Enable mobile device enrollment with the Microsoft Intune Account Portal
Updated: July 28, 2015
Applies To: Microsoft Intune
Intune supports “bring your own device” (BYOD) by letting users enroll their devices through the Microsoft Intune Account Portal. Before you can enroll devices, you must configure Intune for mobile device management. If you haven’t already, set up management for each device platforms in your organization:
Add Intune users
The mobile device owner must be added to the Microsoft Intune Account Portal before devices can be enrolled. Log in to the Microsoft Intune Account Portal, click Add users, and select an option:
User: To add a single user select New > User and enter Details, Assign roles, Set user location, and then assign the user to a Group.
Bulk add: Create a .csv file (see samples files provided) and import it into the Intune Account Portal. Specify roles, location, and group, and then create the accounts. Sample and blank .csv files can be downloaded from the Microsoft Intune Account Portal.
You can also enable Active Directory or Azure Active Directory synchronization. For more information about integrating other Azure Active Directory users with Intune, see Directory synchronization roadmap or click Other ways to add users in the Intune Account Portal.
Create groups (Optional)
Groups give flexibility for managing devices and users. You can set up groups to suit your organizational needs by geographic location, department, or hardware characteristics, for example. See Use groups to manage users and devices with Microsoft Intune.
Add policies for devices (Optional)
Policies are groups of settings that control features on devices. Most MDM policies are platform specific. You create policies using templates containing recommended or customized settings, and then deploy them to groups. See Use policies to manage computers and mobile devices with Microsoft Intune.
Set device enrollment limit (Optional)
To limit the number of mobile devices a user can enroll, log in to the Microsoft Intune administration console, click Admin > Mobile Device Management > Enrollment rules. Select the maximum number of devices a user can enroll and then click Save.
Set Company Portal settings
You can customize the Intune Company Portal for your company. In the Microsoft Intune administration console click Admin > Company Portal. Configure the following
IT department contact name
IT department phone number
Company privacy statement URL
Support website URL (not displayed)
Set Terms and Conditions
You can publish terms and conditions that your users see when they first use the company portal from any device. In the Microsoft Intune administration console click Company Portal > Terms and Conditions.
You can publish terms and conditions that your users will see when they first use the company portal from any device, whether or not that device is already enrolled. Users will have to accept those terms to access the portal. When you update the terms and conditions significantly and want users to see and accept them, you can mark the new terms and conditions as a new version, and users will go through the same process the next time they visit the portal.
Terms and conditions apply to users, not to devices, so users will only have to accept each version once to visit the company portal from any of their devices.
Terms and Conditions reports show which users accepted your terms and conditions, the most recent version number they accepted, and the date they accepted that version. Export the report to keep an archive of when users accepted previous versions. See Understand Microsoft Intune operations by using reports.
Once you’ve set up enrollment, you can invite users to enroll their devices. For guidance helping users to enroll their personal devices, download Microsoft Intune Enrollment Instructions. You can also refer to What to tell your end users about using Intune.
Users enroll and manage their mobile devices with the Company Portal app. Users can also use the Company Portal website to enroll devices.
Android - Users install the Company Portal app from Microsoft Corporation available on Google Play.
iOS - Users install the Company Portal app from Microsoft Corporation available in the App Store. Users can then view their Devices to enroll their phones.
Windows Phone 8.1- Users install the Company Portal app from Microsoft Corporation available in the Windows Phone store. If a signed company portal app was distributed, users can also go Settings > Workplace > Add account, sign in, and then tap Install company app or Hub to install the Company Portal.
Windows Phone 8.0 - Users click system settings > company apps, and sign in using their user ID. The Company Portal app is deployed to users’ phones.
Windows 8.1 and Windows RT 8.1 - Users download the Company Portal app from the Windows Store. If a signed company portal app was distributed, users can also go to PC Settings > Network > Workplace, sign in, mark the Allow apps and services from IT admin checkbox, and click Join.
Windows RT - Click Start, and type “System Configuration”, and click the dialog box to open the Company Apps.
When users open the Company Portal they’ll be asked for credentials. If you didn’t create a public domain CNAME, Windows and Windows Phone users are prompted for the server address and must type “manage.microsoft.com”. Windows Phone 8.1 and iOS phone users can then view their Enrolled Devices to enroll their phone.
When a user first enrolls, or if you’ve required acceptance of a new version of terms and conditions, users must accept the terms and conditions. The device is enrolled whether they accept the terms or not. If they accept, they can continue to the portal. If they decline they are asked to confirm that they want to decline, and are then provided with a link to instructions on how to unenroll. They are not automatically unenrolled, and until they unenroll you can still manage the device.
At this point the process differs for devices that have not yet been enrolled, depending on the operating system of the device.
For Windows devices and Windows Phone 8.1, the Company Portal will remind the user to enroll. Windows Phone 8.1 will have a link to enrollment settings, and Windows will have a link to help content that describes how to enroll.
For iOS and Android devices, the user is led through the enrollment process. Users will still see a message from Microsoft about the impact of enrolling.
Windows and Windows Phone users might find the enrollment interface and enroll without seeing your terms and conditions. Advise your users to start at the Windows Store or Windows Phone Store to increase exposure and acceptance of your terms and conditions.
Once devices are enrolled you can: