Company Portal || Deploy Store APPs to Android/ IOS Devices || Intune Tutorial Series | Part 16

Summary

In this 16th tutorial video from Joy Jojo, viewers learn about BYOD (Bring Your Own Device) in the context of Microsoft InTune. The video explains how to install and configure the InTune Company Portal app on Android and iOS devices, enabling secure access to corporate resources. It outlines the benefits of using the app, such as simplified device enrollment, access to company resources, and enhanced security measures like remote wipe capabilities. The tutorial also covers the process of deploying store apps to various platforms and assures users that their personal data remains private, with the InTune administrator only able to see device-specific information.

Takeaways

• 😀 The video is part of a series on InTune, focusing on the 16th tutorial about Bring Your Own Device (BYOD) management.
• 📚 The script provides an overview of how to enroll personal devices into InTune, like laptops and smartphones, for work purposes.
• 📱 The Company Portal app is essential for BYOD, allowing employees to access company resources securely on their personal devices.
• 🛠️ The Company Portal app simplifies device enrollment by enabling employees to add their devices to the company's mobile device management system.
• 🔒 Security is enhanced through the app, which can remotely wipe lost or stolen devices and enforce password requirements.
• 🚀 The app facilitates the deployment of approved applications, making them available for installation through the Company Portal.
• 📚 Users can browse and install company-approved apps via the Company Portal, ensuring all software is vetted by InTune administrators.
• 🔍 The script clarifies what data the company can and cannot see when employees install the Company Portal, emphasizing privacy for personal information.
• 📱 Instructions are provided for installing the Company Portal on both Android and iOS devices, highlighting a straightforward process.
• 🖥️ The tutorial also covers deploying store apps to Windows, Android, and iOS devices from the InTune admin center.
• 🔑 The video promises further lessons on protecting applications pushed to mobile devices in upcoming sessions.

Q & A

What is the purpose of the InTune tutorial series?

The InTune tutorial series aims to provide a comprehensive understanding of Microsoft InTune, covering its features from automatic enrollment to app deployment, helping users to effectively manage and secure their devices.

What does BYOD stand for and what does it involve?

BYOD stands for 'Bring Your Own Device', which refers to the practice of using personal devices, such as laptops, Android phones, or iOS devices, for work purposes.

How can personal devices be enrolled into InTune?

The easiest way to enroll personal devices into InTune is through the Company Portal app, which can be installed on Android and iOS devices.

What is the InTune Company Portal and what does it allow employees to do?

The InTune Company Portal is an app developed by Microsoft that allows employees to securely access their company's resources on their personal devices.

What are some benefits of installing the Company Portal app?

The benefits include providing access to company resources, simplifying device enrollment, managing work apps, and boosting security measures such as remote wipe and enforcing password requirements.

How can users install the Company Portal app on their devices?

For Android, users can go to the Play Store and search for the InTune Company Portal, while iOS users can go to the App Store and install it from there.

What happens when a device is enrolled through the Company Portal app?

Upon enrollment, a personal container is created on the device, and the applications pushed from InTune will be displayed within this container.

What information can the InTune administrator see about a user's device?

The InTune administrator can see the device's model number, serial number, operating system, app names, owner device name, and manufacturer phone number of corporate devices, but they cannot see personal data such as call history, web history, emails, text messages, or location.

How can store apps be deployed to Android and iOS devices from the InTune admin center?

The InTune admin can select the platform, search for the desired app in the respective store, select the app, assign it to a designated group, and then create the deployment.

What is the process for deploying Microsoft Store apps to Windows devices?

The process involves clicking on 'Apps', selecting 'All apps', clicking 'ADD', choosing the Microsoft Store app, searching for the desired app, selecting it, assigning it to a group, and then reviewing and creating the deployment.

What will be the focus of the next video in the series?

The next video will focus on how to protect the applications that are pushed to mobile devices.

