Android Enterprise: Work Profile, Fully Managed, or Dedicated, which fits us?
Android Enterprise has three modes. Work Profile on a personal device: work data in a separate container, the personal side stays with the user. Fully Managed: you own the device, you manage everything. Dedicated (kiosk): one app or fixed set, for forklift drivers or reception desks. SMB default: Work Profile for BYOD, Fully Managed for devices you buy.
Try this first
- 1Inventory who has what: BYOD, COPE (corporate owned, personally enabled), or pure work devices.
- 2Link Google to your MDM (Intune > Tenant admin > Connectors > Managed Google Play, or the Jamf/Mosyle equivalent), free Google account via that flow.
- 3Build config profiles per mode, not per user, so it stays manageable as you grow.
- 4Push corporate apps via Managed Google Play, no sideload.
When to bring us in
We pick the mix together, link Google to your MDM, and set up the three profiles on test devices before broad rollout.
See also
- Work and personal apps blur together on the same phoneAndroid Enterprise and iOS-with-Intune can enforce a work profile, isolating business apps in a separate container.
- Setting up Microsoft 365 on a new phoneOutlook, Teams, and OneDrive run smoothest if you install Authenticator first and sign the others in afterwards.
- Moving Authenticator to a new phoneMicrosoft Authenticator has built-in cloud backup. Run it before wiping the old device, otherwise everything has to be re-added by hand.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.