Skip to content

ref-email-settings-android.md

Latest commit

 

History

History
75 lines (50 loc) · 5.49 KB

ref-email-settings-android.md

File metadata and controls

75 lines (50 loc) · 5.49 KB
title Android DA email settings in Microsoft Intune
description Create device configuration email profiles that use Exchange servers, and retrieve attributes from Microsoft Entra ID. Enable SSL or SMIME, authenticate users with certificates or username/password, and synchronize email and schedules on Android device administrator Samsung Knox devices using Microsoft Intune.
ms.date 06/09/2025
ms.topic reference
ms.reviewer sheetg
ms.collection
M365-identity-device-management

Android device administrator settings that configure email in Intune

This article describes the different email settings you can control on Android device administrator Samsung Knox devices in Intune. As part of your mobile device management (MDM) solution, use these settings to configure an Exchange email server, use SSL to encrypt emails, and more. The email profile uses the native or built-in email app on the device, and allows users to connect to their organization email.

This feature applies to:

  • Android device administrator (DA)

As an Intune administrator, you can create and assign email settings to Android Samsung Knox Standard devices. To learn more about email profiles in Intune, go to configure email settings.

[!INCLUDE android_device_administrator_support]

Before you begin

Android (Samsung Knox)

  • Email server: Enter the host name of your Exchange server. For example, enter outlook.office365.com.

  • Account name: Enter the display name for the email account. This name is shown to users on their devices.

  • Username attribute from Microsoft Entra ID: This name is the attribute Intune gets from Microsoft Entra ID. Intune dynamically generates the username that this profile uses. Your options:

    • User principal name: Gets the name, like user1 or [email protected].
    • User name: Gets only the name, like user1.
    • sAM Account Name: Requires the domain, like domain\user1. sAM account name is only used with Android devices. Also enter:

      • User domain name source: Select Microsoft Entra ID or Custom.

        When choosing to get the attributes from Microsoft Entra ID, enter:

        • User domain name attribute from Microsoft Entra ID: Select to get the Full domain name or the NetBIOS name attribute of the user.

        When choosing to use Custom attributes, enter:

        • Custom domain name to use: Enter a value that Intune uses for the domain name, like contoso.com or contoso.

  • Email address attribute from Microsoft Entra ID: This name is the email attribute Intune gets from Microsoft Entra ID. Intune dynamically generates the email address that this profile uses. Make sure your users have email addresses that match the attribute you select. Your options:

    • User principal name: Uses the full principal name, like [email protected] or user1, as the email address.
    • Primary SMTP address: Uses the primary Simple Mail Transfer Protocol (SMTP) address, like [email protected], to sign in to Exchange.

  • Authentication method: Select Username and Password or Certificate as the authentication method used by the email profile.

    • If you select Certificate, select a client SCEP or PKCS certificate profile that you previously created to authenticate the Exchange connection.

Security settings

  • SSL: Enable uses Secure Sockets Layer (SSL) communication when sending emails, receiving emails, and communicating with the Exchange server. Disable does use SSL.
  • S/MIME: Disable S/MIME (default): Doesn't use an S/MIME email certificate to sign, encrypt, or decrypt emails. Enable S/MIME sends outgoing email using S/MIME encryption. Also enter:
    • Select a client SCEP or PKCS certificate profile that you previously created to authenticate the Exchange connection.

Synchronization settings

  • Amount of email to synchronize: Select the number of days of email that you want to synchronize, or select Unlimited to synchronize all available email.
  • Sync schedule: Select the schedule for devices to synchronize data from the Exchange server. You can also select As Messages arrive, which synchronizes data when it arrives, or Manual, where the user of the device must initiate the synchronization.

Content type to sync

Select the content types that you want to synchronize on the devices.

Not configured disables the setting. When set to Not configured, if an end user enables synchronization on the device, synchronization is disabled again when the device syncs with Intune, as the policy is reinforced.

  • Contacts: Enable allows end users to sync contacts to their devices.
  • Calendar: Enable allows end users to sync the calendar to their devices.
  • Tasks: Enable allows end users to sync any tasks to their devices.

Related articles