Transitioning Teams Android Devices to AOSP Device Management from Device Administrator
This blog post is about the required transition of Teams Android devices to the Android Open Source Project (AOSP) Device Management in Microsoft Intune. This is a new mobile device enrollment method which requires some actions to be completed to keep your Teams Android devices up and running. The current method is the Android Device Administrator for Teams Devices on Android.
- Device Management Changes for Microsoft Teams Android Devices
- What is Android Device Administrator?
- What is AOSP?
- What steps do I have to configure at least?
- Configure new AOSP management enrollment profiles
- Configure AOSP Management Configuration Policies
- Configure AOSP Management Compliance Policies
- Deploy AOSP Management capable device firmware
- Extended Token Expiration in Intune AOSP Device Enrollment Profile (October 8, 2024)
- Updating Teams Phone (Yealink MP56, October 8, 2024)
Update December 10, 2024 
Update June 22, 2025 
Device Management Changes for Microsoft Teams Android Devices
Source:
Microsoft 365 message center MC665936 Device Management Changes for Microsoft Teams Android DevicesWhat is Android Device Administrator?
Android Device Administrator in Microsoft Intune is a legacy method for managing Android devices, allowing IT admins to enforce policies and manage apps on enrolled devices. However, this method is being deprecated, with support ending on December 31, 2024, for devices with access to Google Mobile Services (GMS). Admins are encouraged to transition to Android Enterprise for more advanced and secure management options. In case of Teams Android Devices AOSP is the way to go.
What is AOSP?
Android Open Source Project (AOSP) Management in Microsoft Intune is designed for managing corporate-owned Android devices that do not use Google Mobile Services (GMS). It allows IT admins to enforce policies and manage apps on these devices, which are often used for specific tasks or shared among multiple users. Transitioning to AOSP Device Management is recommended if you have been using Android Device Administrator, as it provides a more secure and modern management solution.
What steps do I have to configure at least?
To enable AOSP you must enable and configure it in your Microsoft Intune tenant accordingly. The following steps provide an overview:
- Configure new AOSP management enrollment profiles
- Configure AOSP Management Configuration & Compliance Policies
- Deploy AOSP Management capable device firmware
Configure new AOSP management enrollment profiles
- Corporate-owned, user-associated devices
Configure AOSP Management Configuration Policies
I’m not walk through these steps because currently only the Device Restrictions profile with “block screen capture” is allowed. Furthermore, this is optional.
Configure AOSP Management Compliance Policies
Also, the supported set for device compliance is limited to:
- rooted devices can be blocked
- minimum OS version
- maximum OS version
- System Security Require encryption of data storage on device
Deploy AOSP Management capable device firmware
This step cannot be carried out currently via the Teams Admin Center (TAC) because the AOSP firmware is not yet there but will probably become available during H2 2024.
If the configuration was successful Microsoft says that it should later on show the Microsoft Intune and Authenticator App on the Teams Android device as the following screenshot by Microsoft shows.
Source:
https://learn.microsoft.com/en-us/microsoftteams/rooms/android-migration-guide#setup-aosp-management-enrollment-profilesTo compare it, currently before AOSP it should look like this:
Source: Screenshot, see TAC Devices \ Phones \ <Device> \ Health
Extended Token Expiration in Intune AOSP Device Enrollment Profile (October 8, 2024)
Microsoft changed the validation period for AOSP Device Enromment Profile tokens. That’s why I deleted the old AOSP profile and created a new one because the old one blocked me from creating a new, second one. The following screenshot shows the expiration date in the year 2089 not just a few days in the future.
Updating Teams Phone (Yealink MP56, October 8, 2024)
Recently I checked my demo device, a Teams Phone, Yealink MP56 via Teams Admin Center. It displayed available updates, so I initiated the updates as the following screenshots show.
Update December 10, 2024 
There is now a list available in the faq section showing a list of devices and when each is probably get its firmware upgrade automatically. https://techcommunity.microsoft.com/blog/microsoftteamssupport/moving-teams-android-devices-to-aosp-device-management/4140893
…
Source:
https://techcommunity.microsoft.com/blog/microsoftteamssupport/moving-teams-android-devices-to-aosp-device-management/4140893What’s also interesting to read is:
Isn’t Device Administrator being deprecated by end of year 2024? What happens if my devices haven’t migrated to AOSP by then?
Although Device Administrator will be deprecated by end of year for devices with GMS, Teams Devices are not GMS devices and therefore will remain supported with Device Administrator for Intune enrollment until AOSP migration is completed as Device Administrator is not being deprecated for non-GMS devices.
Update June 22, 2025 
After my Yealink MP56 was offline for some time, I reconnected it to bring it back online. I noticed that a firmware upgrade had been carried out. After it finished, I could finally see that it was on AOSP by checking the Software Health via TAC.
Resources