nerdexam
Microsoft

MD-102 · Question #35

Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune. Which two configurations should you perform in…

The correct answer is A. From Platform Settings, set Android Enterprise (work profile) to Allow. D. From Platform Settings, set Android device administrator to Block. To allow only Android Enterprise work profile enrollment and block everything else: (A) Set Android Enterprise (work profile) to Allow – this explicitly permits the desired enrollment type. (D) Set Android device administrator to Block – this prevents the legacy Android device…

Submitted by emma.c· Apr 18, 2026Protect devices

Question

Your company uses Microsoft Intune to manage devices. You need to ensure that only Android devices that use Android work profiles can enroll in Intune. Which two configurations should you perform in the device enrollment restrictions? Each correct answer presents part of the solution. NOTE: each correct selection is worth one point.

Options

  • AFrom Platform Settings, set Android Enterprise (work profile) to Allow.
  • BFrom Platform Settings, set Android device administrator Personally Owned to Block.
  • CFrom Platform Settings, set Android device administrator Personally Owned to Allow.
  • DFrom Platform Settings, set Android device administrator to Block.

How the community answered

(18 responses)
  • A
    61% (11)
  • B
    28% (5)
  • C
    11% (2)

Explanation

To allow only Android Enterprise work profile enrollment and block everything else: (A) Set Android Enterprise (work profile) to Allow – this explicitly permits the desired enrollment type. (D) Set Android device administrator to Block – this prevents the legacy Android device administrator (DA) enrollment path entirely, forcing all Android devices to use work profiles. Option B (block DA Personally Owned) is partial and insufficient because it still allows corporate-owned DA devices. Option C (allow DA Personally Owned) would permit the very enrollment type you are trying to block.

Topics

#Android Enterprise work profiles#Device enrollment restrictions#Intune enrollment settings#Device administrator blocking

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice