如何自定义 Intune 公司门户应用、公司门户网站和 Intune 应用How to customize the Intune Company Portal apps, Company Portal website, and Intune app

在公司门户应用、公司门户网站和 Android 上 Intune 应用中,用户可以访问公司数据并执行常见任务。The Company Portal apps, Company Portal website, and Intune app on Android are where users access company data and can do common tasks. 常见任务可能包括注册设备、安装应用,以及查找信息(如从 IT 部门获得帮助)。Common task may include enrolling devices, installing apps, and locating information (such as for assistance from your IT department). 此外,用户还可以安全地访问公司资源。Additionally, they allow users to securely access company resources. 最终用户体验提供多个不同的页面,例如主页、应用、应用详细信息、设备和设备详细信息。The end-user experience provides several different pages, such as Home, Apps, App details, Devices, and Device details. 在应用页面上筛选应用,即可在公司门户内快速查找应用。To quickly find apps within the Company Portal, you can filter the apps on the Apps page.

备注

公司门户支持 Configuration Manager 应用程序。The Company Portal supports Configuration Manager applications. 借助此功能,最终用户可以在公司门户中同时看到 Configuration Manager 和 Intune 为共同受管理客户部署的应用程序。This feature allows end users to see both Configuration Manager and Intune deployed applications in the Company Portal for co-managed customers. 这一新版公司门户将为所有共同管理的客户显示部署了 Configuration Manager 的应用。This new version of the Company Portal will display Configuration Manager deployed apps for all co-managed customers. 此支持有助于管理员整合不同的最终用户门户体验。This support will help administrators consolidate their different end user portal experiences. 有关详细信息,请参阅在共同受管理设备上使用公司门户应用For more information, see Use the Company Portal app on co-managed devices.

自定义用户体验Customizing the user experience

自定义最终用户体验有助于为最终用户提供熟悉且有用的体验。By customizing the end-user experience, you will help provide a familiar and helpful experience for your end users. 要执行此操作,请导航到 Microsoft Endpoint Manager 管理中心,并选择“租户管理” > “自定义”,可在其中编辑默认策略或创建多达 10 组的目标策略 。To do this, navigate to Microsoft Endpoint Manager admin center, and select Tenant Administration > Customization, where you can either edit the default policy or create up to 10 group targeted policies. 这些设置将适用于公司门户应用、公司门户网站和 Android 上 Intune 应用。These settings will apply to the Company Portal apps, Company Portal website, and Intune app on Android.

品牌打造Branding

下表提供针对最终用户体验的品牌自定义详细信息:The following table provides the branding customization details for the end-user experience:

字段名称Field name 更多信息More information
组织名称Organization name 该名称在最终用户体验的整个消息传送中显示。This name is displayed throughout the messaging in the end-user experience. 还可以使用“在标题中显示”设置将其设置为在标题中显示。It can be set to display in headers as well using the Show in header setting. 最大长度为 40 个字符。Max length is 40 characters.
颜色Color 选择“标准”可从五种标准颜色中进行选择。Choose Standard to choose from five standard colors. 选择“自定义”,可根据十六进制代码值选择特定颜色。Choose Custom to select a specific color based on a hex code value.
主题颜色Theme color 设置主题颜色以在整个最终用户体验中显示。Set theme color to show across end-user experience. 我们将文本颜色自动设置为黑色或白色,使其在所选主题颜色的顶部最明显。We'll automatically set the text color to black or white so that it's most visible on top of your selected theme color.
在标题中显示Show in header 选择最终用户体验中的标题是应显示“组织徽标和名称”、“仅组织徽标”还是显示“仅组织名称” 。Select whether the header in the end-user experiences should display the Organization logo and name, the Organization logo only, or the Organization name only. 下面的预览框将只显示徽标,而不显示名称。The preview boxes below will only show the logos, not the name.
上传徽标供主题颜色背景使用Upload logo for theme color background 上传要在所选主题颜色上显示的徽标。Upload the logo you want to show on top of your selected theme color. 为获得最佳外观,请上传带透明背景的徽标。For the best appearance, upload a logo with a transparent background. 可以在设置下方的预览框中看到其外观。You can see how this will look in the preview box below the setting.

最大图像大小:400 x 400 像素Maximum image size: 400 x 400 px
最大文件大小: 750 KBMaximum file size: 750KB
文件类型:PNG、JPG 或 JPEGFile type: PNG, JPG, or JPEG

上传徽标供白色或浅色背景使用Upload logo for white or light background 上传要在白色或浅色背景上显示的徽标。Upload the logo you want to show on top of white or light-colored backgrounds. 为获得最佳外观,请上传带透明背景的徽标。For the best appearance, upload a logo with a transparent background. 可以在设置下方的预览框中看到其在白色背景上的外观。You can see how this will look on a white background in the preview box below the setting.

最大图像大小:400 x 400 像素Maximum image size: 400 x 400 px
最大文件大小:750 KBMaximum file size: 750KB
文件类型:PNG、JPG 或 JPEGFile type: PNG, JPG, or JPEG

上传品牌形象Upload brand image 上传体现组织品牌的形像。Upload an image that reflects your organization's brand.

  • 建议图像宽度:1125 像素以上(要求至少为 650 像素)Recommended image width: Greater than 1125 px (required to be at least 650 px)
  • 最大图像大小:1.3 MBMaximum image size: 1.3 MB
  • 文件类型:PNG、JPG 或 JPEGFile type: PNG, JPG, or JPEG
  • 它显示在以下位置:It is displayed in these locations:
    • iOS/iPadOS 公司门户:用户个人资料页面上的背景图像。iOS/iPadOS Company Portal: Background image on the user's profile page.
    • Windows 公司门户:用户个人资料页面上的背景图像。Windows Company Portal: Background image on the user's profile page.
    • 公司门户网站: 用户个人资料页面上的背景图像。Company Portal website: Background image on the user's profile page.
    • Android Intune 应用:在抽屉中,并作为用户个人资料页面上的背景图像。Android Intune app: In the drawer and as a background image on the user's profile page.

备注

用户从公司门户安装 iOS/iPadOS 应用程序时,将收到提示。When a user is installing an iOS/iPadOS application from the Company Portal they will receive a prompt. iOS/iPadOS 应用链接到应用商店、批量采购计划 (VPP) 或业务线 (LOB) 应用时,将发生此操作。This occurs when the iOS/iPadOS app is linked to the app store, linked to a volume-purchase program (VPP), or linked to a line-of-business (LOB) app. 用户可通过此提示接受操作,或允许管理应用。The prompt allows the users to accept the action or allow management of the app. 此提示将显示公司名称,公司名称不可用时,将显示公司门户。The prompt will display your company name, or when your company name is unavailable, Company Portal will be displayed.

品牌形象最佳做法Brand image best practices

合适的品牌形象可以表现出组织品牌的强烈意识,从而增强用户对组织的信任。The right brand image can enhance the user's trust by presenting a strong sense of your organization's brand. 建议考虑以下用于获取、选择和优化显示位置图像的一些提示。Here are some tips you may want to consider for acquiring, choosing, and optimizing the image for the display locations.

  • 联系市场部或文艺部。Reach out to your marketing or art department. 他们可能已经拥有一组被认可的品牌图像。They may already have an approved set of brand images. 他们也可以根据需要帮助你优化图像。They may also be able to help you optimize images as needed.
  • 请同时考虑横向和纵向的构图。Consider both landscape and portrait composition. 图像背景应足以围绕焦点。The image should have sufficient background surrounding the focal point. 可以基于设备大小、方向和平台对图像进行不同的剪裁。The image may be cropped differently based on device size, orientation, and platform.
  • 避免使用通用的图库图像。Avoid using a generic, stock image. 此图像应体现组织的品牌,并使用户感到熟悉。The image should reflect your organization's brand and feel familiar to users. 如果你没有,那么最好不要使用,这也比使用对用户没有任何意义的通用图像要好。If you don't have one, it's better to not use one than use a generic one that has no meaning to your user.
  • 删除不需要的元数据。Remove unnecessary metadata. 图像文件可以附带元数据,例如相机配置文件、地理位置、标题、字幕等。Image file can come with metadata such as camera profile, geo location, title, caption, and so on. 使用图像优化工具去除此信息,以确保高质量并同时满足文件大小限制。Use an image optimization tool to strip out this information to maintain quality while meeting file size limit.

品牌图像示例Brand image examples

下图显示了 iPhone 上品牌形象的示例:The following image shows an example of the brand image on an iPhone:

Screenshot of example iPhone branding image

以下显示了 Android 版 Intune 应用中品牌形象的示例:The following shows an example of the brand image in the Intune app for Android:

Screenshot of example #1 for Intune app for Android branding image Screenshot of example #2 for Intune app for Android branding image

支持信息Support information

输入组织的支持信息,以便员工可以提出问题。Enter your organization's support information, so employees can reach out with questions. 在整个最终用户体验中,该支持信息将显示在“支持”、“帮助和支持”和“支持人员”页面上。This support information will be displayed on Support, Help & Support, and Helpdesk pages across the end-user experience.

字段名称Field name 最大长度Maximum length 更多信息More information
联系人姓名Contact name 4040 此名称是用户与支持人员联系时将联系的人员。This name is who users will reach when they contact support.
电话号码Phone number 2020 用户可以通过此号码致电寻求支持。This number enables users to call for support.
电子邮件地址Email address 4040 用户可以向此电子邮件地址发送电子邮件以获得支持。This email address is where users can send emails for support. 必须以 alias@domainname.com 格式输入有效的电子邮件地址。You must enter a valid email address in the format alias@domainname.com.
网站名称Website name 4040 此名称是为支持网站的 URL 显示在某些位置的友好名称。This is the friendly name that is displayed in some locations for the URL to the support website. 如果指定支持网站 URL 且没有友好名称,则 URL 本身将显示在最终用户体验中。If you specify a support website URL and no friendly name, then the URL itself is displayed in the end-user experiences.
网站 URLWebsite URL 150150 用户应使用的支持网站。The support website that users should use. 该 URL 必须采用 https://www.contoso.com 格式。The URL must be in the format https://www.contoso.com.
其他信息Additional information 120120 在此处包括向用户传送的任何其他与支持相关的消息。Include any additional support-related messaging to users here.

配置Configuration

可专门为注册、隐私、通知、应用源和自助服务操作配置公司门户体验。You can configure the Company Portal experience specifically for enrollment, privacy, notifications, app sources, and self-service actions.

注册Enrollment

下表提供特定于注册的配置详细信息:The following table provides enrollment-specific configuration details:

字段名称Field name 最大长度Maximum length 更多信息More information
设备注册Device enrollment 不适用N/A 指定是否以及如何提示用户注册移动设备管理。Specify if and how users should be prompted to enroll into mobile device management. 有关详细信息,请参阅设备注册设置选项For more information, see Device enrollment setting options.

设备注册设置选项Device enrollment setting options

备注

支持设备注册设置要求最终用户具有以下公司门户版本:Support for the device enrollment setting requires end users have these Company Portal versions:

  • iOS/iPadOS 上的公司门户:版本 4.4 或更高版本Company Portal on iOS/iPadOS: version 4.4 or later
  • Android 上的公司门户:版本 5.0.4715.0 或更高版本Company Portal on Android: version 5.0.4715.0 or later

重要

以下设置不适用于配置为通过自动设备注册进行注册的 iOS/iPadOS 设备。The following settings do not apply to iOS/iPadOS devices configured to enroll with Automated Device Enrollment. 无论如何配置这些设置,配置为使用自动设备注册进行注册的 iOS/iPadOS 设备都将在开箱即用流程期间进行注册,并且将在用户启动公司门户时提示用户登录。Regardless of how these setting are configured, iOS/iPadOS devices configured to enroll with Automated Device Enrollment will enroll during the out of box flow and users will be prompted to sign in when they launch the Company Portal.

以下设置适用于使用 Samsung Knox Mobile Enrollment (KME) 配置的 Android 设备。The following settings do apply to Android devices configured with Samsung Knox Mobile Enrollment (KME). 如果已为 KME 配置了设备,并且“设备注册”设置为“不可用”,则在现成流过程中,设备将无法注册。If a device has been configured for KME and device enrollment is set to Unavailable, the device will not be able to enroll during the out of box flow.

设备注册选项Device enrollment options 说明Description 清单提示Checklist prompts 通知Notification 设备详细信息状态Device details status 应用详细信息状态(需要注册的应用)App details status (of an app that requires enrollment)
可用,有提示Available, with prompts 提示在所有可能的位置进行注册的默认体验。The default experience with prompts to enroll in all possible locations. Yes Yes Yes “是”Yes
可用,无提示Available, no prompts 用户可以通过当前设备的设备详细信息中的状态或从需要注册的应用来进行注册。User can enroll via the status in device details for their current device or from apps that require enrollment. No No Yes Yes
UnavailableUnavailable 用户无法注册。There is no way for users to enroll. No No No No

