Microsoft Intune
Device securityConfigure Web Protection Android
In brief
The documentation now states that Defender web protection can't run when Android Advanced Protection is enabled because Defender isn't registered as an accessibility tool.
What Intune admins need to know
Account for this compatibility limitation when configuring Defender on Android devices; web protection can be disabled while other supported Defender features continue to be used.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Select **Add** to save the OMA-URI settings configuration, and then select **Next** to continue.
- In Assignments, specify the groups that receive the profile. For more information on assigning profiles, see Assign user and device profiles. \ No newline at end of file
- In Review + create, when you're done, select Create. The new profile is displayed in the list when you select the policy type for the profile you created.
Important
Google restricts accessibility permissions for apps that aren't registered as accessibility tools. Defender isn't registered as an accessibility tool, so when Android Advanced Protection is enabled, Defender web protection can't run. Admins can disable web protection and continue using other supported Defender for Endpoint features.
\ No newline at end of file
\ No newline at end of file
@@ -36,12 +36,12 @@ monikers: [] item_type: Content source_path: intune/device-security/microsoft-defender/configure-web-protection-android.md cmProducts:-- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/a72e95ff-4b4f-4cc1-90c6-7dcba67ff05f - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/8b9ae643-2e85-42b8-beb2-eef4bae8c4bc+- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/a72e95ff-4b4f-4cc1-90c6-7dcba67ff05f - https://authoring-docs-microsoft.poolparty.biz/devrel/80beb97b-18aa-44f8-9420-8f2a4cd448eb spProducts:-- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/24dc3ccd-591a-4415-a1fe-8759afafcb12 - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/e047e27d-b5f3-43a8-b4b0-4f6dca95e7c9+- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/24dc3ccd-591a-4415-a1fe-8759afafcb12 - https://authoring-docs-microsoft.poolparty.biz/devrel/8c09e0ef-0fde-4b6d-bf1b-b517e4db7f80 platformId: 22de7c90-4b46-0846-c897-508dca7fa9d1 ---@@ -173,4 +173,8 @@ Android device administrator (DA) management is deprecated and no longer availab
Select **Add** to save the OMA-URI settings configuration, and then select **Next** to continue.
6. In **Assignments**, specify the groups that receive the profile. For more information on assigning profiles, see [Assign user and device profiles](../../device-configuration/assign-device-profile).
-7. In **Review + create**, when you're done, select **Create**. The new profile is displayed in the list when you select the policy type for the profile you created.\ No newline at end of file+7. In **Review + create**, when you're done, select **Create**. The new profile is displayed in the list when you select the policy type for the profile you created.
+
+Important
+
+Google restricts accessibility permissions for apps that aren't registered as accessibility tools. Defender isn't registered as an accessibility tool, so **when Android Advanced Protection is enabled, Defender web protection can't run**. Admins can disable web protection and continue using other supported Defender for Endpoint features.\ No newline at end of file