Enroll Android Enterprise Corporate-Owned Fully Managed Devices

MD-102 By islever Editorial Last updated Sep 28, 2026

Enroll devices to Microsoft Intune

Short answer

A Use a QR code to enroll the new Android device in Intune by using Profile1.

Question

You have a Microsoft 365 E5 subscription. You have a Microsoft Intune enrollment profile for Android Enterprise devices that has the following settings: • Name: Profile1 • Token type: Corporate-owned, fully managed You need to enroll a new Android device in Intune by using Profile1. What should you use to enroll the device?

a QR code Correct Answer
the Company Portal app
the Microsoft Authenticator app
the Intune app

Key Takeaways

The core concept tested is device provisioning methods; the common trap is confusing standard user-initiated enrollment (Company Portal) with automated bulk or initial setup enrollment (QR code).

This question addresses the correct enrollment method for Android Enterprise devices configured as corporate-owned and fully managed in Microsoft Intune, identifying the QR code as the required mechanism.

Common mistake: Candidates often select the Company Portal app because it is the most common tool for personal device enrollment, failing to recognize that corporate-owned fully managed profiles typically rely on QR codes or Zero Touch Enrollment.

Expert Analysis

Why the Answer Is Correct

For Android Enterprise devices enrolled via a profile with 'Token type: Corporate-owned, fully managed', the primary and recommended method for initial enrollment is scanning a QR code. This allows the device to be provisioned with the necessary MDM token and policies automatically during the out-of-box experience or after a wipe. As noted by Grimmgore, "Enroll by using a QR code... We recommend this enrollment method for most customer scenarios." This method ensures the device is bound to the organization without requiring individual user accounts to log in first.

Why the Other Options Are Wrong

The Company Portal app (Option B) is primarily used for user-driven enrollment of BYOD (Bring Your Own Device) or personal devices where the user needs to register their personal device for access to corporate resources. It is not the standard method for enrolling a dedicated corporate-owned device via a specific enrollment profile token. The Microsoft Authenticator app (Option C) is used for multi-factor authentication and identity verification, not for MDM enrollment. The Intune app (Option D) is not a standalone enrollment client for Android Enterprise devices in this context.

Community Comment Notes

The community consensus strongly supports Option A, with multiple users confirming that QR code enrollment is the standard procedure for this scenario. Users like ExamBud and neothwin succinctly identified the QR code as the key component. Grimmgore provided detailed context, stating that admins can scan the QR code directly from the enrollment profile to enroll a device, which aligns with official documentation.

Exam Strategy

Always distinguish between BYOD and corporate-owned enrollment methods. For corporate-owned fully managed Android devices, think QR code or Zero Touch. For personal devices, think Company Portal.

Frequently Asked Questions

Why not use Company Portal for corporate-owned devices?

Company Portal is designed for user-initiated enrollment of personal devices. Corporate-owned fully managed devices are typically enrolled via QR codes or Zero Touch for automated, policy-driven setup.

What is the Token type Corporate-owned, fully managed?

It indicates the device is owned by the organization and has full management capabilities, allowing for complete control over apps, settings, and security policies without user interference.

More MD-102 FAQ →

Community Votes

100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

Grimmgore 👍 2 Answered A

Enroll by using a QR code Intune admins can scan the QR code directly from the enrollment profile to enroll a device. We recommend this enrollment method for most customer scenarios. After you wipe the device, tap the first screen you see repeatedly to launch the QR reader. If prompted to, install a QR reader on your device. Devices running Android 9.0 and later are preinstalled with a QR reader. Scan the enrollment profile QR code, and then follow the on-screen prompts to complete enrollment.
ExamBud 👍 2 Answered A

I think this kind of enrollment is based on a QR code.
XylosSW 👍 1 Answered A

QR code

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All MD-102 Questions

Access 92 questions with complete answers and detailed explanations.

View Full MD-102 Practice Test →

← Back to MD-102 Study Guide