What to expect after enrolling Windows device in Intune
The Company Portal app enables you to securely access work or school from anywhere, while keeping your device secure. After you enroll in Intune, Company Portal will continually monitor changes to your device settings to make sure it meets your organization's requirements. This article describes the kind of changes you can expect once you've enrolled your device.
What happens on all devices after enrollment
After you enroll any Windows device (mobile or desktop) in Intune:
You can access your org's network, email, and work files.
You can install work or school apps from the Company Portal website and app. (Note: for Windows 7 and Windows Vista, you can only get these apps from the Company Portal website.)
Your work or school email is automatically set up.
You can reset your phone to factory settings if it's lost or stolen.
What happens on Windows PCs after enrollment
In addition to everything under What happens on all devices after enrollment, after you enroll a Windows PC in Intune:
Software is installed on the computer so that IT support can manage the computer. IT support can automatically update this software.
Intune Endpoint Protection might be installed on your computer. This software checks for viruses and malware.
IT support can collect or delete data from your computer's hard drive.
IT support can install apps and updates on your computer.
IT support permissions
When you enroll your device, you are giving IT support permission to:
Reset your device back to the manufacturer's default settings. This is helpful if the device is lost or stolen.
Remove work-related files and business apps. Personal data and settings aren't removed.
See the software installed on the device, including software you've personally installed.
Set requirements on your device, like requiring you to have a device password or PIN. Your org might also limit how many times you can enter an incorrect password, and might lock you out of the device if you try too many times.
Require you to encrypt the data on your device to help protect company data, in case your device is lost or stolen.
Require you to accept terms and conditions.
Block you from using the device camera or screenshot feature. This restriction limits the sharing of work-related data.
Device syncing for updates
Every eight hours, enrolled devices will sync with Intune to get the latest updates and policies from your org. During check-in the device can:
Download policy or app updates.
Receive hardware inventory updates.
Receive app inventory updates.