IBM MaaS360

 View Only

 Identifying Android Enterprise Enrollment Type (User vs Device Account) Beyond 90 Days

miss makima's profile image
miss makima posted Tue June 24, 2025 07:42 AM

Unfortunately, within the current Android Enterprise setup, there’s no direct way to see whether a device is enrolled using a User Account or Device Account from the device settings itself.

While the Devices > Enrollments section does show the Android Account Type, it’s limited to the last 90 days, as you've noted. The Deployment Overview doesn't include the account type, which makes it harder to trace older enrollments.

Here are a few suggestions to work around this:

  1. Check the App Management Behavior
    If apps are assigned per user, and the device doesn't receive them, it's likely enrolled with a Device Account (i.e., in kiosk or dedicated mode). Conversely, if user-based app targeting works, it's likely a User Account.

  2. Use Tags or Naming Conventions
    If your organization uses specific naming conventions, tags, or custom attributes during enrollment (e.g., via Zero-touch or QR config), that can sometimes hint at the enrollment type.

  3. Check Enterprise Mobility Management (EMM) Logs
    If you're using an EMM like Intune, Workspace ONE, or MobileIron, detailed logs or device records may reveal the enrollment type or mode (Work Profile, Fully Managed, COPE, etc.).

  4. Recheck Enrollment History Outside the Console
    If you have integrated reporting or export logs to a SIEM or external system, you might be able to retrieve older enrollment details from there.

If this info is crucial for troubleshooting app distribution, you may also consider raising a support ticket with your EMM provider to get historical enrollment data beyond the 90-day window.