Why enroll your Android device
Schools and employers want to make sure that you're using a secure, trusted device to access internal resources. The Company Portal and the Microsoft Intune apps keep your Android device and data secure while you're accessing these resources. They ensure that you have secure access to resources no matter where you are or what device you're using.
If your organization requires you to install and enroll with one of these apps, you'll need to do that before you can access corporate resources from your device. This article describes the purpose and benefits of enrolling your devices with these apps.
Gets your device managed
Company Portal and the Microsoft Intune app enroll your device in Intune. Intune is a mobile device management provider that helps your org manage mobile devices and apps through security and device policies.
The apps walk you through each step of enrollment, and configure your device settings to match your organization's policies. They also alert you to problems or settings that need to be resolved before you can get corporate access.
Examples of policies that your organization might require are:
- Setting up a password or PIN
- Restricting access after a set number of sign-in attempts
- Ensuring that you're not using a jailbroken or rooted device
- Installing work-required apps
Gives you access to work and school apps, work files, and email
During enrollment, Company Portal and the Microsoft Intune app require you to connect to your work or school account. After you authenticate and after you've configured your device settings to match your organization's policies, you'll gain access to your organization's email account, network, files, and apps.
Organizations sometimes require you to install work or security apps, such as Microsoft Office or Mobile Threat Defense. If these apps are required or become available for you, you'll find them in Company Portal or the Microsoft Intune app.
Lets you remotely reset a lost or stolen device (if device supports it)
If a device is lost or stolen, you can sign in to the Company Portal app or Company Portal website on any other device, and reset your phone to factory settings. This feature is helpful if your missing device contains proprietary work data that you don't want anyone else to access. Because the device is enrolled in management, your company support or IT admin can also help reset it.
The reset feature isn't available in the Microsoft Intune app.
Notifies you of policy updates and requirements
The Company Portal or Microsoft Intune app will automatically check in, or sync, with Intune every eight hours. If you're using Company Portal and want to check in more frequently, you or your company support can initiate a manual sync. During check-in, the apps will:
- Download any policy or app updates that your company support makes available.
- Send hardware inventory updates. These updates don't contain personal information.
- Send company app inventory updates. These updates don't contain personal information.
When your device is out-of-sync or no longer meets the requirements, its status appears as Not compliant. Your access to work and school-related resources might be revoked until your device meets the requirements again. The Company Portal app notifies you of these problems and the steps you need to take to fix them.
Permits company support access to your device
When you enroll your device, your company support or IT admin is given access to the device for limited and meaningful reasons. They can:
Reset your device back to the manufacturer's defaults. As mentioned above, you also have access to reset your device. However, if you can't access the Company Portal app right away, your company can reset the device for you.
Remove all company-related data. Your organization might remove company-related data from your device if you leave the company, or if your device becomes unmanaged. Your personal data and settings aren't removed, and will remain on the device.
Set requirements for your device, such as requiring you to have a device password or PIN. In this case, you'll get app notifications that your device isn't compliant. Your company support might also limit the number of times you can enter an incorrect password on your device. Excessive, failed password attempts might result in your device being locked.
Require you to accept terms and conditions.
Disable the camera. The purpose of this policy is to prevent you from photographing proprietary information, and also to remove distractions from school environments. Schools might disable cameras on classroom devices so that students cannot share test materials.
Require that all data on the device is encrypted. If lost or stolen, this policy helps protect the data on your device. It also protects data that is shared between devices or apps.