul><li>Corporate-owned, user-associated devices</li></ul><a href="https://erik365.blog/wp-content/uploads/2024/08/image-7.png" rel="nofollow noopener" target="_blank"></a><ul><li>Create profile</li></ul><a href="https://erik365.blog/wp-content/uploads/2024/08/image-8.png" rel="nofollow noopener" target="_blank"></a><ul><li>Save the profile</li></ul><p><strong>Configure AOSP Management Configuration Policies</strong></p><p>I’m not walk through these steps because currently only the <strong>Device Restrictions profile</strong> with <strong>“block screen capture”</strong> is allowed. Furthermore, this is optional.</p><p><strong>Configure AOSP Management Compliance Policies</strong></p><p>Also, the supported set for device compliance is limited to:</p><ul><li>rooted devices can be blocked</li><li>minimum OS version</li><li>maximum OS version</li><li>System Security Require encryption of data storage on device</li></ul><p><strong>Deploy AOSP Management capable device firmware</strong></p><p>This step cannot be carried out currently via the Teams Admin Center (TAC) because the AOSP firmware is not yet there but will probably become available during H2 2024.</p><p>If the configuration was successful Microsoft says that it should later on show the Microsoft Intune and Authenticator App on the Teams Android device as the following screenshot by Microsoft shows.</p><a href="https://erik365.blog/wp-content/uploads/2024/08/image-9.png" rel="nofollow noopener" target="_blank"></a>Source: <a href="https://learn.microsoft.com/en-us/microsoftteams/rooms/android-migration-guide#setup-aosp-management-enrollment-profiles" rel="nofollow noopener" target="_blank">https://learn.microsoft.com/en-us/microsoftteams/rooms/android-migration-guide#setup-aosp-management-enrollment-profiles</a><p>To compare it, currently before AOSP it should look like this:</p><a href="https://erik365.blog/wp-content/uploads/2024/08/image-10.png" rel="nofollow noopener" target="_blank"></a>Source: Screenshot, see TAC Devices \ Phones \ <Device> \ Health<p><strong>Extended Token Expiration in Intune AOSP Device Enrollment Profile (October 8, 2024)</strong></p><p>Microsoft changed the <strong>validation period for AOSP Device Enromment Profile</strong> tokens. That’s why I deleted the old AOSP profile and created a new one because the old one blocked me from creating a new, second one. The following screenshot shows the expiration date in the year 2089 not just a few days in the future.</p><a href="https://erik365.blog/wp-content/uploads/2024/08/image-19.png" rel="nofollow noopener" target="_blank"></a><p><strong>Updating Teams Phone (Yealink MP56, October 8, 2024)</strong></p><p>Recently I checked my demo device, a Teams Phone, Yealink MP56 via Teams Admin Center. It displayed available updates, so I initiated the updates as the following screenshots show.</p><a href="https://erik365.blog/wp-content/uploads/2024/08/image-17.png" rel="nofollow noopener" target="_blank"></a><a href="https://erik365.blog/wp-content/uploads/2024/08/image-18.png" rel="nofollow noopener" target="_blank"></a><p><strong>📫 Update December 10, 2024 📫</strong></p><p>There is now a list available in the faq section showing a list of devices and when each is probably get its firmware upgrade automatically. <a href="https://techcommunity.microsoft.com/blog/microsoftteamssupport/moving-teams-android-devices-to-aosp-device-management/4140893" rel="nofollow noopener" target="_blank">https://techcommunity.microsoft.com/blog/microsoftteamssupport/moving-teams-android-devices-to-aosp-device-management/4140893</a></p><p>…</p>Source: <a href="https://techcommunity.microsoft.com/blog/microsoftteamssupport/moving-teams-android-devices-to-aosp-device-management/4140893" rel="nofollow noopener" target="_blank">https://techcommunity.microsoft.com/blog/microsoftteamssupport/moving-teams-android-devices-to-aosp-device-management/4140893</a><p>What’s also interesting to read is:</p><blockquote><p><strong>Isn’t Device Administrator being deprecated by end of year 2024? What happens if my devices haven’t migrated to AOSP by then?</strong></p><p>Although Device Administrator will be deprecated by end of year for devices with GMS, Teams Devices are not GMS devices and therefore will remain supported with Device Administrator for Intune enrollment until AOSP migration is completed as Device Administrator is not being deprecated for non-GMS devices. </p></blockquote><p><strong>📫 Update June 22, 2025 📫</strong></p><p>After my Yealink MP56 was offline for some time, I reconnected it to bring it back online. I noticed that a firmware upgrade had been carried out. After it finished, I could finally see that it was on AOSP by checking the Software Health via TAC.</p><a href="https://erik365online.wordpress.com/wp-content/uploads/2024/08/image-20.png" rel="nofollow noopener" target="_blank"></a><p><strong>Resources</strong></p><ul><li><a href="https://admin.microsoft.com/#/MessageCenter/:/messages/MC665936" rel="nofollow noopener" target="_blank">Microsoft 365 message center MC665936 Device Management Changes for Microsoft Teams Android Devices</a></li><li><a href="https://learn.microsoft.com/en-us/microsoftteams/rooms/android-migration-guide" rel="nofollow noopener" target="_blank">Migration guide Android AOSP management for Microsoft Teams Android devices – Microsoft Teams | Microsoft Learn</a></li><li><a href="https://techcommunity.microsoft.com/t5/microsoft-teams-blog/what-s-new-in-microsoft-teams-rooms-and-devices-at-enterprise/ba-p/3770137" rel="nofollow noopener" target="_blank">What’s new in Microsoft Teams Rooms and Devices at Enterprise Connect – Microsoft Community Hub</a></li><li><a href="https://techcommunity.microsoft.com/t5/intune-customer-success/intune-ending-support-for-android-device-administrator-on/ba-p/3915443" rel="nofollow noopener" target="_blank">Intune ending support for Android device administrator on devices with GMS in December 2024 – Microsoft Community Hub</a></li><li><a href="https://learn.microsoft.com/en-us/mem/intune/enrollment/android-enroll-device-administrator" rel="nofollow noopener" target="_blank">Manage Intune devices with Android device administrator | Microsoft Learn</a></li><li><a href="https://techcommunity.microsoft.com/t5/intune-customer-success/decreasing-support-for-android-device-administrator/ba-p/1441935" rel="nofollow noopener" target="_blank">Decreasing support for Android device administrator – Microsoft Community Hub</a></li><li><a href="https://learn.microsoft.com/en-us/mem/intune/enrollment/android-aosp-corporate-owned-userless-enroll" rel="nofollow noopener" target="_blank">Set up Android (AOSP) device management in Intune for corporate-owned userless devices – Microsoft Intune | Microsoft Learn</a></li><li><a href="https://learn.microsoft.com/en-us/mem/intune/enrollment/android-aosp-corporate-owned-user-associated-enroll" rel="nofollow noopener" target="_blank">Set up Android (AOSP) device management in Intune for corporate-owned user-associated devices – Microsoft Intune | Microsoft Learn</a></li><li><a href="https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-aosp" rel="nofollow noopener" target="_blank">Device restriction settings for Android (AOSP) in Microsoft Intune | Microsoft Learn</a></li></ul><p><a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/android/" target="_blank">#Android</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/calling/" target="_blank">#Calling</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/devices/" target="_blank">#Devices</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/intune/" target="_blank">#Intune</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/microsoft-365/" target="_blank">#Microsoft365</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/microsoft-teams/" target="_blank">#MicrosoftTeams</a> <a rel="nofollow noopener" class="hashtag u-tag u-category" href="https://erik365.blog/tag/telephony/" target="_blank">#Telephony</a></p>