隐私Privacy

下表提供特定于隐私的配置详细信息:The following table provides privacy-specific configuration details:

字段名称Field name 最大长度Maximum length 更多信息More information
隐私声明 URLPrivacy statement URL 7979 将用户的隐私声明设置为在用户单击隐私链接时显示。Set your organization's privacy statement to appear when users click on privacy links. 必须以 https://www.contoso.com 格式输入有效的 URL。You must enter a valid URL in the format https://www.contoso.com.
iOS/iPadOS ​公司门户中的隐私消息Privacy message in the Company Portal for iOS/iPadOS 520520 保留默认值或设置自定义消息,以列出组织无法在托管的 iOS/iPadOS 设备上看到的项 。Keep the Default or set a Custom message to list the items that your organization can't see on managed iOS/iPadOS devices. 可以使用 Markdown 添加项目符号、粗体、斜体和链接。You can use markdown to add bullets, bolding, italics, and links. 用户还将看到组织可查看和执行的操作的列表,但是该列表是由 Intune 自动生成的,不可自定义。Users will also see a list of things that your organization can see and do, but that list is automatically generated by Intune and not customizable.

设备所有权通知Device ownership notification

下表提供特定于通知的配置详细信息:The following table provides notification-specific configuration details:

字段名称Field name 最大长度Maximum length 更多信息More information
当用户的设备所有权类型从“个人”更改为“企业”时,向他们发送推送通知(仅限 Android 和 iOS/iPadOS)Send a push notification to users when their device ownership type changes from personal to corporate (Android and iOS/iPadOS only) 不适用N/A 在 Android 和 iOS 公司门户用户的设备所有权类型从“个人”更改为“公司”时,向他们发送推送通知。Send a push notification to both your Android and iOS Company Portal users when their device ownership type has been changed from personal to corporate. 此推送通知默认设为“关”。By default, this push notification is set to off. 当设备所有权设置为公司所有权时,Intune 可更好地访问设备,其中包括完整的应用清单、FileVault 密钥轮换、电话号码检索和一些特选远程操作。When device ownership is set to corporate ownership, Intune has greater access to the device, which includes the full app inventory, FileVault key rotation, phone number retrieval, and a select few remote actions. 有关详细信息,请参阅更改设备所有权For more information, see Change device ownership.

应用源App sources

可选择将在公司门户中显示的其他应用源。You can choose which additional app sources will be shown in Company Portal.

备注

公司门户支持 Configuration Manager 应用程序。The Company Portal supports Configuration Manager applications. 借助此功能,最终用户可以在公司门户中同时看到 Configuration Manager 和 Intune 为共同受管理客户部署的应用程序。This feature allows end users to see both Configuration Manager and Intune deployed applications in the Company Portal for co-managed customers. 有关详细信息,请参阅在共同受管理设备上使用公司门户应用For more information, see Use the Company Portal app on co-managed devices.

下表提供特定于应用源的配置详细信息:The following table provides app source specific configuration details:

字段名称Field name 最大长度Maximum length 更多信息More information
Azure AD 企业应用程序Azure AD Enterprise Applications 不适用N/A 选择 “隐藏”“显示” ,在公司门户中向每位最终用户显示 Azure AD 企业应用程序Select Hide or Show to display Azure AD Enterprise applications in the Company Portal for each end user. 有关详细信息,请参阅应用源设置选项For more information, see App source setting options.
Office Online 应用程序Office Online Applications 不适用N/A 选择 “隐藏”“显示” ,在公司门户中向每位最终用户显示 Office Online 应用程序Select Hide or Show to display Office Online applications in the Company Portal for each end user. 有关详细信息,请参阅应用源设置选项For more information, see App source setting options.

应用源设置选项App source setting options

备注

仅 Windows 公司门户和公司门户网站支持显示来自其他 Microsoft 服务的应用。The display of apps from other Microsoft services is only supported in the Windows Company Portal and the Company Portal website.

可在公司门户中向每位最终用户隐藏或显示 Azure AD 企业应用程序Office Online 应用程序You can hide or show Azure AD Enterprise applications and Office Online applications in the Company Portal for each end user. 如果选择“显示”,将导致公司门户显示分配给用户的所选 Microsoft 服务的整个应用程序目录。Show will cause the Company Portal to display the entire applications catalog from the chosen Microsoft service(s) assigned to the user. Azure AD 企业应用程序通过 Azure 门户进行注册和分配。Azure AD Enterprise applications are registered and assigned via the Azure portal. Office Online 应用程序使用 M365 管理中心提供的授权控制进行分配。Office Online applications are assigned using the licensing controls available in the M365 Admin Center. Microsoft Endpoint Manager 管理中心,选择“租户管理” > “自定义”,查找此配置设置 。In the Microsoft Endpoint Manager admin center, select Tenant administration > Customization to find this configuration setting. 默认情况下,每个附加的应用源会设置为“隐藏”。By default, each additional app source will be set to Hide.

