GrapheneOS and Intune?

GrouchyGrape

I know this is a long shot but we're moving to Intune as our MDM solution and I was wondering if it's even possible to manage GOS phones this way. I've put no time into researching this specifically, but was curious if anyone here had experience.

We're merging a large department into our org. They're android (anti-apple) and we're iOS (anti-android) so I was curious if I could just make everyone hate me and force them to use GOS lol

de0u

GrouchyGrape I think there are several threads on the forum about Intune.

I believe that some administrator settings result in profile-installation failures, but I don't know whether there are settings combinations that are known to work. A large part of the problem is that Intune is often configured to expect that Google Play is automatically installed as a profile is created, because that is true on most systems that have Play, and also that Play has privileges that it doesn't have on GrapheneOS.

Aside from forum threads, there is an open issue: https://github.com/GrapheneOS/os-issue-tracker/issues/1821

Overall, in a sense it could be made to work, but at present I believe that would require a cooperative MDM administrator.

GrouchyGrape

de0u thanks for the reply. I'll definitely look around on the forums. I am the MDM administrator so really whatever I say goes but I don't want to create unnecessary headache for myself. That being said, I'd be willing to try it for a few employees that are at very high risk of attack/compromise.

de0u

GrouchyGrape I'll definitely look around on the forums.

https://discuss.grapheneos.org/?q=intune%20