This guide also contains links to videos on how to set up the Intune Company Portal app should you wish to continue to access 365 resources on a mobile device.
Note your username may currently differ from your email address as mentioned in the videos. It will likely be in the “first4 + last4” format. For example, Harry Smith would be harrsmit@virginwines.co.uk.
Apple https://www.youtube.com/watch?v=mJyv6YcHi7c
This section explains how to Enrol your iOS device in Microsoft Intune. There is also a video guide linked above with the same steps.
If you get to step 16 and get an error: A connection to the server could not be established first try either disconnecting from WiFi and trying mobile data. Or connecting to WiFi if using mobile data.
When you attempt to log into a Microsoft 365 app with your work account, you will be prompted with a message like the below:
Click on Enroll now and you will be redirected to the below page:
Click on GET THE APP and then open the app store when prompted:
Install the Intune Company Portal app. The app is free so you will not be charged to install it.
Once the app is installed, select open and then sign into the app with your work credentials.
Once signed in, you will see the below. Click Begin to install a Management Profile and configure extra settings to give the app the required permissions.
On the privacy page the app explains what the app has access to and what Virgin Wines Ltd is able to see and what we are never able to see. Once you have reviewed this, select Continue to move on.
The What’s next page describes what you need to do to set up your device. When you’re ready, select Continue to complete these steps.
You will firstly be redirected to download and install a configuration profile. Click Allow to download the profile
After the profile is downloaded, select close
Then select open to return to the company portal app
The app then displays instructions on how to install the Management Profile you just downloaded.
Open the Settings app. You will see Profile Downloaded at the top left.
Select it, then select Install
Enter your passcode when prompted
Select Install again to confirm that you want to install the management profile
Select Install one more time
Then select Trust
After the profile installs, select Done to complete the first step
Next, open up the Company Portal app again and click Continue to confirm device settings. This will require you to set a passcode if you have not already got one.
Once this step finishes, you should see green check marks for each enrolment task. Select Done.
You will then see all the apps you have access to as well as tabs for devices and how to get support. You will also now be able to log into any 365 apps with your work account.
If you have any issues with setup or questions, please contact the IT Service Desk Service Desk - Jira Service Management (atlassian.net)
Android https://www.youtube.com/watch?v=k0Q_sGLSx6o
(For Android we also recommend disabling “Battery Optimisation” in the app when prompted, otherwise you may have performance issues using 365 apps)
When you attempt to log into a Microsoft 365 app with your work account, you will be prompted with a message like the below:
You will be redirected to the below page. Select Go to Google Play
Once the Google Play store has loaded the Intune Company Portal app page. Select Install. The app is free, so there is no charge for installing it.
Once the app finishes installing, select Open
Select Sign In and log in using your work account. (Details at the top of the page for what format this should be in.)
Once signed in, you will be presented with the below page which describes what you need to do to enrol your device
When you’re ready, select Continue to get started
On the privacy page, review the list of items we can and cannot see. Once you are happy, select Continue again.
The What’s next page describes what you need to do in order to set up your device. When you’re ready select Next to continue
The first permission allows the app to record your IMEI number. Which is used to uniquely identify your device. Rest assured, we never make or manage phone calls. Click allow to continue to the device administrator page.
Review the settings on the next page and then select Activate.
If you use a Samsung device, the Samsung Knox Privacy Policy is the next step.
For Samsung users. Read the policy, accept the terms and conditions, then select Confirm to finish setup.
After enrolment completes, you will be returned to the company setup page. You should see green checkmarks for each enrolment task. Now click done.
Now your device is enrolled, you will see what apps you have access to as well as other information. You will now also be able to log into 365 apps with your work account.
FAQ and Support
Further info on what we do and do not have access to: https://docs.microsoft.com/en-us/mem/intune/user-help/what-info-can-your-company-see-when-you-enroll-your-device-in-intune
Things your organization can never see
Things we cannot see
Calling and web browsing history
Email and text messages
Contacts
Calendar
Passwords
Pictures, including what's in the photos app or camera roll
Files
Additionally, on corporate-owned Android devices with a work profile:
Apps and data in your personal profile
Phone number
Things your organization can always see
Your organization can always see:
Device owner
Device name
Device serial number
Device model, such as Google Pixel
Device manufacturer, such as Microsoft
Operating system and version, such as iOS 12.0.1
Device IMEI
App inventory and app names, such as Microsoft Word
On personal devices, your organization can only see your managed app inventory, which includes work and school apps.
On corporate-owned devices, your organization can see all apps installed on the device.
On corporate-owned devices with a work profile, which is limited to Android devices, your organization can only see the apps installed in your work profile.
Note
Organizations cannot see all app inventory on Android Enterprise fully managed devices, corporate-owned work profile devices, and dedicated devices.
What is a managed app?
An app is considered a managed app when it's installed in one of the following ways:
You install it from the Company Portal app after your organization makes it available to you.
Your organization requires you to have a certain app for work and school and automatically installs it on the device upon enrollment.
Things your organization might see
Your organization can see and access certain aspects of your device when assisting with or troubleshooting device setup. This section describes the type of information available.
Phone number
If you're using a corporate-owned device (excluding corporate-owned devices with a work profile), your organization can see your full phone number. If you're using a personal device, they can see the last four digits of your phone number.
Tip
You can view the ownership type for your device on the Intune Company Portal > Device Details page.
Device storage space
If you have trouble installing a required app, your support person may look at your storage size to find out if low space is the cause.
Location
Corporate-owned device: Your organization can view the location of a lost device.
Personal device: Your organization can't view the location of a personal device.
Your organization can put a missing, corporate-owned iPhone or iPad into managed lost mode, which lets them request the location of the device. When someone requests access to the device location, the device locks and a message appears on the lock screen to explain what's happening. For more information about supervision, which is a type of configuration for corporate-owned Apple devices, see Get started with a supervised iPhone, iPad, or iPod touch in the Apple support docs.
App inventory details
Your organization can require you to install a mobile threat defense (MTD) app. If you're required to install an MTD app on your device:
Corporate-owned device: Your organization can view details about all apps on the device.
Personal-owned device: Your organization can only view the details of your managed apps.
For more information about mobile threat defense, see Install mobile threat defense app.
App permissions
Applies to devices running Android 11 and earlier
An IT admin can grant permission to apps in the work profile, both manually and by automation. The IT admin does this to reduce the number of prompts you receive. The permissions could be for things like the camera, microphone, and location. If your device is running Android 11, you'll receive a push notification when someone grants permission to an app.
Network information
Some information about network connections for Android devices may be available to your organization. For example, if your organization requires devices to remain within a certain building, your device would identify the network where it's connected.
Requesting IT support
As always, if you have any questions or need assistance, please contact the Service Desk. There will be an option below this section that allows you to raise a support ticket.
IT Support number: 01603 886500