为公司门户自定义用户自助服务操作Customizing user self-service actions for the Company Portal

可自定义在公司门户应用和网站中向最终用户显示的可用自助服务设备操作。You can customize the available self-service device actions that are shown to end users in the Company Portal app and website. 为帮助防止发生意外的设备操作,可选择“租户管理” > “自定义”,为公司门户应用配置设置 。To help prevent unintended device actions, you can configure settings for the Company Portal app by selecting Tenant Administration > Customization.

提供了以下选项:The following actions are available:

  • 隐藏公司 Windows 设备上的“删除”按钮。Hide Remove button on corporate Windows devices.
  • 隐藏公司 Windows 设备上的“重置”按钮。Hide Reset button on corporate Windows devices.
  • 隐藏公司 iOS/iPadOS 设备上的“删除”按钮。Hide Remove button on corporate iOS/iPadOS devices.
  • 隐藏公司 iOS/iPadOS 设备上的“重置”按钮。Hide Reset button on corporate iOS/iPadOS devices.

备注

这些操作可用于限制公司门户网站应用和网站中的设备操作,并且不实施任何设备限制策略。These actions can be used to restrict device actions in the Company Portal app and website and do not implement any device restriction policies. 若要限制用户从设置中执行恢复出厂设置或 MDM 删除,必须配置设备限制策略。To restrict users from performing factory reset or MDM removal from settings, you must configure device restriction policies.

打开 Web 公司门户应用程序Opening Web Company Portal applications

对于 Web 公司门户应用程序,如果最终用户安装了公司门户应用程序,则最终用户将看到一个对话框,询问他们在浏览器外部打开应用程序时希望采用哪种打开方式。For Web Company Portal applications, if the end user has the Company Portal application installed, the end users will see a dialog box asking how they want to open the application when opening outside of the browser. 如果应用不在公司门户的路径中,则公司门户将打开主页。If the app is not in the path of the Company Portal, then the Company Portal will open the homepage. 如果应用位于路径中,则公司门户将打开特定应用。If the app is in the path, then the Company Portal will open the specific app.

选择公司门户时,当 URI 路径为以下选项之一时,用户将被定向到应用程序中的相应页面:Upon selecting the Company Portal, the user will be directed to the corresponding page in the application when the URI path is one of the following:

  • /apps - Web 公司门户将打开列出所有应用的应用页面。/apps - The Web Company Portal will open the Apps page that lists all of the apps.
  • /apps/[appID] - Web 公司门户将打开相应应用的详细信息页面。/apps/[appID] - The Web Company Portal will open the Details page of the corresponding app.
  • URI 路径不同或出现意外 -“Web 公司门户”主页将显示。The URI path is different or unexpected - The Web Company Portal home page will be displayed.

如果用户未安装公司门户应用,则用户将转到 Web 公司门户。If the user does not have the Company Portal app installed, the user will be taken to the Web Company Portal.

公司门户的 iOS/iPadOS 设备派生凭据Company Portal derived credentials for iOS/iPadOS devices

Intune 与凭据提供商 DISA Purebred、Entrust Datacard 和 Intercede 合作,支持个人身份验证 (PIV) 和公共访问卡 (CAC) 派生凭据。Intune supports Personal Identity Verification (PIV) and Common Access Card (CAC) Derived Credentials in partnership with credential providers DISA Purebred, Entrust Datacard, and Intercede. 最终用户将在注册 iOS/iPadOS 设备后执行其他步骤,以在公司门户应用程序中验证其身份。End users will go through additional steps post-enrollment of their iOS/iPadOS device to verify their identity in the Company Portal application. 首先为租户设置凭据提供商,然后令使用派生凭据的配置文件面向用户或设备,从而为用户启用派生凭据。Derived Credentials will be enabled for users by first setting up a credential provider for your tenant, then targeting a profile that uses Derived Credentials to users or devices.

