What is device enrollment (2024)

Article
08/03/2023

Applies to

Android
iOS/iPadOS
Linux
macOS
Windows 10
Windows 11

Device enrollment enables you to access your work or school's internal resources (such as apps, Wi-Fi, and email) from your mobile device. During device enrollment:

Your device enrolls in Microsoft Intune, a mobile device management provider, and registers with your organization. This step ensures that you're authorized to access your organization's email, apps, and Wi-Fi.
Your organization's device management policies are applied to your device. Policies can include requirements for things like device passwords and encryption. The purpose of these requirements is to keep your device and your organization's data secure from unauthorized access.

Once you update your device settings to meet your organization's requirements, enrollment is complete. You can securely sign in to your work or school account from virtually anywhere.

This article describes other aspects of enrollment, such as how to get the apps, supported devices, and removing or resetting your device.

Company Portal and Microsoft Intune app

Company Portal and the Microsoft Intune app alert you to policy or setting changes, so you can take action without losing access to work or school.

Company Portal keeps your personal and work information separate, so you can remain productive and focused when using your device for work purposes. You can also find your work and school apps in Company Portal.

Get Company Portal

In some cases, your organization will install the Company Portal app on your device for you, so check your device before trying to install it. The app is also available to install from app stores such as the Microsoft Store, App Store, and Google Play store. To access the Company Portal from a web browser, sign in to the Company Portal website with your work or school account.

Get Microsoft Intune app

If you're required to use the Microsoft Intune app with your Android device, your organization will install it on your device for you.

For information about how to install the Intune app on a work or school-provided Linux device, see Get the Microsoft Intune app for Linux.

What's the difference between the apps and the website?

The Company Portal app is available for Windows 10/11, iOS/iPadOS, macOS, and Android devices. It integrates seamlessly with your device's respective platform. The website version is accessible from any device and gives you the same, universal experience no matter what device you're using.

What kind of devices can you enroll with Company Portal?

You can use Company Portal to enroll devices running:

Windows 10/11
Android OS
iOS/iPadOS
macOS

What kind of devices can you enroll with the Microsoft Intune app?

You can enroll corporate-owned Android and AOSP devices that your organization has set up to use with the app. The app supports Android 8.0 and later. The Microsoft Intune app is also available for Linux devices. Enrolled Linux devices are considered corporate-owned in Intune, so we don't recommend enrolling a personal device.

Can you remove a device from the Company Portal?

You can remove or reset your device with Company Portal. There is a difference between remove and reset.

During removal, Company Portal unenrolls and unregisters the device from Intune. That device loses access to the Company Portal. Work and school data might also be removed.

During a device reset, Company Portal tries to reset your device back to the manufacturer's factory default settings. All data is removed from the device. A reset is useful if, for example, you lose your device and there is sensitive data on it. You can remotely reset an enrolled device from the Company Portal website.

Can you remove a device from the Microsoft Intune app?

No, there's no way for you to remove a corporate-owned device from the Microsoft Intune app.

What if I can't see my device in the Company Portal or Microsoft Intune app?

To see a device in Company Portal, it must first be enrolled. If after enrollment you still don't see all of your devices, try to sync or check access through the Company Portal. You won't see devices that are owned and managed by your company.

In the Microsoft Intune app, you only see the device you're currently using. Other enrolled devices will not be visible to you in the app.

Where else can I go for help?

Refer to the articles in this doc set for step-by-step help and explanations. In the table of contents, select from the Android, iOS, Windows, or macOS device management categories. Then select Update device settings to see a list of how-to articles that address common messages in Company Portal.

You can also contact your IT support person. The Company Portal and Microsoft Intune apps offer help and support pages with contact information and ways to report a problem. Contact information is also available on your org's Company Portal website.

Next steps

If you're ready to access your work or school account, follow your organization's instructions to enroll your device. You can also find step-by-step enrollment guidance in the following articles.

Enroll your Windows 10/11 device
Enroll your Android device
Enroll with Android work profile
Enroll Android or AOSP device with Microsoft Intune app
Enroll your iOS device
Enroll your organization-provided iOS device
Enroll Linux device with Microsoft Intune app
Enroll your macOS device
Enroll your organization-provided macOS device

FAQs

What is device enrollment? ›

Device Enrollment allows organizations to have users manually enroll devices into a mobile device management (MDM) solution and then manage many different aspects of device use, including the ability to erase the device. On Mac computers using macOS 11 or later, Device Enrollment also enforces supervision on the Mac.

Read On ›

What does device enrollment mean? ›

Device enrollment enables you to access your work or school's internal resources (such as apps, Wi-Fi, and email) from your mobile device. During device enrollment: Your device enrolls in Microsoft Intune, a mobile device management provider, and registers with your organization.

