Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot

Identify Android Enterprise System Apps using Intune Explorer and Security Copilot

Written By Anoop C Nair
Last Updated September 11, 2025
Posted In Intune
SHARE

Let’s discuss how to Identify Android Enterprise System Apps using Intune Explorer and Security Copilot. Android Enterprise system apps are apps that already come with Android phones or tablets. These apps are important for the device to work properly and stay secure.

They are built into the system and cannot be removed easily. With Microsoft Intune, companies can control these apps. They can choose to turn them on or turn them off based on what they need for their employees. These settings work on different types of devices like company-owned phones or personal phones with work profiles.

Users cannot pick these apps to install by themselves. Only the IT team can manage them. For example, a company might want a security app to always be on every employee’s phone to make sure their work apps run smoothly and safely.

In this post, you will learn how to identify Android Enterprise system apps using Intune Explorer and Security Copilot. These tools help IT administrators easily find and manage the system apps that are built into Android devices and are essential for security, device management, and functionality.

Patch My PC

Identify Android Enterprise System Apps using Intune Explorer and Security Copilot

To identify Android Enterprise system apps using Intune Explorer and Security Copilot, first sign in to the Intune admin center and select the Explorer tab on the left side. Then, type the query Get Android Enterprise system app applications and click the arrow next to it.

  • Security Copilot will process the query and show the results, such as “There are 1 items in the results list.”
  • This query helps IT admins retrieve detailed information about the managed system apps in their environment.
  • It filters apps based on type and presents important details like the app name, ID, publisher, platform, version, assignment status, and last modification date, making it easier to review and manage the apps deployed across the organization.
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot - Fig.1
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot – Fig.1

Identify Devices with a Specific Managed App Installed

The query Get devices that have the managed app /Managed App installed on platform Managed App Platform helps IT administrators quickly identify which devices have a specific managed app installed. This enables them to track app usage, ensure compliance, and troubleshoot deployment issues across different devices and platforms within the organization.

Next steps to consider
Review the list of managed applications and their details to ensure that all necessary apps are deployed and up-to-date. This helps in maintaining compliance and ensuring that users have access to the required applications.

Investigate any discrepancies or issues with specific managed apps by using the recommended queries to identify devices or users experiencing problems. This can help in troubleshooting and resolving deployment issues.

Use the data to plan and implement updates or changes to managed applications, ensuring that all apps are running the latest versions and are properly assigned to the necessary devices and users. This helps in maintaining a secure and efficient application environment.
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot – Table 1
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot - Fig.2
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot – Fig.2

End Results of Identifying Android Enterprise System Apps

After running the query in Intune Explorer and Security Copilot, you can see details about the system apps on your devices. Here the result shows the Zebra OEMConfig app with information like the publisher, app ID, platform (Android), version, and assignment status. In this case, the app is assigned and was last modified on 06/06/2023.

  • This makes it easy for IT admins to understand which system apps are active and how they are being used in the organization.
Managed AppPublisherManaged App IdManaged App Platform
Zebra OEMConfigZebra304bff46-669c-442d-9df3-d50df1Android
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot – Table 2
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot - Fig.3
Identify Android Enterprise System Apps using Intune Explorer and Security Copilot – Fig.3

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read