AndroidAndroid

根据在最终用户设备上运行的操作系统版本,用户看到的注册过程和屏幕会略有不同。The enrollment process and the screens the user sees will be slightly different depending on the version of OS running on the end-user device. 本主题描述了注册 Android 设备的最终用户体验。This topic describes the end-user experience for enrolling Android devices.

注册Enrolling

  1. 当用户尝试访问电子邮件时,会收到类似于此示例的隔离电子邮件:When they try to access email, the user first receives a quarantine email similar to this sample:

    显示用户在 Android 设备上接收到的隔离电子邮件的屏幕截图

    用户单击“立即开始” 以开始注册其设备。The user clicks Get started now to begin enrolling their device.

    备注

    如果用户没有为其设备设置默认浏览器,则系统会在设备注册过程中和注册激活过程中提示用户允许用于打开浏览器窗口的链接。If a user has not set a default browser for their device, they will be prompted during device enrollment and during enrollment activation to allow a link to open a browser window. 出现提示时,他们必须每次选择相同浏览器,否则注册过程会失败。When prompted, they must select the same browser each time or the enrollment process will fail.

  2. 系统会提示用户从相应的应用商店安装 Intune 公司门户应用。The user is prompted to install the Intune Company Portal app from the respective app store.

    显示 Android 设备上 Intune 公司门户的屏幕截图

    安装之后,用户会打开该应用并使用其公司凭据进行登录。After it installs, the user opens the app and signs in using their company credentials.

  3. 在“公司访问设置”屏幕上,用户单击“开始” 以开始设置其设备并检查它是否合规。On the Company Access Setup screen, the user clicks Begin to start setting up their device and checking whether it is compliant.

    显示 Android 设备上“公司访问设置”屏幕的屏幕截图

  4. 在“设备注册”屏幕上,用户单击“注册” 以开始注册其设备。On the Device Enrollment screen, the user clicks Enroll to start enrolling their device.

    显示 Android 设备上“设备注册”屏幕的屏幕截图

  5. 用户必须在出现提示时通过单击“激活” 来激活设备管理员,否则设备注册过程会取消。Users must activate the device administrator by clicking Activate when prompted or the device enrollment procedure will cancel.

    显示用户必须在 Android 设备上激活设备管理员的屏幕截图

    设备注册开始。Device enrollment begins. 根据设备,可能会在注册过程中出现证书安装提示或 Samsung KNOX 隐私策略提示。Depending on the device, a certificate installation prompt or a Samsung KNOX Privacy Policy prompt might appear during enrollment. 为使你(即 IT 管理员)可以远程管理设备,这些是必需的。These are necessary to allow you, the IT administrator, to remotely manage the device. 设备会注册到 Intune,并通过 Azure Active Directory 建立设备标识。The device is enrolled to Intune and establishes a device identity with Azure Active Directory.

    显示 Android 设备上开始设备注册的屏幕截图

  6. 注册成功完成之后,用户单击“继续” 以开始在设备上检查合规性。After enrollment is completed successfully, the user clicks Continue to start checking compliance on the device.

    显示 Android 设备上设备注册成功的屏幕截图

    如果存在合规性问题,则系统会提示用户解决问题(如创建有效密码),然后单击“检查法规遵从性” 以继续。If there is a compliance issue, the user is prompted to resolve the issue (such as creating a valid password) and to then click Check Compliance to continue.

    显示用户必须解决 Android 设备合规性问题的屏幕截图

  7. 设备完全合规之后,用户单击“继续” 以启动注册激活。After the device is fully compliant, the user clicks Continue to initiate enrollment activation. 这会将 AAD 设备标识与 Exchange 提供的 EAS ID 相连接。This will connect the AAD device identity with the EAS ID provided by Exchange.

