IT 管理员最终用户 Intune 注册说明End-user Intune enrollment instructions for IT administrators

该文档包含你可自定义和提供给用户的注册说明,以帮助用户在 Microsoft Intune™ 中注册 iOS 和 Android 设备(对于 Windows 设备,请参阅“通过 Intune 使用 Windows 设备”)。This document contains enrollment instructions that you can customize and give to your users to help them enroll their iOS and Android devices in Microsoft Intune™ (for Windows devices, see Using your Windows device with Intune). 我们建议复制本文档中你认为最适合于用户的部分。We recommend that you copy the parts of this document that you think are most appropriate for your users. 例如,建议对每个设备平台生成一个单一文档或添加更多屏幕截图。For example, you may want to produce a single document for each device platform, or to add more screenshots.

除了这些书面说明,你还可包含指向任何 Intune 最终用户视频的超链接,见于 https://channel9.msdn.com/Series/IntuneEnrollmentIn addition to these written instructions, you can also include hyperlinks to any of the Intune end user videos, found at https://channel9.msdn.com/Series/IntuneEnrollment.

备注

Microsoft、Intune 和 Office 365 是 Microsoft Corporation 的注册商标。Microsoft, Intune, and Office 365 are registered trademarks of Microsoft Corporation. iPhone、Mac 和 Apple 是 Apple Inc. 的商标Android 是 Google Inc. 的商标Samsung KNOX 是 Samsung Electronics Co., Ltd. 的商标iPhone, Mac and Apple are trademarks of Apple, Inc. Android is a trademark of Google Inc. Samsung KNOX is a trademark of Samsung Electronics Co., Ltd.

在 Intune 中注册的原因Why enroll in Intune

注册后,可使用移动设备访问工作或学校文件和数据。When you enroll, you are able to use your mobile device to access work or school files and data. 还可让 IT 部门来管理这些工作或学校资源并保护其安全,同时使你可以自由地使用首选设备来完成工作。It also allows your IT department to manage those work or school resources and keep them secure, while giving you the freedom to use your preferred device to get your work done.

若要在工作中使用设备,可使用公司门户在 Intune 中注册你的设备。To use your device at work, enroll it in Intune by using the Company Portal. 随后,你便可轻松地找到要安装的公司应用、查看已添加的其他设备,并找到你的 IT 管理员的联系信息。You can then easily find company apps to install, see other devices you’ve added, and find contact information for your IT administrator. 你还可授予 IT 管理员管理你的设备的权限,以帮助保护设备上的公司信息。You will also be giving your IT administrator permission to manage your device to help protect the company information on the device. 开始注册之前,请确保连接到 Internet 的 wifi 或手机网络连接良好,然后再开始。Before starting enrollment, make sure that you have a good wifi or cellular connection to the Internet before beginning.

使用 Intune 公司门户应用在 Intune 中注册 Android 设备Enroll your Android device in Intune using the Intune Company Portal app

这些注册步骤适用于 Samsung Knox Android 设备和“本机”(非 Samsung Knox)Android 设备。These enrollment steps are for Samsung Knox Android devices and "native” (non-Samsung Knox) Android devices. 若要确定你的设备是否为 Samsung Knox 设备,请转到“设置”>“关于手机”。To determine if you have a Samsung Knox device, go to Settings > About phone. 如果未在此处看到列出了“Knox”一词,则你具有本机 Android 设备。If you don't see the word "Knox" listed there, you have a native Android device. 设备上显示的屏幕可能与本部分中的屏幕略有不同。The screens shown on your device may look slightly different from the ones in this section.

如果尝试在 Intune 中注册设备时遇到错误,请参阅将注册错误发送给 IT 管理员If you get an error while trying to enroll your device in Intune, see Send enrollment errors to your IT admin.

注册前/后,系统可能会要求你选择最恰当地描述了你使用设备的方式的类别。Before or after enrolling, you may be asked to choose a category that best describes how you use your device. IT 管理员将使用此类别来帮助确定你有权访问哪些应用。Your IT administrator uses this category to help determine what apps you have access to.

  1. 请从 Google Play 中将免费的 Microsoft Intune 公司门户应用安装到设备上。Install the free Microsoft Intune Company Portal app on your device from Google Play.
  2. 打开 Microsoft Intune 公司门户应用。Open the Microsoft Intune Company Portal app.
  3. 在公司门户的“欢迎”屏幕上,点击“登录”,然后使用你的工作或学校帐户登录。On the Company Portal Welcome screen, tap Sign in, and then sign in with your work or school account.

