We are pleased to announce that Microsoft Teams Android devices will be moving to Intune Android Open Source Project (AOSP) device management later this year. AOSP device management will be the mobile device management (MDM) platform for Teams devices going forward. This move will bring a more reliable experience, an improved deployment experience for admins, and it will serve as the platform for future innovation and richer management scenarios for Microsoft Teams Android devices.
AOSP Device Management is the replacement for the legacy Android Device Administrator solution used for managing Teams Devices.
This mandatory migration will take place over several months and will not start until Q4CY24 continuing into Q1CY25. We’ve taken great care to minimize the end user and IT admin impact with this migration, but there is action required for you as the IT admin. Following our published guidance for migration will only take a few minutes and will ensure your devices are seamlessly migrated between MDM platforms with a simple firmware upgrade and set you up for success for new device enrollments in the future. End users will notice no difference in device functionality.
There are two parts to a successful migration to AOSP Device Management:
- Step 1: Create new enrollment profiles & configuration/compliance policies in Intune. This step can be completed today, even before the firmware updates are available. Performing these steps will have no impact on existing devices but please note that failing to create enrollment profiles before performing step 2 will result in signed out Teams Devices.
- Step 2: Once the AOSP Device Management capable firmware is released in Teams Admin Center, you will need to install the firmware updates for each of the supported Teams Devices. This firmware update will automatically unenroll the device from Device Administrator and re-enroll the device with AOSP Device Management using the enrollment profile created in Step 1. This entire process will be done while the device remains signed into Teams. These firmware updates will be made available from Teams Admin Center as a manual update to allow you time to slowly migrate your devices. Updates will switch to automatic in Q1CY25 for those with large quantities of devices.
Step by step guidance on how to complete steps 1 and 2 (as well as guidance for configuration & compliance policies) can be found in the AOSP Device Management migration admin guide.
FAQ:
When will the firmware be available for my devices? How will I know it's available?
When AOSP DM compatible firmware is available for your devices a firmware update will show as available for your Teams Device in Teams Admin Center. This is planned for Q4CY24, more precise dates will be pushed once testing has completed.
My organization uses device identifiers today combined with enrollment restrictions to limit Android Device Administrator enrollment, is there something similar with AOSP Device Management?
We've made this easier with AOSP Device Management! Teams Android Devices automatically enroll as corporate with no need to filter because when you set the Teams Devices toggle in the enrollment profile, only Teams Devices can enroll with AOSP DM, end user mobile devices do not have a way to enroll with AOSP DM so there is no need to use enrollment restrictions like before.
My organization does not enroll our Teams Android Devices in Intune today, do we need to do anything?
No, if your organization does not enroll its Teams Devices into Intune today and currently has the Intune license unassigned from accounts signing into Teams Devices, there will be no impact when you install the new device firmware which supports AOSP device management. Your devices will get the new management applications, but no action is required beyond updating the devices to the new firmware once released.
What happens if I don’t do anything?
Devices will initially be offered firmware updates manually through Teams Admin Center, however in early 2025 this will change to automatic update regardless of admin action.
If your organization does enroll its Teams devices into Intune, then by not creating an enrollment profile, devices will fail to enroll properly in Intune and will thus not be able to sign in (or sign out if they were already signed in before). Not creating new AOSP policies could lead to unexpected issues in your environment, as Device Administrator policies will not be migrated automatically.
Wait, I don’t have to enroll my devices in Intune at all? Why would I want to use Intune?
Intune provides a security wrapper around your devices allowing you to set security controls as well as detect if the device is compliant with your organization security requirements prior to allowing the device to sign in to your M365 instance.
Are there devices that will not migrate to AOSP Device Management?
