Android Enrollment Methods Deep Dive: Zero Touch, QR, NFC, and Knox

Part 1 walked through the four management profiles[cite: 2]. Now, let’s talk about how you actually get a phone into one of them[cite: 2]. Android offers five real enrollment paths, and they aren’t one-size-fits-all[cite: 2]. Pick the wrong one for your setup, and you’ll easily turn a quick five-minute unboxing into an entire afternoon of manual tweaking per phone[cite: 2]. ...

August 16, 2026 · 3 min · Jason, Cyber Professional

Android in Intune 101: What You're Actually Managing

If you’re coming over from the Windows side of Intune, Android feels like a whole different beast on day one — because it is[cite: 1]. Windows management pretty much assumes one device, one main user, and one company owning the hardware[cite: 1]. Android, on the other hand, has to handle personal phones, shared devices, front-desk kiosks, and fully corporate-owned hardware all under the same MDM umbrella — sometimes even within the same tenant[cite: 1]. Before you start enrolling anything, you really need to map out your setup, or you’ll be spending the next few months untangling enrollment decisions[cite: 1]. ...

August 16, 2026 · 4 min · Jason, Cyber Professional

Android in Intune: Tips, Tricks, and Lesser-Known Features

Five parts down, and we’re wrapping up the series with the stuff that rarely makes it into official docs — the actual quirks and gotchas you only learn by running into them firsthand[cite: 5]. If you’ve been following along from Part 1, this final piece will save you a ton of headaches down the road[cite: 5]. ...

August 16, 2026 · 4 min · Jason, Cyber Professional

Best Practices & Policy Design for Android in Intune

Four parts in, you’ve got devices enrolled (Parts 1–3) and apps deployed (Part 4)[cite: 4]. This is where everything turns into a solid security posture rather than just a collection of working settings[cite: 4] — covering compliance policy design, how to actually choose between MAM and MDM, and the Android-specific Conditional Access quirks that love to trip up Windows admins[cite: 4]. ...

August 16, 2026 · 3 min · Jason, Cyber Professional

Part 4: Android App Management and Managed Google Play

Once your devices are enrolled using the methods from Part 2, the next immediate job is getting the right apps onto them — and locking down the wrong ones. On Windows, you might be used to pushing .msi or .win32 packages through Intune. On Android Enterprise, app management runs through a completely different pipeline: Managed Google Play. ...

August 16, 2026 · 3 min · Jason, Cyber Professional

What Is the Android Zero Touch Portal, Actually?

Part 2 named Zero Touch as the enrollment method that actually scales[cite: 3]. Let’s break down what’s actually happening under the hood[cite: 3]. “The device just configures itself” sounds like magic until you see the plumbing — but once you understand it, you’ll actually know how to troubleshoot it when something goes sideways[cite: 3]. ...

August 16, 2026 · 3 min · Jason, Cyber Professional