11.6 Enrolling an Android Device

This scenario shows you how to enroll an Android device as a fully managed device in your ZENworks Management Zone.

11.6.1 Procedure

  1. In the Google Chrome browser on the Android device, enter ZENworks_server_address/zenworks-eup, where ZENworks_server_address is the DNS name or IP address of the ZENworks MDM Server.

    NOTE:You must use Google Chrome. The built-in Internet browser is not supported.

    The login screen for the ZENworks User Portal is displayed. You use the user portal to enroll devices to the zone.

    All devices associated with the user, are displayed in the ZENworks User Portal.

  2. Enter the user’s user name and password. If Allow Simple Enrollment option is selected for the user source to which the user belongs, then the registration domain need not be specified or else specify the registration domain. For information, see Section 4.2, Enabling a User Source for Mobile Device Enrollment. Tap Sign In.

    NOTE:If the Allow Simple Enrollment option is not enabled or the registration domain name is not configured, then you can specify the configured user source name in the Domain field while enrolling a device.

  3. Tap Enroll in the upper-right corner to display the enrollment options for the device.

    The enrollment options are determined by the Mobile Enrollment policy assigned to the user. For details, see Creating a Mobile Enrollment Policy.

  4. Tap Managed Device Only.

  5. Tap Download App. The user will be directed to the Google Play Store, where the user needs to click Install to install the ZENworks Agent app. After installation, click Open.

  6. Click Activate this Device Administrator to enable you to manage the device by performing the operations listed in this screen.

    NOTE:For Android Marshmallow and subsequent versions, ensure that the user accepts the READ_WRITE_PHONE permission and WRITE_EXTERNAL_STORAGE permission after downloading and launching the app. Contrary to the statement mentioned in the dialog box, the READ_WRITE_PHONE permission does not make any calls and does not collect phone logs. This permission is required to identify the device’s information such as the serial number and IMEI number. The WRITE_EXTERNAL_STORAGE permission is required to access the device storage to create logs that can be used for troubleshooting.

  7. The ZENworks Agent app login screen is displayed.

  8. Fill in the fields, then tap Sign In.

    • User name, Password, Domain, Server URL: Use the same user name, password, and registration domain (if required) that you had initially used to log in to the ZENworks User Portal along with the server URL of the ZENworks MDM Server. You can obtain this information from the ZENworks User Portal as displayed in Step 4.

    If you configured your Mobile Enrollment policy to allow the user to specify the device ownership (corporate or personal), you are prompted for that information. Tap OK. The device will be automatically enrolled to the zone.

  9. The ZENworks Agent App Home screen is displayed, showing that the device is enrolled and active.

    After the device is enrolled to the ZENworks Management Zone, you can view the device information in ZCC. To view the device information, from the left hand side navigation pane in ZCC, click Devices > Mobile Devices (or navigate to the folder as configured in the Mobile Enrollment Policy) and select the appropriate device. The enrollment mode will be displayed as Android App.

  10. After ZENworks Agent app enrollment, based on the assigned Mobile Email Policy, an email is sent to the user with the corporate email account settings. This email can be accessed from the email client’s web application or from any other device. With this information, the user needs to manually configure the email account on the device to send or receive corporate emails. You need to configure an SMTP server, to enable ZENworks to send these email notifications. For more information on configuring an SMTP server, see Event and Messaging Settings in the ZENworks 2017 Management Zone Settings Reference guide.

  11. After configuring the corporate email account, the device will enroll and automatically reconcile to the device object that was initially created when the ZENworks Agent app enrollment was completed. The enrollment mode changes to Android App + ActiveSync on the Device Information page in ZCC. For more information, see Viewing Device Information.

NOTE:After configuring an ActiveSync account, if the device is unable to auto reconcile to the device object that was created after ZENworks Agent app enrollment and if Allow Manual Reconciliation by User is checked in the assigned Device Enrollment Policy, the user will be prompted to manually reconcile the device. For details, see Allowing Manual Reconciliation by User.

If a Mobile Email Policy is unassigned from the device that is enrolled to the ZENworks Management Zone, then the user receives an email stating that corporate emails cannot be sent or received on the device. You can edit the contents of this email in ZCC by navigating to Configuration > Mobile Management > Email Notifications. Click the relevant email and edit its contents.