    显示 Android 设备上 Intune 公司门户登录屏幕的屏幕截图

  4. 如果 IT 管理员设置了公司条款和条件,请点击“接受”接受这些条款。If your IT administrator set up company terms and conditions, tap ACCEPT to accept the terms.

    Android 设备上请求用户接受条款和条件的屏幕截图

  5. 如果使用的设备为 Android 6.0 或更高版本,请执行此步骤;否则,请转到下一步。If you are using an Android 6.0 or later device, do this step; otherwise, go to the next step.

    如果 IT 管理员设置了特定策略,则你可能会看到以下其中一条或两条消息:If your IT administrator set up certain policies, you may see either or both of the following messages:

    • 如果看到消息“是否允许公司门户访问你的联系人?”,请点击“允许”。If you see the message, Allow Company Portal to access your contacts?, tap ALLOW. 点击“允许”是安全的,因为 Microsoft 绝不会访问你的联系人!It is safe to tap ALLOW, because Microsoft never accesses your contacts! 消息文本由 Google 管控,Microsoft 无法更改。Google controls the message text, so Microsoft cannot change it. 允许访问时,只允许公司门户应用访问数据日志以帮助解决与设备有关的问题。When you allow access, it only allows the Company Portal app to access data logs to help troubleshoot issues with your device.

      要求用户允许门户访问 Android 设备上的联系人的屏幕截图

    • 如果看到消息“是否允许公司门户发起和管理电话呼叫?”,请点击“允许”。If you see the message, Allow Company Portal to make and manage phone calls?, tap ALLOW. 点击“允许”是安全的,因为 Microsoft 绝不会发起或管理电话呼叫!It is safe to tap ALLOW, because Microsoft never makes or manages your phone calls! 消息文本由 Google 管控,Microsoft 无法更改。Google controls the message text, so Microsoft cannot change it. 允许访问仅允许公司门户应用查看你的电话号码和名为 IMEI 的 ID。When you allow access, it only allows the Company Portal app to see your phone number and an ID called an IMEI.

      要求用户允许门户管理 Android 设备上的电话呼叫的屏幕截图

    如果点击“拒绝”,下次登录到公司门户时将再次出现此消息,但你可点击“不再询问”复选框关闭显示此消息。If you tap DECLINE, the messages will appear again the next time you sign in to the Company Portal app, but you can turn off future messages by tapping the Never ask again check box. 如果你以后决定允许访问,请转到“设置”>“应用”>“公司门户”>“权限”>“手机”,然后打开此权限。If you later decide to allow access, go to Settings > Apps > Company Portal > Permissions > Phone, and then turn on the permission.

  6. 使用你的工作或学校帐户和密码登录公司门户应用,然后点击登录Sign in to the Company Portal app using your work or school account and password, and tap Sign in.

    Android 设备上请求用户登录到公司门户的屏幕截图

  7. 在“公司访问设置”页上,点击“开始”。On the Company Access Setup page, tap BEGIN.

    显示 Android 设备上“公司访问设置”页的屏幕截图

  8. 阅读注册设备时可执行的操作,然后点击“继续”。Read about what you’ll be able to do when you enroll your device, and then tap CONTINUE.

    显示有关为何应注册 Android 设备的信息的屏幕截图

  9. 查看 IT 管理员在你注册的设备上可以看到和不可以看到的内容列表,然后点击“继续”。See the list of what your IT administrator can and can’t see on your enrolled device, and tap CONTINUE.

    Android 设备上显示隐私策略的屏幕截图

  10. 查看点击“注册”后你可能看到的项目。Review some of the things that you might see once you tap Enroll. 完成阅读后,点击“注册”。When you finish reading, tap ENROLL.

    Android 设备上显示后续注册步骤的屏幕截图

  11. 在“激活设备管理员”屏幕上,点击“激活”。On the Activate device administrator screen, tap ACTIVATE.

    Android 设备上请求用户激活设备管理员的屏幕截图

  12. 按照提示输入 PIN 或密码。Follow the prompts to enter a PIN or password. 如果已经在此设备上设置 PIN 或密码,将不会显示此屏幕或要求你输入新的 PIN 或密码。If you already set up a PIN or password on this device, you won't see this screen or be required to enter a new PIN or password.

