Before you enable Android enterprise devices in Microsoft Intune, you must determine whether you want to enroll those devices as personal devices (BYOD or Bring Your Own Device) or as dedicated devices (formerly known as COSU, or Corporate Owned Single Use). The example used in this guide focuses on BYOD scenarios. For more information about dedicated devices (COSU) scenarios, see COSU Configuration and Enrollment using the QR code enrollment method.

BYOD devices are set up with an Android Enterprise work profile which is a feature built into Android 5.1 and later versions. This feature allows work apps and data to be stored in a separate, self-contained, company managed space on the device. Because personal apps and data remain on the device inside the user’s personal profile, employees can continue to use their device as they usually would. 

Dedicated devices are typically locked to a single app or set of apps (also known as kiosk mode) which allows the administrator to control things such as the status bar, keyboard layouts, the lock screen and other settings on the device. It prevents users from enabling other apps or changing certain settings on dedicated devices. Be aware that devices that you manage in this manner are enrolled in Intune without a user account and aren't associated with any end-user. They aren't intended for personal use applications or apps that have a strong requirement for user-specific account data such as Outlook or Gmail. 

When you decide how to enroll your devices, also be aware that not all features are available for both methods. The following table shows some key differences.

Feature Set

Work Profile (BYOD)

Dedicated (Kiosk)

Managed Email Profile

×

Managed Wi-Fi Profile

Managed VPN Profile

×

SCEP Certificate Profile

×

PKCS Certificate Profile

×

Trusted Certificate Profile

×

Custom Profile

×

Prevent Factory Reset

×

Block Camera & Screen capture

Block Volume Buttons

×

Block Copy and Paste / Data Sharing

Managed Password

Managed Applications (Required)

Managed Applications (Available)

×

Containerized Profile

×

Kiosk Level Device Management

×

Personal Device Management

×

NFC-Based Enrollment

×

Token-Based Enrollment

×

QR Code-Based Enrollment

×

Zero Touch

×

Compliance/Conditional Access

×

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×