Discover More Details ›

What is the device enrollment program Apple? ›

The Device Enrollment Program (DEP) helps businesses easily deploy and configure Apple devices. DEP provides a fast, streamlined way to deploy organization-owned iPad and iPhone devices, Mac computers, and Apple TV purchased directly from Apple or participating Apple Authorized Resellers or carriers.

How do I get rid of device enrollment on Mac? ›

Use System Preferences to remove an enrollment profile

On the macOS computer, click the Apple menu icon then go to System Preferences > Profiles . ...
Select your enrollment Profile.
Click the minus icon at the bottom of the dialog to begin the removal process.
Click Remove, if prompted to confirm removal.

See Details ›

What can a device enrollment manager do? ›

A device enrollment manager (DEM) is a non-administrator user who can enroll devices in Intune. Device enrollment managers are useful to have when you need to enroll and prepare many devices for distribution.

Find Out More ›

What are the benefits of device enrollment? ›

Automated mobile device enrollment methods offer many advantages to organizations, such as saving time and resources, improving security and compliance, enhancing user experience and productivity, and simplifying device lifecycle management.

Tell Me More ›

Why enroll your Android device? ›

Access internal apps, VPN, and Wi-Fi

During enrollment, you have to sign in with your work or school account. After you authenticate and configure your device settings to match your organization's policies, you can access your work email, Wi-Fi network, files, and apps on your device.

Show Me More ›

How long does Apple Enrolment take? ›

"How long does it take to have my Apple Development account active after I enroll?" After you enroll, make sure you look for a confirmation email. Apple says it can take up to 24-48 hours to confirm and setup a new Apple developer account.

Explore More ›

How does Apple automated device enrollment work? ›

Auto Advance and Automated Device Enrollment (macOS)

The Mac locates the assigned MDM solution and is automatically configured based on settings from the MDM solution, including skipping all Setup Assistant panes. The user then enters a known user name and password at the Login window.

What is enrollment device limit restrictions? ›

There are two types of device enrollment restrictions you can configure in Microsoft Intune: Device platform restrictions: Restrict devices based on device platform, version, manufacturer, or ownership type. Device limit restrictions: Restrict the number of devices a user can enroll in Intune.

Show Me More ›

Is someone logged into my Mac? ›

To do this, open up Terminal on your Mac. Type in last and press Enter. This will list all the login events with your account username and the exact login time. You can use this to guess whether someone else may have logged in to your Mac behind your back.

Read The Full Story ›

How do I stop someone from accessing my Mac remotely? ›

Enable or disable remote management using System Preferences

On the client computer, choose Apple menu > System Preferences, then click Sharing.
If you see a lock icon, click it and enter the name and password of a user with administrator privileges on the computer.
Select or deselect the Remote Management checkbox.

See Details ›

Who has accessed my Mac? ›

Here are some steps that you can take to check if someone is remotely accessing your Mac computer:

Check for remote login.
Check your user accounts.
See all the latest activity on your device.
Inspect for suspicious activity.
Check installed programs on your Mac.
Check your firewall settings.
Run an antivirus scan.

Apr 2, 2024

Get More Info Here ›

What information can my Organisation see when I enroll my device? ›

Your organization can always see:

Device owner.
Device name.
Device serial number.
Device model, such as Google Pixel.
Device manufacturer, such as Microsoft.
Operating system and version, such as iOS 12.0.1.
Device IMEI.
App inventory and app names, such as Microsoft Word.

Feb 1, 2024

What is the point of Device Manager? ›

Device Manager is a component of the Microsoft Windows operating system. It allows users to view and control the hardware attached to the computer. When a piece of hardware is not working, the offending hardware is highlighted for the user to deal with.

Do you need Device Manager? ›

It helps ensure that devices are secure, up-to-date, and compliant with organizational policies, with the goal of protecting the corporate network and data from unauthorized access. As organizations support remote and hybrid workforces, it's more important than ever to have a solid device management strategy.

View Details ›

How do I remove network device enrollment service? ›

To remove the NDES role service, use the Uninstall-AdcsNetworkDeviceEnrollmentService cmdlet. You can import the cmdlet by running the following commands from Windows PowerShell: Import-Module ServerManager. Add-WindowsFeature Adcs-Device-Enrollment.

What does enrollment verification mean? ›

What is a degree/enrollment verification? A verification is a request for a university to verify a student's degree and enrollment information. Unlike a transcript, a verification is simply a confirmation of degrees earned and does not include course grades.

Learn More ›

How does automated device enrollment work? ›

Discover More Details ›