    Android 设备上提示用户输入 PIN 的屏幕截图

  13. 按照以下与所使用的设备类型(本机 Android 或 Samsung Knox)匹配的说明进行操作。Follow the instructions below that match the type of device you’re using (native Android or Samsung Knox). 如果并非 Samsung Knox 设备,请遵循本机 Android 的说明。If you don’t have a Samsung Knox device, follow the instructions for native Android. 若要确定你的设备是否为 Samsung Knox 设备,请转到“设置”>“关于手机”。To determine if you have a Samsung Knox device, go to Settings > About phone. 如果未在此处看到列出了“Knox”一词,则你具有本机 Android 设备。If you don't see the word "Knox" listed there, you have a native Android device.

    • 本机(非 Samsung Knox)设备:在“对证书命名”屏幕上,点击“确定”接受默认证书。Native (non-Samsung Knox) device: On the Name the certificate screen, tap OK to accept the default certificate.

      Screenshot prompting the user to accept the default certificate on a native Android device

    • Samsung Knox 设备:点击“确认”Samsung Knox device: Tap CONFIRM

      Screenshot prompting the user to confirm the privacy policy for a Samsung Knox device

    在 Intune 注册设备时,你会看到以下消息显示在屏幕上。You’ll see the following message appear on your screen as Intune enrolls your device.

    显示正在注册 Android 设备的屏幕截图

  14. 在“公司访问设置”屏幕上,点击“继续”。On the Company Access Setup screen, tap CONTINUE. 如果 IT 管理员设置了其他安全要求(例如需要设置密码),请按照屏幕上的说明进行操作,然后在返回到“公司访问设置”屏幕时,点击“继续”。If your IT administrator set up additional security requirements, such as the need to set a password, follow the on-screen instructions, and then tap CONTINUE when you are taken back to the Company Access Setup screen.

    显示 Android 设备合规和提示用户继续的屏幕截图

  15. 点击“完成”。Tap DONE.

    显示 Android 设备上完成公司访问设置的屏幕截图

  16. 你的设备现已在 Intune 中注册,你会返回到公司门户应用。Your device is now enrolled in Intune, and you are taken back to the Company Portal app.
  17. 你需转到“设置”>“安全性”,然后打开“未知源”才能尝试安装公司应用。Before trying to install company apps, go to Settings > Security, and turn on Unknown sources. 如果你在尝试安装应用前未打开此选项,则会看到消息“已阻止安装”。If you don't turn on this option before trying to install apps, you'll see the message "Install blocked. 出于安全性考虑,你的手机已设置为阻止安装未知来源的应用。”For security reasons, your phone is set to block installations of apps obtained from unknown sources." 你可点击错误对话框上的“设置”以转到“未知来源”选项。You can tap Settings on the error dialog to go to the Unknown sources option.

在 Intune 中注册 iOS 设备Enroll your iOS device in Intune

使用这些说明在 Intune 中注册 iOS 设备。Use these instructions to enroll your iOS device in Intune. 有关注册的详细信息,请参阅安装公司门户应用并在 Intune 中注册设备后会发生什么?For more information about enrollment, see What happens when I install the Company Portal app and enroll my device in Intune?. 如果尝试在 Intune 中注册设备时遇到错误,请参阅将注册错误发送给 IT 管理员If you get an error while trying to enroll your device in Intune, see Send enrollment errors to your IT admin.

注册前/后,系统可能会要求你选择最恰当地描述了你使用设备的方式的类别。Before or after enrolling, you may be asked to choose a category that best describes how you use your device. IT 管理员将使用此类别来帮助确定你有权访问哪些应用。Your IT administrator uses this category to help determine what apps you have access to.

  1. 请从 App Store 中将免费的 Microsoft Intune 公司门户应用安装到设备上。Install the free Microsoft Intune Company Portal app on your device from the App Store.
  2. 打开 Microsoft Intune 公司门户应用。Open the Microsoft Intune Company Portal app.
  3. 在公司门户的“欢迎”屏幕上,点击“登录”,然后使用你的工作或学校帐户登录。On the Company Portal Welcome screen, tap Sign in, and then sign in with your work or school account.

    iOS 设备上显示 Intune 公司门户登录屏幕的屏幕截图

  4. 如果 IT 管理员设置了公司条款和条件,请点击“接受”接受这些条款。If your IT administrator set up company terms and conditions, tap Accept to accept the terms.
  5. 在“公司访问设置”页上,点击“开始”。On the Company Access Setup page, tap Begin.

    iOS 设备上提示用户开始注册过程的屏幕截图

  6. 阅读注册设备时可执行的操作,然后点击“继续”。Read about what you’ll be able to do when you enroll your device, and then tap Continue.

