{"id":700,"date":"2025-10-31T14:02:02","date_gmt":"2025-10-31T13:02:02","guid":{"rendered":"https:\/\/digitalmaterial.ch\/blog\/?p=700"},"modified":"2025-10-31T15:04:22","modified_gmt":"2025-10-31T14:04:22","slug":"device-administrator-for-outlook-mobile-needed-in-work-profile-on-android-devices","status":"publish","type":"post","link":"https:\/\/digitalmaterial.ch\/blog\/device-administrator-for-outlook-mobile-needed-in-work-profile-on-android-devices\/","title":{"rendered":"Device Administrator for Outlook Mobile needed in Work Profile on Android Devices"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">When setting up Intune MDM for Android Devices for a customer, we ran into the issue of Outlook Mobile requesting Device Administrator rights, when started in the Work Profile.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Client had used the Outlook Mobile app in the personal profile without any issues. For us, this happened when using the &#171;personally-owned work profile&#187; on these devices, but I assume this behaviour would also appear when using any of the corporate-owned enrollment profiles.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What&#8217;s the problem?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As management over Device Administrator is already deprecated for devices with Google Mobile Services (GMS), we weren&#8217;t able to give Outlook the Device Admin rights. Which lead to the Device Administrator prompt appearing every time, Outlook Mobile was started:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"683\" height=\"1024\" src=\"https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/error-683x1024.png\" alt=\"\" class=\"wp-image-701\" style=\"width:335px;height:auto\" srcset=\"https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/error-683x1024.png 683w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/error-200x300.png 200w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/error-768x1152.png 768w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/error.png 1024w\" sizes=\"auto, (max-width: 683px) 100vw, 683px\" \/><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">user@contoso.com requires Outlook to be activated as a device administrator to ensure that security requirements are met for your account.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">When trying to activate, we were forwarded to the &#171;Settings&#187; app, where we had to confirm and enter the PIN\/Biometric verification. On the next start of the Outlook Mobile app, the message appeared again.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What&#8217;s the solution?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Old M365 Tenants that possibly also migrated from Exchange On-Prem to Exchange Online have an active &#171;Mobile device mailbox policy&#187; in the Exchange Online admin Center. If the &#171;Require a mobile device mailbox password&#187; box is checked, the Device Admin message is triggered: <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"435\" src=\"https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/solution-1024x435.png\" alt=\"\" class=\"wp-image-702\" srcset=\"https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/solution-1024x435.png 1024w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/solution-300x128.png 300w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/solution-768x326.png 768w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/solution-1536x653.png 1536w, https:\/\/digitalmaterial.ch\/blog\/wp-content\/uploads\/2025\/10\/solution.png 1776w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Why this policy does not apply to personal profiles, we do not know. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sources: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/techcommunity.microsoft.com\/blog\/intunecustomersuccess\/intune-ending-support-for-android-device-administrator-on-devices-with-gms-in-de\/3915443\">Intune ending support for Android device administrator on devices with GMS in December 2024 | Microsoft Community Hub<\/a> <\/li>\n\n\n\n<li><a href=\"https:\/\/developers.google.com\/android\/work\/device-admin-deprecation#:~:text=Device%20admin%20has%20been%20considered,APIs%20otherwise%20continue%20to%20function.\">Device admin deprecation &nbsp;|&nbsp; Android Enterprise &nbsp;|&nbsp; Google for Developers<\/a> <\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When setting up Intune MDM for Android Devices for a customer, we ran into the issue of Outlook Mobile requesting Device Administrator rights, when started in the Work Profile. The Client had used the Outlook Mobile app in the personal profile without any issues. For us, this happened when using the &#171;personally-owned work profile&#187; on [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[71,69,16,68,22,70],"class_list":["post-700","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-endpoint-management","tag-android-enterprise","tag-device-administraor","tag-intune","tag-mdm","tag-outlook","tag-outlook-mobile"],"_links":{"self":[{"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/posts\/700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/comments?post=700"}],"version-history":[{"count":9,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/posts\/700\/revisions"}],"predecessor-version":[{"id":718,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/posts\/700\/revisions\/718"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/media\/706"}],"wp:attachment":[{"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/media?parent=700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/categories?post=700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digitalmaterial.ch\/blog\/wp-json\/wp\/v2\/tags?post=700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}