备注

用户将根据你通过 Intune 指定的链接查看有关派生凭据的说明。The user will see instructions about derived credentials based on the link that you have specified via Intune.

有关 iOS/iPadOS 设备派生凭据的详细信息,请参阅在 Microsoft Intune 中使用派生凭据For more information about derived credentials for iOS/iPadOS devices, see Use derived credentials in Microsoft Intune.

适用于公司门户的深色模式Dark Mode for the Company Portal

深色模式适用于 iOS/iPadOS、macOS 和 Windows 公司门户。Dark Mode is available for the iOS/iPadOS, macOS, and Windows Company Portal. 用户可以下载应用、管理其设备,并根据设备设置在所选的配色方案中获取 IT 支持。Users can download apps, manage their devices, and get IT support in the color scheme of their choice based on device settings. iOS/iPadOS、macOS 和 Windows 公司门户将自动与最终用户的设备设置匹配,自动应用深色或浅色模式。The iOS/iPadOS, macOS, and Windows Company Portal will automatically match the end user's device settings for dark or light mode.

Windows 公司门户键盘快捷方式Windows Company Portal keyboard shortcuts

最终用户可以使用键盘快捷方式(快捷键)在 Windows 公司门户中触发导航、应用和设备操作。End users can trigger navigation, app, and device actions in the Windows Company Portal using keyboard shortcuts (accelerators).

可以在 Windows 公司门户应用中使用以下键盘快捷方式。The following keyboard shortcuts are available in the Windows Company Portal app.

领域Area 说明Description 键盘快捷方式Keyboard shortcut
导航菜单Navigation menu 导航Navigation Alt+MAlt+M
主页Home Alt+HAlt+H
所有应用All apps Alt+AAlt+A
已安装的应用Installed apps Alt+IAlt+I
发送反馈Send feedback Alt+FAlt+F
我的个人资料My profile Alt+UAlt+U
设置Settings Alt+TAlt+T
主页 - 设备磁贴Home - Device tile 重命名Rename F2F2
删除Remove Ctrl+D 或 DeleteCtrl+D or Delete
检查访问Check access Ctrl+M 或 F9Ctrl+M or F9
设备详细信息Device details 重命名Rename F2F2
删除Remove Ctrl+D 或 DeleteCtrl+D or Delete
检查访问Check access Ctrl+M 或 F9Ctrl+M or F9
应用详细信息App details 安装Install Ctrl+ICtrl+I
设备Devices 可用Available Ctrl+DCtrl+D

最终用户还可以查看 Windows 公司门户应用中的可用快捷方式。End users will also be able to see the available shortcuts in the Windows Company Portal app.

Windows 公司门户中的可用快捷方式的屏幕截图

公司门户中的用户自助设备操作User self-service device actions from the Company Portal

用户可从本地或远程设备中通过公司门户应用、公司门户网站或在 Android 上的 Intune 应用执行操作。Users can perform actions on their local or remote devices via the Company Portal app, Company Portal website, or the Intune app on Android. 用户可执行的操作根据设备平台和配置有所不同。The actions that a user can perform vary based on device platform and configuration. 在任何情况下,均只有设备的主要用户可以执行远程设备操作。In all cases, the remote device actions can only be performed by device's Primary User.

可用的自助服务设备操作包括以下各项:Available self-service device actions include the following:

  • 停用 - 从 Intune 管理范围中删除设备。Retire – Removes the device from Intune Management. 在公司门户应用和网站中,它显示为“删除”。In the company portal app and website, this shows as Remove.
  • 擦除 - 此操作会启动设备重置。Wipe – This action initiates a device reset. 在公司门户网站中,它显示为“重置”,在 iOS/iPadOS 公司门户应用中显示为“恢复出厂设置”。In the company portal website this is shown as Reset, or Factory Reset in the iOS/iPadOS Company Portal App.
  • 重命名 - 此操作将更改公司门户向用户显示的设备名称。Rename – This action changes the device name that the user can see in the Company Portal. 它不会更改本地设备名称,仅更改公司门户中的列表。It does not change the local device name, only the listing in the Company Portal.
  • 同步 - 此操作会使用 Intune 服务启动设备签入。Sync – This action initiates a device check-in with the Intune service. 在公司门户中,它显示为“检查状态”。This shows as Check Status in the Company Portal.
  • 远程锁定 - 锁定设备,需要提供用于解锁的 PIN。Remote Lock – This locks the device, requiring a PIN to unlock it.
  • 重置密码 - 此操作用于重置设备密码。Reset Passcode – This action is used to reset device passcode. 在 iOS/iPadOS 设备上,将删除密码,最终用户需要在设置中输入新密码。On iOS/iPadOS devices the passcode will be removed and the end user will be required to enter a new code in settings. 在支持的 Android 设备上,Intune 将生成新密码,此密码将暂时在公司门户中显示。On supported Android devices, a new passcode is generated by Intune and temporarily displayed in the Company Portal.
  • 密钥恢复 – 此操作用于从公司门户网站恢复加密 macOS 设备的个人恢复密钥。Key Recovery – This action is used to recover a personal recovery key for encrypted macOS devices from the Company Portal website.

