Assist users of managed Android devices
If you have the legacy free edition of Google Apps, upgrade to G Suite to get this feature.
As a G Suite administrator, you can manage users' Android devices that are enrolled for management. Users need to install the Google Apps Device Policy app so you can enforce security policies on the device. For details about the app, see About the Google Apps Device Policy for Android.
Troubleshoot Android devicesError messages
Authentication failed. Please re-enter your password and try again.
This error might display after a user has installed the Google Apps Device Policy app and is trying to set it up with their G Suite account.
Have them repeat step 2 in Set up the Google Apps Device Policy app on your phone or tablet a couple times, selecting their G Suite account. They might need to reenter their password if they see this error message.
Sign-in error for [email-address].
This error might display in a user's Android status bar at the top of the screen when setting up the Google Apps Device Policy app.
When your user taps the error on their device, they're taken to a screen that says "You entered the wrong password or your account has changed. Please re-enter your password." Have your user re-enter their password.
Your domain requires mobile device management. Please install the Google Apps Device Policy application to enforce security policies required by the [email-address] account.
Users might get this error if you've enabled device activation and they haven't installed the Google Apps Device Policy on their device yet. Have your user tap the download button on their device to download the app.
A managed account already exists. Only one managed account is allowed for this device.
Users might see this message on company-owned devices or devices with a work profile if they try to add more than one managed G Suite account to the device. The user needs to remove all but one managed G Suite account from their device. For details, see Remove an account from an Android device.
This is a security-compromised device. Administrator has disabled it.
Users see this error if their device is compromised. For example, the device is rooted—a process that removes restrictions on the device. The user’s account stops syncing to the device until the problem is fixed.
Users will see an alert or notification on their device if:
- A screen lock is required but hasn’t been set up on the device. The user can tap the alert to set up a screen lock.
- The device isn't compliant with a security policy you've set, such as minimum password requirements.
Note: Noncompliant devices are blocked from accessing certain work apps. For details, see Device compliance status.
- The user hasn't registered the device with mobile management yet. For details, see Set up the Google Apps Device Policy app on your device.
- The device is registered for mobile management, but is pending approval, or the device was blocked by an administrator. For details about approving a device, see Approve mobile devices for management.
- Device registration is still in progress.
- The device hasn't synced with mobile management for more than 24 hours.
- An administrator has disabled the sync for Android devices. For details, see Set up synchronization for unmanaged devices.
How do users uninstall the Google Apps Device Policy app?
How do I remotely wipe a device?
A user lost access to work apps or work apps no longer appear on their device. How do I restore their access?
If icons for some work apps are grayed out or are no longer visible on a user’s managed Android device, the device might not be in compliance with your organization’s security policies. To restore access, the device needs to meet all the requirements listed in the Policies section of the Google Apps Device Policy app. Users with devices older than Android 7.0 Nougat need to create new shortcuts to their work apps after their access is restored.
How do I find out what Android version a user has on their phone?
On their device, go to Settings About phone Software information. Android version should be 2.2 or higher to work with the Google Apps Device Policy app.
How do I find out if a user has a work profile set up on their device?
On their device, go to Settings Accounts. Managed accounts are listed under Work.
How do users upgrade to the latest Android version?
Upgrades are usually dependent on the carrier. Contact your user's carrier for more information on their software update cycle.
I don't see Google Play on the device. How do I get it?
Android Market was rebranded as Google Play on March 6, 2012. Older devices may still refer to the app as "Android Market" or "Market".
I only want the app for a certain group in my domain. Can I enforce Google Apps Device Policy on an individual or group-level basis?
Yes. You can create organizational units and enforce specific policies for members of each unit. For more information, see How the organizational structure works.
In what countries is the Google Apps Device Policy app available?
The Google Apps Device Policy app should be available in all countries where G Suite is available. Please contact G Suite support if you're unable to set up the Google Apps Device Policy app for your organization.