How To… | InTune

What is Intune?

Microsoft Intune is a cloud-based tool which enables the University to manage user access to organisational resources and simplify app and device management across the organisation.

Do I need to register my device?

Registering your device is entirely optional but will depend on your preferences.

You will only need to register your device if you want to access University services or systems from it. If you don’t want to access University systems or services from your device, you don’t need to do anything.

This service collects device and application information to determine compliance and access rights. Click the button below to view the information the University will be able to see if you choose to use your personal device to access organisational resources.

Using Intune

To access University resources from your device(s), you will need to register with Intune. Depending on the University resources you wish to access from your device, you will need to set up different levels of permissions. These are outlined for each platform in the instructions below. Please select the option(s) below which most apply to you to get started.

Apple iOS Devices

If you require access to core Microsoft applications on your device – such as the Teams, Outlook and OneDrive apps – then follow Step 1 – In-App Protection below.

Step 1 – In-App Protection

  1. On iOS devices, you will first need the Microsoft Authenticator application installed. If you don’t already have it installed, please follow our full instructions on installing and setting up the Microsoft Authenticator App for MFA – then come back to this page.
  2. Once you have the Microsoft Authenticator application installed, you will be required to set a six-digit PIN the next time you access a Microsoft application. This PIN is not linked to your device’s PIN, and depending on your settings, this may also connect with your existing Face or Touch ID.
  3. Microsoft applications (including Teams and Outlook) may also ask you to “Register” via the Microsoft Authenticator App and require a restart before you can use them.

Once you have completed the steps above, your device has In-App Protection set up and is compliant. With In-App Protection set up, the University cannot see any personal information on the device, and we have no access to wipe the device. Only the University data that is stored within the protected app can be removed via the protection policy.

Wait! Do you need Full Device Protection?

I don’t require access to wider applications

If you don’t require access to wider applications such as University systems from your device(s), you do not need to do anything else, and are now fully compliant – your setup is now complete!

I require access to wider applications

If you do want access to wider applications outside of core Microsoft products (Outlook, Teams, OneDrive, OneNote etc.) – such as University systems – via your personal device(s), you will need to set up Full Device Protection. This requires the Intune Company Portal App to be installed and device-registered using your University credentials. Please proceed to Step 2 below to set up Full Device Protection.

Step 2 – Full Device Protection

If you want access to wider applications outside core Microsoft products, such as University systems, from your personal device, you will need Full Device Protection. This requires the Intune Company Portal App to be installed and device-registered using your University credentials.

Registering your device in this way will also allow the University to have limited management of the device and to perform certain actions, including:

  • Remotely resetting or wiping a lost or stolen device 
  • Providing remote assistance

  1. Access the App Store and download the Intune Company Portal app. Make sure this is the Microsoft application.

    A screenshot of the Intune Company Portal app as it appears in the App Store.
  2. Once it has been installed on your device, open the Intune Company Portal app, and you will be asked to register the device.
  3. Authenticate using your University login information and accept the application requirements.

    Once the Intune Company Portal app has been installed and configured, your device will appear under the Devices tab. This will show if the device is compliant with University policy. Please note that it could take up to an hour before the device is shown as compliant. Your setup is now complete!

Android Devices

If you require access to core Microsoft applications on your device – such as the Teams, Outlook and OneDrive apps – then follow Step 1 – In-App Protection below.

Step 1 – In-App Protection

On Android devices, you will need the Company Portal App installed, but you do not need to sign into the portal, so your device will not be registered within Intune.

  1. Once Intune is activated by Digital Technologies, you will be automatically notified to install the necessary application as part of the application protection process. Once notified, access the Google Play store and download the Intune Company Portal App. Make sure this is the Microsoft application by checking it is from “Microsoft Corporation”.

    A screenshot of the Intune Company Portal app as it appears in the Google Play Store.
  2. These applications are required to provide the interface between the operating system of the device and the application protection policy.

The Microsoft applications can be used if the device is compliant. There are further restrictions on saving data outside of the application and additional requirements for PIN access. Microsoft applications may also ask you to “Register” and require a restart before you can use them.

Please Note: If you would rather create a split between your personal and work applications, you can set Full Device Protection on a separate profile on your device. This will provide additional features such as the ability to pause work apps which will disable notifications from the work apps installed. This will effectively work in the same way as having two phones, as you won’t be able to copy and paste from your work profile to your personal profile.

Wait! Do you need Full Device Protection?

I don’t require access to wider applications

If you don’t require access to wider applications such as University systems from your device(s), you do not need to do anything else, and are now fully compliant – your setup is now complete!

I require access to wider applications

If you do want access to wider applications outside of core Microsoft products (Outlook, Teams, OneDrive, OneNote etc.) – such as University systems – via your personal device(s), you will need to set up Full Device Protection. This requires the Company Portal App to be installed and device-registered using your University credentials. Please proceed to Step 2 below to set up Full Device Protection.

Step 2 – Full Device Protection

If you want access to wider applications outside core Microsoft products, such as University systems, from your personal device, you will need Full Device Protection. This requires the Intune Company Portal App to be installed and device-registered using your University credentials.

Registering your device in this way will also allow the University to have limited management of the device and to perform certain actions, including:

  • Remotely resetting or wiping a lost or stolen device 
  • Providing remote assistance
  1. Access the Google Play store and download the Intune Company Portal App. Make sure this is the Microsoft application by checking it is from “Microsoft Corporation”.

    A screenshot of the Intune Company Portal app as it appears in the Google Play Store.
  2. Once installed on your device, open the Intune Company Portal app, and you will be asked to register the device. You will need to authenticate using your university login information and accept the application requirements.

Android-Only

If you want to create a split between your personal and work applications, you can set Full Device Protection on a separate profile on your device. This will provide additional features, such as the ability to pause work apps, which will disable notifications from the work apps installed. This will effectively work in the same way as having two phones, as you won’t be able to copy and paste from your work profile to your personal profile.

Once the Intune Company Portal app has been installed and configured, your device will appear under the Devices tab. This will show if the device is compliant with University policy. Please note that it could take up to an hour before the device is shown as compliant. Your setup is now complete!


Was this information helpful?

Feedback – Intune How To

This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.