Does a work profile or an MDM affect NFC?
It can. A managed device may have the NFC setting restricted, the application you need blocked, or tag content routed into a work profile rather than the personal one. None of it is visible from the tag, which makes it a confusing class of failure.
The setting can be restricted
An administrator can control device settings centrally, and NFC is among the things that can be restricted.
The symptom is a setting that is greyed out, missing, or that returns to its previous state after being changed.
Nothing on the phone changes this. The restriction is applied centrally and reapplied if it is worked around.
A setting that appears and disappears over days points at policies being updated remotely rather than at a fault.
The application may be blocked
Managed devices often restrict which applications can be installed, and a reading or writing tool may simply not be available.
That produces a phone which reads tags at the system level and cannot be used to examine or write them, which looks like a hardware limitation and is not.
The route through is a request to whoever manages the fleet, since side loading is normally blocked as well.
Which profile receives the tag
A work profile keeps personal and work applications separate, with their own copies of things like browsers.
A tag holding a web address can therefore open in a browser the user did not expect, or in a profile where the destination behaves differently.
For an internal deployment this matters, because a link that works from a personal browser may hit different network rules from a work one.
Test on a managed device rather than on an unmanaged one, since the two are meaningfully different environments.
Deploying where devices are managed
Ask the administrator what is restricted before designing anything. It is a five minute conversation that prevents a redesign.
Prefer a plain web address, which needs no application and is the least likely thing to be blocked.
Check that the destination is reachable from the managed network, since filtering is common and a tag pointing at a blocked address is a tag that does nothing.
And test with a real managed device from the fleet. A personal phone of the same model tells you nothing about the policy applied to the others.
Frequently asked questions
Can an administrator disable NFC entirely?
Yes, on a managed device. The setting then appears greyed out or absent, and nothing on the phone overrides it.
Why can I not install a reading app?
Managed devices commonly restrict installation. The application is available and the policy is not, which is a conversation with the administrator.
Does a work profile change what a tag does?
It can, since profiles have their own applications and network rules. A web address may open in a different browser than you expect.
Should I test on a managed device?
Yes. An unmanaged phone of the same model behaves differently, and the difference is exactly what you are testing for.