Enrolling Personal Android Devices in Intune

Android personal devices that access University systems, apps and data are referred to as Bring-Your-Own-Device or BYOD. Just like University devices, BYOD devices must be enrolled in Intune and be compliant with minimum security requirements for the user of the device to be granted access to University systems, apps and data.

Once enrolled, Intune will divide your device into two realms through Personal and Work profiles. Only Work profile data and apps on these devices are being administered by Intune, and Intune has no access to Personal profile apps and data to protect your privacy. Your personal data on the device stays private at all times and is unaffected by Intune in any way.

To enroll your personal Android 10 or newer device in Intune, follow the steps below. During this process, you will create a work profile, activate the work profile, and update device settings. 

Note: Enrolling a personal Android device requires approximately 3GB of storage space + any data the apps generate (email messages etc.). This is for the secondary work profile, Google services and apps that are downloaded. 

1. Go to the Google Play store, and install the Company Portal app.
2. Once installed, launch Company Portal app.
3. Sign in with your UWin Account using uwinid@uwindsor.ca as your login name when prompted.
4. On the Company Access Setup screen, tap BEGIN.
5. On the privacy information screen, review the list of items that your organization can and can't see on your device. Then tap CONTINUE.
   
   
    
6. Review the Google terms for creating a work profile. Accept the terms to continue. The appearance of this screen varies based on OS version.
   • For Samsung devices only, review the Samsung Knox privacy policy. Select Agree to continue.
7. Wait a few minutes while your work profile is set up. Then select Next.
8. On the Company Access Setup screen, confirm that the profile has been created. Then tap CONTINUE.
9. Wait for the app to register your device. After confirm which category of device this is. Tap "Personal Device (BYOD)
   
10. On the Company Access Setup screen, confirm that the work profile is active. Then tap CONTINUE.
11. Review the settings your organization requires in the Company Portal app. Update the settings on your device if necessary. Tap RESOLVE to open the settings on your device. After you're done updating settings, tap CONFIRM DEVICE SETTINGS.
12. When setup and enrollment are complete, you are sent back to the setup list, where you should see a green checkmark next to each enrollment task. Tap DONE.
13. Optionally, when prompted to view suggested work apps in Google Play, tap OPEN. If you're not ready to install apps, you can do it later by going to the Google Play app in your work profile. Note that at any time you can access available apps from the Company Portal menu > Get Apps.

Once Intune enrolment is completed on your device, the following apps will be automatically installed on it:

• Microsoft Authenticator - should be used for MFA as it is more secure that text message method
• Microsoft Defender - protects your device from viruses, phishing, and other malware
• Microsoft Outlook - gives you access to your University e-mail, calendar and contacts