Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Block Android Work Profile Lock Screen Notifications using Intune

Block Android Work Profile Lock Screen Notifications using Intune

Written By Jitesh Kumar
Last Updated December 4, 2023
Posted In Intune
SHARE

Learn how to block Work Profile Lock Screen notifications from appearing on Intune managed Android device when locked. You can prevent work profile notifications from alerting you to work events, such as new messages and appointments on a locked device.

Blocking Android work profile notifications on device locked involves configuring device restriction policy to control the behavior of notifications on Android devices. The explained settings apply to Android Enterprise personally-owned devices with a work profile (BYOD).

Once you apply the Android device restriction policy, You won’t get any work notifications on the lock screen. You can see the notifications after you unlock your device. You can also leverage the Intune Quiet Time Policy ability to set start and end times for the quiet period. Admins can define the exact hours or specific timeframes during which notifications should be silenced. 

As per the CIS recommendation, a Screen lock for the device should be enabled, and the device should be locked immediately once the device goes to Sleep. To achieve this, you can set Maximum minutes of inactivity until screen locks minute.

Patch My PC

Block Android Work Profile Lock Screen Notifications using Intune

Before you begin, Create an Android device restrictions configuration profile. When you create device restriction policies for Android Enterprise personally owned work profile security settings, there are many settings available.

The setting inside Device Restrictions can enforce work profile notifications to appear when the device is locked (Android Enterprise > Personally Owned Work Profile (platform) > Device Restrictions).

  • Sign in to Microsoft Intune Admin Center https://intune.microsoft.com/
  • Navigate to the Devices > Android > Configuration Policies. I selected the existing device restriction configuration profile for modification.
Block Android Work Profile Lock Screen Notifications using Intune Fig.1
Block Android Work Profile Lock Screen Notifications using Intune Fig.1

You can see the different categories of applied configuration in the configuration settings for Android Enterprise personally owned devices with a work profile (BYOD). The Work profile settings allow you to configure settings that specifically apply to the Android work profile on this device.

Block Android Work Profile Lock Screen Notifications using Intune Fig.2
Block Android Work Profile Lock Screen Notifications using Intune Fig.2

You will find the settings inside the Work Profile settings category, By default, Intune doesn’t change or update this setting. By default, the OS might allow users to access their work profile, and get the notification while the device locked.

  • Work profile notifications while device locked: Block prevents window notifications, including toasts, incoming calls, outgoing calls, system alerts, and system errors from showing on locked devices. When set to Not configured (default), Intune doesn’t change or update this setting. By default, the OS might show notifications.

Here you can review the available restriction settings under Work profile settings. You can select and customize them as per your requirements and click Review + Save.

Block Android Work Profile Lock Screen Notifications using Intune Fig.3
Block Android Work Profile Lock Screen Notifications using Intune Fig.3

The next step is to review the setup policy and Save. A notification prompt will appear when you save the profile, Policy “HTMD Android Device Restriction Policy” saved successfully.

Block Android Work Profile Lock Screen Notifications using Intune Fig.4
Block Android Work Profile Lock Screen Notifications using Intune Fig.4

You can monitor the Android devices policy to ensure that the users won’t be able to get Work profile Notifications. To confirm the behaviour, Checking for the enrolled device is recommended to ensure the applied profile is working as expected. Here’s how you can see the policy deployment status report.

Block Android Work Profile Lock Screen Notifications using Intune Fig.5
Block Android Work Profile Lock Screen Notifications using Intune Fig.5

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

About Author – Jitesh, Microsoft MVP, has over six years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus is Windows 10/11 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

Written by

Jitesh has over 5 years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus area is Windows 10 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read