Firmware has always been the awkward gap in Android device management. You can push apps, lock down settings, and enforce compliance all day long, but the actual Samsung firmware — the layer where a lot of the security fixes live — sat outside Intune, updated on the device’s own schedule or not at all. Knox E-FOTA integration closes that gap.
What it actually gives you
Intune now talks to Samsung Knox E-FOTA (Enterprise Firmware Over-The-Air), so firmware updates for your corporate-owned Samsung fleet become something you manage rather than something that happens to you:
- Schedule firmware rollouts instead of leaving them to the user
- Pin devices to a target firmware version, or let them move to latest
- See firmware state alongside the rest of your device inventory
Where it’s worth the effort
This only matters if you’ve got a meaningful number of corporate-owned Samsung devices — think frontline, logistics, retail handhelds. On a mixed BYOD estate it’s noise. On a fleet of company-owned Galaxy devices it’s the difference between “we patch our Androids” being true and being aspirational.
The real win is consistency: firmware moving on a schedule you control, in step with your other Intune workloads, feeding into compliance reporting rather than being a blind spot you hope nobody audits.
If your Android estate is Samsung and corporate-owned, this is one of those quietly useful features that turns a hand-wave in your patching policy into something you can point at.
Source: Microsoft Learn. Summarised independently — check the source for the latest detail.