Chapter materials
As with Chapter 2, this chapter will not cover all available policy types, so we will run through them all now to get a better understanding of what is available for Android devices. All profiles are available for creation for either corporate-owned (fully managed, dedicated, or work profile) or personally owned (work profile) devices. These profile types will be explained in the first recipe. We will also be concentrating on Android Enterprise devices; Android Device Administrator is now legacy and should not be used. Android Open Source Project (AOSP) is improving, but it is still less popular and has fewer options available.
The available profile types are as follows:
- OEM Config: We will cover this later in this chapter. It is for configuring manufacturer-specific OEM settings (where applicable).
- Derived credential: This is used for certificate authentication within apps. You can read more here: https://learn.microsoft.com/en-gb/mem/intune/protect...