若要自定义可用的用户自助服务操作,请参阅为公司门户自定义用户自助服务操作To customize the available user self-service actions, see Customizing user self-service actions for the Company Portal.

自助服务操作Self-Service Actions

一些平台和配置不支持自助设备操作。Some platforms and configurations do not allow self-service device actions. 下表提供了自助服务操作的详细信息:This table below provides further details about self-service actions:

操作Action Windows 10(3)Windows 10(3) iOS/iPadOS(3)iOS/iPadOS(3) macOS(3)macOS(3) Android(3)Android(3)
停用Retire 可用(1)Available(1) 可用(9)Available(9) 可用Available 可用(7)Available(7)
擦除Wipe 可用Available 可用(5)(9)Available(5)(9) NANA 可用(7)Available(7)
重命名(4)Rename(4) 可用Available 可用Available 可用Available 可用Available
同步Sync 可用Available 可用Available 可用Available 可用Available
密钥恢复Key Recovery 不可用NA 不可用NA 可用(2)Available(2) NANA

(1) 加入 Azure AD 的 Windows 设备始终禁用“停用”。(1) Retire is always blocked on Azure AD Joined Windows devices.
(2) 仅可通过 Web 门户使用用于 macOS 的“密钥恢复”。(2) Key Recovery for macOS is only available via the Web Portal.
(3) 使用设备注册管理器时,将禁用所有的远程操作。(3) All remote actions are disabled if using a Device Enrollment Manager enrollment.
(4)“重命名”仅更改公司门户应用或 Web 门户中的设备名称,不会更改设备上的名称。(4) Rename only changes the device name in the Company Portal app or Web Portal, not on the device.
(5)“擦除”在用户注册的 iOS/iPadOS 设备上不可用。(5) Wipe is not available on User Enrolled iOS/iPadOS devices.
(6) 一些 Android 和 Android Enterprise 配置不支持“密码重置”。(6) Reset Passcode is not supported on some Android and Android Enterprise configurations. 有关详细信息,请参阅在 Intune 中重置或删除设备密码For more information, see Reset or remove a device passcode in Intune.
(7)“停用”和“擦除”在 Android Enterprise 设备所有者场景(COPE、COBO、COSU)中不可用 。(7) Retire and Wipe are not available on Android Enterprise Device Owner scenarios (COPE, COBO, COSU).
(8) 用户注册的 iOS/iPadOS 设备不支持“重置密码”。(8) Reset Passcode is not supported on User Enrolled iOS/iPadOS devices.
(9)所有 iOS/iPadOS 自动设备注册设备(以前称为 DEP)都禁用了“停用”和“擦除”选项 。(9)All iOS/iPadOS Automated Device Enrollment devices (formerly known as DEP) have Retire and Wipe options disabled.

应用日志App logs

如果使用的是 Azure 政府版,则会向最终用户提供应用日志,由其决定当启动获取问题帮助的进程时如何进行共享。If you are using Azure Government, app logs are offered to the end user to decide how they will share when they initiate the process to get help with an issue. 但是,如果使用的不是 Azure 政府,那么当用户启动获取问题帮助的进程时,公司门户将直接向 Microsoft 发送应用日志。However, if you are not using Azure Government, the Company Portal will send app logs directly to Microsoft when the user initiates the process to get help with an issue. 向 Microsoft 发送应用日志可更轻松地排除故障和解决问题。Sending the app logs to Microsoft will make it easier to troubleshoot and resolve issues.

备注

与 Microsoft 和 Apple 策略保持一致,我们不会出于任何原因向任何第三方出售我们服务收集的任何数据。Consistent with Microsoft and Apple policy, we do not sell any data collected by our service to any third parties for any reason.

后续步骤Next steps