By enrolling your device in Intune, you get secure access to work or school apps on your Android device, and access to apps in Intune Company Portal and the Microsoft Intune app. The Company Portal app and Intune app also monitor your device settings to make sure they meet your organization's requirements and syncs things (like apps, policies, and updates) from your organization to your device.
Important
Before setting up Microsoft Intune for an Android Open Source Project (AOSP) device, ensure your device is supported. For a list of supported devices, see to Android Open Source Project Supported Devices.
This article provides an overview of device enrollment, its purpose, and its benefits. To skip this overview and go straight to the enrollment steps, select from one of the following articles (ask your IT support person if you're not sure which set of instructions you're supposed to follow):
Use the Company Portal or Microsoft Intune app to enroll and register your personal or work-provided device with your organization. The apps walk you through each step of enrollment, and configure your device settings to match your organization's policies. They also alert you to problems or settings that need to be resolved before you can get corporate access.
Examples of policies that your organization might require are:
Setting up a password or PIN
Restricting access after a set number of sign-in attempts
Ensuring that you're not using a jailbroken or rooted device
Installing work-required apps
Access internal apps, VPN, and Wi-Fi
During enrollment, you have to sign in with your work or school account. After you authenticate and configure your device settings to match your organization's policies, you can access your work email, Wi-Fi network, files, and apps on your device. Your organization may also require you to install work or security apps, such as Microsoft Office or Microsoft Defender for Endpoint. You can find all required and available apps in the Company Portal or Microsoft Intune app.
Remotely reset a lost or stolen device (if device supports it)
If a device is lost or stolen, you can sign in to the Company Portal app or Company Portal website on any other device, and reset your phone to factory settings. This feature is helpful if your missing device contains proprietary work data that you don't want anyone else to access. Because the device is enrolled in management, your support person or IT admin can also help reset it.
The reset feature isn't available in the Microsoft Intune app.
The Company Portal or Microsoft Intune app automatically checks in, or syncs, your device with Intune every eight hours. If you're using Company Portal and want to check in more frequently, you or your support person can initiate a manual sync. During check-in, the apps:
Download available policy and app updates.
Send hardware inventory updates. These updates don't contain personal information.
Send company app inventory updates. These updates don't contain personal information.
When your device is out-of-sync or no longer meets the requirements, its status appears in Company Portal or the Intune app as not compliant. Device access to work and school-related resources might be revoked until your device meets the requirements again. The Company Portal app notifies you of these problems and the steps you need to take to fix them.
Get Remote Help from IT support person
When you enroll your device, your company support or IT admin is given access to the device for limited and meaningful reasons. They can:
Reset your device back to the manufacturer's defaults. As mentioned above, you also have access to reset your device. However, if you can't access the Company Portal app right away, your company can reset the device for you.
Remove all company-related data. Your organization might remove company-related data from your device if you leave the company, or if your device becomes unmanaged. Your personal data and settings aren't removed, and will remain on the device.
Set requirements for your device, such as requiring you to have a device password or PIN. In this case, you'll get app notifications that your device isn't compliant. Your company support might also limit the number of times you can enter an incorrect password on your device. Excessive, failed password attempts might result in your device being locked.
Require you to accept terms and conditions.
Disable the camera. The purpose of this policy is to prevent you from photographing proprietary information, and also to remove distractions from school environments. Schools might disable cameras on classroom devices so that students cannot share test materials.
Require that all data on the device is encrypted. If lost or stolen, this policy helps protect the data on your device. It also protects data that is shared between devices or apps.
Next steps
When you're ready to enroll your Android device in Intune, follow your organization's instructions to set up your device. Or select one of the articles listed at the beginning of this article for links to general setup instructions.
Contact your support person to find out which setup instructions you should use. Check the Company Portal website for contact information.
In the Microsoft Intune admin center, go to Devices > All devices. Select an enrolled iOS/iPadOS, macOS, or Windows device. From the Monitor options, select Enrollment. Review the report data.
During device enrollment: Your device enrolls in Microsoft Intune, a mobile device management provider, and registers with your organization. This step ensures that you're authorized to access your organization's email, apps, and Wi-Fi. Your organization's device management policies are applied to your device.
Android Enterprise provides several device enrollment methods to choose from. IT can enroll devices via QR code, zero-touch provisioning, EMM token, NFC, managed Google account or EMM management app. These methods offer scalability for deploying Android devices in an enterprise environment.
Using Intune, you can enroll the following two types of devices: Corporate Owned – These types of devices are typically owned by your organization. Personally Owned – These devices are personal in support of a Bring Your Own Device (BYOD) scenario.
Device categories allow you to easily manage and group devices in Microsoft Intune. Create a category, such as sales or accounting, and Intune will automatically add all devices that fall within that category to the corresponding device group in Intune.
Sign in to the Microsoft Intune admin center. Select Devices > All devices > select one of your listed devices to open its details: Overview shows the device name, and lists some key properties of the device, like whether it's a personal or corporate device, serial number, primary user, and more.
In the Microsoft Endpoint Manager admin center, select Devices > All devices. Select the devices you want to check for Visual Studio. You can either select all devices or select specific devices using filters. Click on the “Export” button and choose “Export to CSV” option.
Configure Intune device limit restrictions to limit the number of devices a user can enroll in Microsoft Intune. You can allow a user to enroll up to 15 devices. To create a device limit restriction, sign in to the Microsoft Intune admin center and go to Devices > Enrollment.
Device Enrolment allows organisations to have users manually enrol devices into a mobile device management (MDM) solution and then manage many different aspects of device use, including the ability to erase the device. On Mac computers using macOS 11 or later, Device Enrolment also enforces supervision on the Mac.
Device Credential is only supported for Microsoft Intune enrollment in scenarios with Co-management or Azure Virtual Desktop multi-session host pools because the Intune subscription is user centric. User credentials are supported for Azure Virtual Desktop personal host pools.
Click on Access work or school and look for one of these: This means that your computer is joined to Azure AD and enrolled in Intune. Click on it, and then click on Info. Scroll down and look for "The sync was successful" in the Device sync status section.
It places devices in supervised mode, skips initial computer setup steps (such as Apple ID setup), and allows IT departments to manage devices received directly from Apple or approved Apple Authorized Resellers without physical intervention.
Device Enrollment allows organizations to have users manually enroll devices into a mobile device management (MDM) solution and then manage many different aspects of device use, including the ability to erase the device. On Mac computers using macOS 11 or later, Device Enrollment also enforces supervision on the Mac.
The Intune Company Portal app supports devices running Android 8.0 and later, including devices secured by Samsung Knox Standard 2.4 and later. To learn how to update your Android device to meet requirements, see Check & update your Android version.
Introduction: My name is Mr. See Jast, I am a open, jolly, gorgeous, courageous, inexpensive, friendly, homely person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.
