Quickstart: Try Microsoft Intune for free
Microsoft Intune helps you protect your workforce's corporate data by managing devices and apps. In this quickstart, you will create a free subscription to try Intune in a test environment.
Intune provides mobile device management (MDM) and mobile app management (MAM) from a secure cloud-based service that is administered using the Microsoft Endpoint Manager admin center. Using Intune, you ensure your workforce's corporate resources (data, devices, and apps) are correctly configured, accessed, and updated, meeting your company's compliance policies and requirements.
When you complete the sign up process, you'll have a new tenant. A tenant is a dedicated instance of Azure Active Directory (Azure AD) where your subscription to Intune is hosted. You can then configure the tenant, add users and groups, and assign licenses to users. When you're ready, you can help users enroll their devices and add apps that they need to begin the modern endpoint management process. As you continue, you can set configuration and protection policies, as well as other endpoint management capabilities.
Before setting up Microsoft Intune, review the following requirements:
Sign up for a Microsoft Intune free trial
Trying out Intune is free for 30 days. If you already have a work or school account, sign in with that account and add Intune to your subscription. Otherwise, you can sign up for a new account to use Intune for your organization.
You can't combine an existing work or school account after you sign up for a new account.
To sign up for the Microsoft Intune free trial, follow the steps below:
Navigate to the Intune set up account page.
Enter your email address and click Next.
If you already have an account set up with another Microsoft service using your email address, you can choose to sign in to use the account with the Intune trial, or you can create a new account. These steps assume you are creating a new account.
Click Set up account to create a new account.
Add your name, phone number, company name, company size, and region. Then, click Next.
If most of your IT operations and users are in a different locale than you, you may want to select that locale under Country or region. Intune uses your regional information to deliver the right services. This setting can't be changed later.
Click Send Verification Code to verify the phone number you added.
Enter the verification code you receive on your mobile device, then click Verify.
Add a domain name for your trial that represents your business or organization. Your name will be added before .onmicrosoft.com. Click Check availability > Next. If you like, you can later change this domain name to your custom domain name.
If your organization has its own custom domain that you want to use without .onmicrosoft.com, you can change that in the Microsoft 365 admin center described later in this article.
Add your user name and password that you'll use to log in to Microsoft Intune. Review the trial agreement and privacy statement. Click Sign up to create your account.
Be sure to make a note of your user name and password.
After your account has been created, you'll see your user name. You'll use this user name to log in to Intune. Additionally, you'll receive an email message that contains your account information at the email address that you provided during the sign-up process. This email confirms your subscription is active.
Sign in to Intune in the Microsoft Endpoint Manager admin center
If you're not already signed in to the portal, complete the following steps:
Open a new browser window and enter https://endpoint.microsoft.com in the address bar.
Use the user ID that you were given in the steps above to sign in. The user ID will look similar to the following: yourID@yourdomain.onmicrosoft.com.
When you sign up for a trial, you will also receive an email message that contains your account information and the email address that you provided during the sign-up process. This email confirms your trial is active.
When working with the Microsoft Endpoint Manager, you may have better results working with a browser in regular mode, rather than private mode.
Confirm the MDM authority in Microsoft Endpoint Manager
By default, the Mobile Device Management (MDM) authority is set when you create your free trial. You can confirm that the MDM authority is set by using the following steps:
- If you're not already signed in, sign in to the Microsoft Endpoint Manager admin center.
- Click Tenant administration.
- View the tenant details. The MDM authority should be set to Microsoft Intune.
If after signing in to the Microsoft Endpoint Manager, you see an orange banner indicating that you haven't yet set the MDM authority, you can activate it at this time. The mobile device management (MDM) authority setting determines how you manage your devices. The MDM authority must be set before users can enroll devices for management.
Set the MDM authority to Intune
If you do not have the MEM authority set, sign in to the Microsoft Endpoint Manager admin center.
Select the orange banner to open the Mobile Device Management Authority setting. The orange banner is only displayed if you haven't yet set the MDM authority.
If you have set the MDM Authority, you will see the MDM authority value on the Tenant administration pane. The orange banner is only displayed if you haven't yet set the MDM authority.
If your MDM Authority is not set, under Choose MDM Authority, set your MDM authority to Intune MDM Authority.
For more information about the MDM authority, see Set the mobile device management authority.
Configure your custom domain name (Optional)
As mentioned above, if your organization has its own custom domain that you want to use without .onmicrosoft.com, you can change it in the Microsoft 365 admin center. You can add, verify, and configure your custom domain name using the following steps.
You cannot rename or remove the initial onmicrosoft.com part of the domain name. However, you can add, verify or remove custom domain names used with Intune to keep your business identity clear. For more information, see Configure a custom domain name.
Go to Microsoft 365 admin center and sign in using your administrator account.
In the navigation pane, choose Setup > Domains > Add domain.
Type your custom domain name. Then, select Next.
Verify that you are the owner of the domain that you entered in the previous step.
Selecting send code via email will send an email to the registered contact of your domain. After you receive the email, copy the code and enter it in the field labeled Type your verification code here. If the verification code matches, the domain will be added to your tenant. The email displayed may not look familiar. Some registrars hide the real email address. Also, the email address may be different then what was provided when the domain was registered.
For TXT record verification details, see Create DNS records at any DNS hosting provider for Microsoft 365.
There are two portals that you will use most often:
- The Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com/) is where you can explore the capabilities of Intune. This is where an admin would work with Intune.
- The Microsoft 365 admin center (https://admin.microsoft.com) is where you can add and manage users, if you are not using Azure Active Directory for this. You can also manage other aspects of your account, including billing and support.
In this quickstart, you've created a free subscription to try Intune in a test environment. For more information about setting up Intune, see Set up Intune.
To follow this series of Intune quickstarts, continue to the next quickstart.