    备注

    在 Android 上,默认浏览器会在注册激活过程中出现几秒钟。On Android, the default browser will appear for a few seconds during enrollment activation. 如果用户尚未选择默认浏览器,则系统会提示他们选择浏览器。If the user has not already selected a default browser, they are prompted to choose a browser. 完成公司访问设置时,用户在每次出现提示时必须选择相同浏览器。While completing Company Access Setup, the same browser must be selected by the user whenever prompted.

    显示 Android 设备合规的屏幕截图

  8. 注册激活将完成,用户单击“完成” 以退出注册和合规性验证过程。Enrollment activation will complete and the user clicks Done to exit the enrollment and compliance verification process.

    显示 Android 设备上完成公司访问设置的屏幕截图

    注册了用户且验证了合规性之后,应该在几分钟内可访问电子邮件。After the user is enrolled and compliance is verified, email access should become available within a few minutes.

如果用户遵循这些步骤以进行注册并合规,但仍然无法在其移动设备上访问其电子邮件,则他们可以按照以下这些附加步骤来尝试并解决问题:If the user follows those steps to enroll and become compliant and still cannot access their email on their mobile device, they can follow these additional steps to try and fix the issue:

  1. 首先,验证其设备是否已注册。First, verify that their device is enrolled. 如果未注册,则用户执行以上步骤。If not, the user follows the steps above.

  2. 通过单击“检查法规遵从性” 来验证设备是否合规。Verify that the device is compliant by clicking Check Compliance. 如果发现合规性错误,则用户可以遵循特定于其移动设备的有关如何解决错误(如重置其密码)的说明。If a compliance error is identified, the user can follow the instructions specific to their mobile device about how to resolve it, such as resetting their password.

  3. 致电技术支持。Call the help desk.

问题和解决方案Issues and Solutions

默认情况下,每 8 小时会检查一次设备,以确保它们仍然合规。Every 8 hours by default, devices are checked to ensure that they are still compliant. 如果以前合规的设备在以后被视为不合规(例如,添加或更改了合规性策略),则用户可以执行这些步骤以使其设备重新合规:If a device that was previously compliant is later deemed to be noncompliant (for example, a compliance policy was added or changed), the user can follow these steps to get their device back in compliance:

  1. 用户会通过电子邮件或在其设备上收到声明其设备不合规的通知。The user receives notification in email or on their device that the device is noncompliant. 此时,设备会在 Exchange 中受到隔离。At this time, the device is quarantined in Exchange.

  2. 当用户尝试访问电子邮件时,他们会看到隔离电子邮件,告知他们必须先解决合规性问题,然后才能进行访问。When the user tries to access email, they see a quarantine email informing them that compliance issues must be fixed before they can get access. 当用户单击隔离电子邮件中的超链接时,它会将他们重定向到 Intune 公司门户中的“公司访问设置”屏幕(通过默认浏览器和 Google Play),在其中会显示设备不合规。When the user clicks on the hyperlink in the quarantine email, it redirects them to the Company Access Setup screen in the Intune Company portal (via default browser and Google Play) where it shows that the device is not compliant.

    显示 Android 设备变得不合规的屏幕截图

  3. 用户单击“继续” ,会向其显示阻止访问电子邮件的合规性问题。The user clicks Continue and is shown the compliance issue that is preventing them from accessing email.

    显示用户必须解决 Android 设备合规性问题的屏幕截图

  4. 在他们解决了问题之后,他们会单击“检查法规遵从性” 以验证是否解决了问题。After they have fixed the issue, they click Check Compliance to verify that the problem is resolved.

  5. 如果问题得到解决,则用户单击“继续” 以完成该过程。If the issue is fixed, the user clicks Continue to complete the process. 应在几分钟内可再次访问电子邮件。Email access should become available again within a few minutes.

后续步骤Where to go from here

最终用户体验在其他移动设备上会稍有不同。The end-user experience is slightly different on other mobile devices. 你可以了解有关 iOSWindows Phone 的最终用户体验的详细信息。You can learn more about the end-user experience for iOS and Windows Phone.