Intune Mobile - Enroll a Personal Android Device


Introduction

 

Before You Begin Checklist

 

1. Operating system requirement: Android OS 9 and above
NOTE: Android OS 8 and below, will not be allowed to enroll

How to check your Android OS

Current compatible operating systems

2. Make sure your device's battery is charged; at least 50% required, preferably plugged into a charger

Optional : Make a new backup just in case you run into any issues

General Overview Back up or restore data on your Android device

Important : Some of these steps only work on Android 9 and up Learn how to check your Android version

3. Have a 6-digit alphanumeric passcode or 8-digit numeric PIN ready for your device
Note: On Android devices, this passcode cannot be remotely reset or removed if forgotten

Required by Compliance and Information Assurance (Security)

Required by Microsoft as of the December Company Portal update

Biometrics (Face, Finger, Watch) may be used in tandem with the device passcode

4. Know your uniqname and UMICH password

5. Have Duo already configured, (if using same phone, you should be ready) instructions to enroll available in this article: Duo - Enroll Android

6. Have your Google / Google Play account information at the ready

7. You can enroll on Cellular, but Wi-Fi is preferred

 

 

 

Table of Contents

Enroll

Outlook Setup

Unenroll

 

 

 

 

Instructions

 

Disclaimer: Android devices come from multiple manufacturers, each with their own unique operating system variant.

The figures displayed below were captured on a Samsung Galaxy running Android 13.

Certain User Interface elements may appear slightly different on your device, however, the enrollment process should remain nearly identical.

 

 

Enroll

 

1. Visit the Play Store on your Android device and download the Intune Company Portal app

Once the app is installed, open it to begin the enrollment process

 

 

2. Tap Sign In to continue

 

 

3. Enter your @med.umich.edu email, then tap Next

 

 

4. Enter your uniqname and UMICH password

 

 

 

5. You will receive a DUO prompt, accept the prompt to continue

 

 

6. Tap Begin to continue

 

 

7. Tap Continue

 

 

8. Tap Agree to set up your work profile

 

 

9. Tap Next

 

 

10. Tap Continue

 

 

11. Select the Personal Device category when prompted, then tap Done

 

 

12. Tap Done then Got It

 

 

 

Note: Your device's app tray will now be separated into Work and Personal categories

 

 

 

 

Set Up Outlook

 

1. Navigate to the Work tab of your device's app tray, then open Outlook to continue

Note: After enrollment, your device may take several minutes to check-in and install the default applications shown below.

If you do not yet see Outlook listed in the application tray, please check back after a few minutes.

 

 

2. Tap Add Account. Verify your Office 365 account is already selected, then tap Continue

 

 

 

3. Tap Activate to continue

 

 

 

4. Tap Activate

 

 

5. If you have another account you would like to add to your Outlook you may tap Add, otherwise tap Maybe Later to proceed to your inbox

 

 

Known issues:

Legacy Android devices may not have all the Certificates they need (or turned on) to accept policies and configurations from the Android for Work management profiles. Do the following to check the proper settings on most Android devices.

On your Android device > Go to Settings > Biometrics and Security > Other Security Settings > View Security certificates > Under System, Scroll down to find "The USERTRUST Network". There should be 2 USERTRUST certificates. Most likely, one of them is in a disabled state. If this is the case, please enable it and continue with your enrollment.

 

 

 

 

 

Unenroll

 

1. Open Settings and navigate to Accounts and Backup

 

 

2. Tap Manage Accounts

 

 

3. On the Work tab, tap Uninstall Work Profile

 

 

4. Tap Delete

 

Your device will proceed to unenroll from Intune, uninstall any managed applications, and remove the work profile from your device.

Note: You may also unenroll from Intune via the Self Service Portal rather than unenrolling from the settings menu on your device