Android: Allow only approved app installs with Managed Google PlaySolved

Hi @mo-chou,

For Android Enterprise devices enrolled as fully managed devices / Device Owner, this setup is possible by combining app deployment with the correct restrictions.

Use this approach:

1. Required apps
Go to Policies > Android > App Management > Required Apps and add the apps that must be installed automatically. These apps are deployed to the device and are reinstalled if removed.

2. Optional approved apps
Use the Hexnode App Catalog for apps that users may install themselves. You can create different catalogs or policies for different device groups, branches, departments, or countries.

3. Required restrictions
The error appears because the device is blocking the managed app installation command. In the Android policy, go to: Android > Advanced Restrictions > Allow App Settings

Make sure Install Apps and Google Play Store are allowed. Managed Google Play needs these permissions to process app installs from Required Apps or the App Catalog.

To prevent users from adding personal Google accounts and installing unapproved Play Store apps, disable Modify Accounts/Users in the same restrictions section. This keeps Google Play tied to the managed work account/catalog instead of a personal Play Store experience.

Regards,
Sienna Carter
Hexnode UEM

After enabling the required settings, my action history changed from failed to Initiated. It stayed that way for a while. Is that normal or does it mean the install is stuck?

Hi @mo-chou,

Initiated means Hexnode has sent the app installation command to the device, but the device has not yet reported the final install status.

This can happen when several apps are deployed at once because Android queues the downloads and installations. Give the device some time to process them.

Also check that the device has stable internet access and that the network is not blocking access to Google Play or Managed Google Play services. If the network is fine, the status should move forward once the device finishes downloading and installing the apps.

Regards,
Sienna Carter
Hexnode UEM