All devices currently certified and supported for Microsoft Teams will be migrated, those devices can be found here:
There are some Teams Android Devices that were previously supported, but are now end of life, which you may still have in your environment, those legacy devices specifically not migrating are listed here:
- AudioCodes C448HD (Teams Phone)
- AudioCodes C450HD (Teams Phone)
- AudioCodes RXV80 (Teams Rooms on Android)
- Crestron UC-2 (Teams Phone)
- Crestron UC-P8 (Teams Phone)
- Crestron UC-P8-I (Teams Phone)
- Crestron UC-P10 (Teams Phone)
- Crestron UC-P10-I (Teams Phone)
- Crestron UC-P8-C (Teams Phone)
- Crestron UC-P8-C-I (Teams Phone)
- Crestron UC-P10-C (Teams Phone)
- Crestron UC-P10-C-I (Teams Phone)
- Crestron UC-P8-TD (Teams Display)
- Crestron UC-P8-TD-I (Teams Display)
- Crestron UC-P10-TD (Teams Display)
- Crestron UC-P10-TD-I (Teams Display)
- EPOS Expand Vision 3T (Teams Rooms on Android)
- Lenovo ThinkSmart View (Teams Display)
- Polycom Trio 8500 (Teams Phone)
- Polycom Trio 8800 (Teams Phone)
- Yealink T55/55A (Teams Phone)
- Yealink T56/56A (Teams Phone)
- Yealink T58/58A (Teams Phone)
- Yealink CP960 (Teams Phone)
- Yealink VP59 (Teams Phone)
- Yealink MP52 (Teams Phone)
- Yealink VC210 (Teams Rooms on Android)
What happens with those devices that will not migrate?
The devices listed above will remain on Android Device Administrator. These devices can still be used once Android Device Administrator is fully deprecated but will be considered legacy and unsupported where features may be removed at any time. To use the device you will need to unenroll from Intune and then sign the device back in without an Intune license assigned to the account, more information about this can be found here: Manage Intune devices with Android device administrator | Microsoft Learn
Will I notice anything different with the devices after the migration?
No, the devices will not look any different from an end user perspective. As an IT admin you will see two new applications installed on your devices (visible in the software health tab in Teams Admin Center), these two applications are the “Authenticator” app and the “Microsoft Intune” app these applications replace the previous “Company Portal” application.
Does the sign-in process for devices change once this migration has been completed?
No, there is no change to the sign-in process or the look and feel of your devices with this migration.
Why not use Android Enterprise?
Android Enterprise specifically requires Google Mobile Services, and since Teams Devices do not contain Google Mobile Services, AOSP Device Management is our solution.
What if once this migration is complete, I take a device out of storage that has not been through the migration? Will I be able to upgrade it?
Yes, there will be out of box updates available to ensure devices are able to receive the latest apps and can be automatically enrolled using AOSP DM.
When creating the enrollment profile, how long should I set the enrollment profile token expiration date?
if you're participating in private preview of AOSP DM, please ensure your enrollment policy has a 90 day or shorter expiration until replacing this with a extended enrollment profile for GA. For those waiting for General Availability without having any devices in preview, feel free to utilize the 65 year expiration.
Once AOSP DM is generally available and I have a device I want to setup for the first time, will I need to use the QR code option in the enrollment profile? Or do I need to create another enrollment profile?
No, the QR code you can generate when creating an AOSP DM enrollment profile in Intune is not applicable for Teams Android Devices and will not be available for use if the "Teams Device" toggle is selected when creating the enrollment profile. And no, for brand new devices signing in for the first time after AOSP DM is generally available, they will enroll using the existing enrollment profile you've created in the migration documentation.
I am a new customer to Teams Devices and want to skip Android Device Administrator, can I enroll my devices using AOSP DM now?
First, thank you for purchasing Teams Devices! But to ensure stability, supportability, and a positive customer experience, we've limited AOSP DM to a subset of preview customers with existing Teams Devices. We ask all new customers to please use Android Device Administrator until AOSP DM is generally available.
Who do I contact if I need more support or information?
Please reach out to your Microsoft account representatives or open a support case for more details.
