IBM MaaS360

 View Only

 USIM1 compliance error

Bryn Abbott's profile image
Bryn Abbott posted Mon February 03, 2025 09:37 AM

Hi

I'm hoping someone can help me here.

I'm enrolling new Samsung devices into M360.

As soon as the device is enrolled I get an Accounts Compliance issue which I can't get rid of (the image shows three errors, the first is because we are deploying a kiosk and it's not in kiosk mode yet and the second as we haven't set a PIN code yet). This message appears as soon as the device is enrolled.

I thought it may referring to which slot of the SIM tray the card was in and have also tried configuring allowed account (the same one used to connect to the Play Store) under Configure allowed Google account but neither seem to work.

Has anyone come across this before?

Can anyone offer advice at al please?

Eamonn O'Mahony's profile image
Eamonn O'Mahony posted Tue February 04, 2025 03:41 AM

Hi Bryn

Accounts usually refers to Google accounts on an Android device. 

Have you checked the configuration on the Accounts tab on the Android Enterprise settings section of the policy, is there anything in here?

Best

Bryn Abbott's profile image
Bryn Abbott posted Tue February 04, 2025 05:08 AM

Hi Eamonn,

Thanks for your quick reply.

I can see that Configure Account Restrictions is selected, the client was concerned about staff being able to add their own accounts.

I'll try de-selecting that and give it a whirl 👍

Mitch Lauer's profile image
Mitch Lauer IBM Champion posted Tue February 04, 2025 08:04 AM

Bryn, 

Google is funny about the usage of the "Gmail" email client in kiosk and work profile enrollments.  Even if  you have no intention of using this, there can be a compliance error as Eamonn has advised.

I  understand the client does not want personal accounts on the device. however if you do have clients that are using email ,as a rule of thumb when I configure Samsung devices where email is going to be used, I like to push the Samsung email,contacts, calendar clients and configure them as opposed to using the native gmail client.  After many years of doing this I have found it is a much better experience for the end user. 

Further, you have not set a strong enough passcode on the device, based on the policy you configured for Kiosk Mode for this device.  This will trigger the compliance alert as well. 

I am more than happy to jump on a call with you if you would like to chat about this. 

SIncerely, 

Mitch Lauer

ConnecTel Wireless

412-339-5765

(5 year IBM Champion)