How to enroll a device in Android Enterprise as Device Owner

Organizations use UEMs to configure, manage, and secure the endpoint devices distributed to their employees. To set up and manage a device using Hexnode, it has to be first enrolled in the UEM solution. Hexnode offers several methods to enroll Android devices. One such method is enrolling the device in the Android Enterprise program.

You can enroll a company-owned device in Android Enterprise as Device Owner. Use Profile Owner enrollment to enroll employees’ BYO devices. Device Owner enrollment restricts you from accessing the apps other than those allowed by your organization. Whereas in Profile Owner, both the personal and work apps are available on the same device.

First, enroll your organization in Android Enterprise program and then go through the steps mentioned below to enroll your device as a device owner.

Make Hexnode For Work App the Device Owner

If you make Hexnode For Work app Device Owner, all the personal apps from the device will get removed and will get restricted to only work apps which are allowed by the organization.

If you are using a device that is already set up, reset the device to its factory settings to begin enrollment. Ensure that you remove all the accounts associated with your device prior to the factory reset. If you are using a new device, you can initialize enrollment from the device Welcome screen.

Android 7.0 or later

For devices running Android 7+ and above,

On the Hexnode UEM console,

1. Navigate to Enroll > Platform-Specific > Android > Android Enterprise > Organization.
2. Under Organization, a QR code of the default enrollment profile will be displayed along with configured organization and enrollment profile details.
Note:


You can also view the QR Code on your Hexnode UEM portal from Enroll > All Enrollments > Enterprise > Android Enterprise > Organization or Admin > Android Enterprise > Organization.




3. Change the default enrollment profile to the desired one, where the Enterprise management type was set as Device owner during its creation. This will update the QR code and other details according to the configuration of the selected enrollment profile. You can create a new profile by navigating to Enroll > Platform-Specific > Android > Android Enterprise > Enrollment Profiles.
Note:


The default enrollment profile should not be removed or deleted from the Hexnode UEM console until the device has completed its enrollment process; otherwise, the enrollment process will fail.

On the Device,

1. Tap on the welcome screen 6 times.



2. A QR code reader will get installed on your device.
Note:

• Devices without a built-in QR code scanner will prompt users to connect to a network before scanning the QR code. In such cases, if the Add Wi-Fi Network Configuration to QR Code option is configured while setting up the enrollment profile, ensure the device is connected to the same network specified in the portal before scanning the QR code; otherwise, the scan will fail.
• If the device is not in the range of the configured Wi-Fi network after scanning the QR Code, it will continue returning to the QR Code scanning page until the device can be connected to the configured network.

3. On your Hexnode UEM portal, Navigate to Admin > Android Enterprise. A QR code will be present on the screen.
   
   Note:

   You can also view the QR Code on your Hexnode MDM portal from Enroll > All Enrollments > Enterprise > Android Enterprise > Organization or Enroll > Platform-Specific > Android > Android Enterprise > Organization.

4. Scan the QR code. Now the device will get connected to the Wi-Fi network configured in the portal. If not configured, manually connect your device to a network.



5. Click on Accept & Continue to continue the installation process.



6. Enable all necessary Hexnode UEM app configurations, such as Device administration, Usage Access, Draw Over Apps, etc., and tap Next.



7. Your device will begin enrolling with Hexnode UEM.



8. The installation is successfully completed as soon as a work account is created on your device.

Android 6.0 or later

For devices running Android 6 and above, reset the device to its factory settings to enroll the device.

1. Follow the on-screen procedure for setting-up the device.
2. When prompted to enter your Google Account, enter ‘afw#hexnodemdm’ and click Next.
   
3. To install Hexnode for Work app on your device, click on Install.
   
4. Click on Install to confirm installing Hexnode for Work app.
   
5. Either enter the Hexnode server name or scan the QR Code and click Next.
   
   Note:

   On your Hexnode MDM portal, go to Enroll > Platform-Specific > Android > QR Code, Email or SMS to view the QR Code.

   
   
6. Click on Agree after reading Hexnode End-User License Agreement.
   
7. Click on Continue to set up your device in Device Owner Mode. This allows admins to enforce complete control over your device. You will be prompted to confirm setting up your device as device owner. Click on Continue. Click on Cancel to cancel the installation process.
   
8. Click on SET UP to continue the installation process.
   
9. Enable Device administration, Usage Access, Draw over apps, Write system settings and Notification access permissions. Click on Next.
   
10. Your device will begin enrolling with Hexnode UEM.
    
11. The installation is successfully completed as soon as a work account is created on your device.
    

Android 5.0 or later:

For devices running Android 5.0 or above, after the initial factory reset,

1. On your device, navigate to Settings > System > About phone.
2. Tap on Build number 7 times to turn on Developer Options.
3. Go back to System Settings and click on Developer Options.
4. Enable USB debugging option from the list.
5. Next, download Hexnode for Work APK.
6. Download and install Android Debug Bridge (ADB) on your system. Open the command prompt and type in the path where the adb folder resides. For example, if you have installed adb in C drive, the command would be as follows:
   adb command to set adb location

   Shell

   cd C:\adb

   1	cd  C:\adb

7. Next, run the following command to initialize adb.
   adb command to start server

   Shell

   adb start-server

   1	adb start-server

8. Connect the device to the computer and run the command to install the APK downloaded earlier.
   adb command to install Hexnode app

   Shell

   adb install /path to HexnodeMDMWork.apk/

   1	adb install /path to HexnodeMDMWork.apk/

9. Type in the following command to make Hexnode for Work a device owner:
   adb command to set device owner

   Shell

   adb shell dpm set-device-owner com.hexnode.mdm.work/com.hexnode.mdm.receivers.HexnodeDeviceAdminReceiver

   1	adb shell dpm set-device-owner com.hexnode.mdm.work/com.hexnode.mdm.receivers.HexnodeDeviceAdminReceiver

10. Enter your Hexnode server name. Click on Next.
    
11. Click on Agree after reading Hexnode End-User License Agreement.
    
12. Enable Device administration, Usage Access, Draw over apps, Write system settings and Notification access permissions. Click on Next.
    
13. Your device will begin enrolling with Hexnode UEM.
    
14. The installation is successfully completed as soon as a work account is created on your device.