    显示有关为何应注册 iOS 设备的信息的屏幕截图

  7. 查看 IT 管理员在你注册的设备上可以看到和不可以看到的内容列表,然后点击“继续”。See the list of what your IT administrator can and can’t see on your enrolled device, and tap Continue.

    iOS 设备上显示隐私策略的屏幕截图

  8. 查看点击“注册”后你可能看到的项目。Review some of the things that you might see once you tap Enroll. 完成阅读后,点击“注册”。When you finish reading, tap Enroll.

    iOS 设备上显示后续注册步骤的屏幕截图

  9. 在“安装配置文件”屏幕上,点击“安装”,如有系统提示,请输入密码。On the Install Profile screen, tap Install, and enter your passcode, if prompted.

    提示用户安装 iOS 设备管理配置文件的屏幕截图

  10. 点击“安装”。Tap Install.

    iOS 设备上请求用户点击“安装”按钮安装配置文件的屏幕截图

  11. 点击“安装”以表示你已阅读警告。Tap Install to indicate that you've read the warning.

    iOS 设备上请求用户表示已阅读配置文件管理警告的屏幕截图

  12. 点击“信任”。Tap Trust.

    iOS 设备上请求用户验证配置文件源的屏幕截图

  13. 屏幕更改为显示配置文件已完成安装时,点击“完成”。When the screen changes to show that the profile has finished installing, tap Done. “正在注册设备”消息会显示在屏幕上。An “Enrolling device” message displays on the screen.

    iOS 设备上显示配置文件已安装的屏幕截图

  14. 当显示一条询问是否要在公司门户中打开页面的消息时,点击打开When a message displays asking if you want to open the page in the Company Portal, tap Open.

    iOS 设备上请求用户在公司门户中打开页面的屏幕截图

  15. 在“公司访问设置”屏幕上,点击“继续”。On the Company Access Setup screen, tap Continue. 如果 IT 管理员设置了其他安全要求(例如需要设置密码),请按照屏幕上的说明进行操作,直到满足所有合规性要求,然后在返回到“公司访问设置”屏幕时点击“继续”。If your IT administrator set up additional security requirements, such as the need to set a password, follow the on-screen instructions until you meet all of the compliance requirements, and then tap Continue when you are returned to the Company Access Setup screen.

    显示 iOS 设备合规和提示用户继续的屏幕截图

  16. 点击“完成”。Tap Done.

    iOS 设备上显示已完成公司访问设置的屏幕截图

你的设备现已在 Intune 中注册,你会返回到公司门户应用。Your device is now enrolled in Intune, and you are taken back to the Company Portal app.

在 Intune 中注册 Mac OS X 设备Enroll your Mac OS X device in Intune

  1. 使用 Safari 浏览器,打开公司门户网站,然后点击通知栏。Using a Safari browser, open the Company Portal website, and tap the notification bar.
  2. 点击“未注册此设备,或公司门户无法对其进行识别”。Tap This device is either not enrolled or the Company Portal can't identify it.

    显示公司门户无法识别 Mac OS X 设备的屏幕截图

  3. 点击“安装”以开始注册你的设备。Tap Install to start enrolling your device.

    提示用户注册 Mac OS X 设备的屏幕截图

  4. 在“安装管理配置文件”对话框中,点击“安装”。On the Install Management Profile dialog, tap Install. 如果出现要求你输入凭据的对话框,请输入用户名和密码,然后点击“继续”>“安装”。If a dialog box appears asking you to enter your credentials, enter your username and password, and then tap Continue > Install.

    提示用户在 Mac OS X 设备上安装管理配置文件的屏幕截图

完成注册后,将出现“管理配置文件”页,显示你的配置文件已通过验证。When you finish enrolling, you'll see a Management Profile page showing that your profile has been verified.

显示已验证 Mac OS X 设备上的管理配置文件的屏幕截图

了解更多信息?Want to learn more?

请参阅 Enterprise Mobility + Security(企业移动性 + 安全性)。See Enterprise Mobility + Security.