Outlines

00:00

📚 Introduction to InTune and BYOD

In this video, JoJo from Joy Jojo introduces the 16th installment in the InTune tutorial series. The video covers the basics of InTune, progressing from automatic enrollment to app deployment. JoJo encourages viewers to create a free trial account in InTune to explore its features. The focus of today's video is on BYOD (Bring Your Own Device), which allows the use of personal devices for work. JoJo explains the enrollment and management of personal devices through the Company Portal app and provides a detailed introduction to the Company Portal, its purpose, and benefits.

05:01

📱 Installing and Configuring the Company Portal App

JoJo explains how to install and configure the Company Portal app on Android and iOS devices. The app allows secure access to company resources, simplifies device enrollment, and boosts security. JoJo provides step-by-step instructions for enrolling a device, including signing in with a work or school account and accepting the organization's terms and conditions. JoJo emphasizes that personal data like call history, web history, and emails cannot be accessed by the InTune administrator. Instead, the administrator can see device-related information like model number, operating system, and app names.

10:02

🛠 Deploying Store Apps to Devices

JoJo details the process of deploying store apps to Windows, Android, and iOS devices via the InTune admin center. The video covers the steps to add and deploy a new application from the Microsoft Store, iOS Store, and Google Play Store. JoJo explains how to assign apps to designated groups and ensure they appear as approved apps in the Company Portal. The video concludes with a preview of the next session, which will focus on protecting applications pushed to mobile devices.

Keywords

💡InTune

InTune is a cloud-based service developed by Microsoft that allows organizations to manage and secure mobile devices and PCs. It is central to the video's theme as it is the platform being discussed for managing and deploying applications across various devices. The script mentions InTune in the context of automatic enrollment, app deployment, and managing BYOD (Bring Your Own Device) policies.

💡BYOD (Bring Your Own Device)

BYOD refers to the policy that allows employees to use their personal devices for work purposes. The script discusses BYOD in the context of enrolling personal devices like laptops, Android phones, or iOS devices into InTune, which is crucial for accessing company resources securely.

💡Company Portal App

The Company Portal App is an application developed by Microsoft that enables employees to access their company's resources securely on their personal devices. The video script explains how to install and configure this app on Android and iOS devices, which is key to the process of enrolling personal devices into InTune.

💡Device Enrollment

Device enrollment is the process of adding a device to an organization's mobile device management system, such as InTune. The script describes how employees can use the Company Portal App to enroll their devices, ensuring they meet security standards before accessing work data.

💡Mobile Device Management (MDM)

MDM refers to the management of mobile devices within an organization. In the script, MDM is synonymous with InTune, which is used to manage and secure devices enrolled by employees through the Company Portal App.

💡Work Profile

A work profile is a container on an Android device that separates work-related applications and data from personal information. The script mentions that after enrolling a device with InTune, a work profile is created where all company-managed applications are displayed and accessible.

💡Store Apps

Store apps refer to applications that are available for download from an app store, such as the Microsoft Store, iOS App Store, or Google Play Store. The script explains how InTune administrators can deploy store apps to different platforms, including Windows, iOS, and Android devices.

💡Application Deployment

Application deployment is the process of making applications available for installation on devices managed by InTune. The video script details the steps an administrator can take to deploy store apps to various devices, ensuring employees have access to approved applications.

💡Security Standards

Security standards are the requirements that must be met by devices before they can access sensitive company information. The script emphasizes that devices enrolled in InTune are verified against these standards to ensure the protection of corporate data.

💡Remote Wipe

Remote wipe is a security feature that allows administrators to erase data from a lost or stolen device. The script mentions this feature as one of the benefits of using the Company Portal App, highlighting its role in protecting sensitive information.

💡InTune Administrator

An InTune Administrator is a role responsible for managing the InTune environment, including enrolling devices, deploying applications, and enforcing security policies. The script explains what information the InTune Administrator can and cannot see on personal devices, emphasizing privacy and security.

Highlights

Introduction to the InTune tutorial series, covering basics from automatic enrollment to app deployment.

Encouragement to create a free trial account in InTune to explore learned options.

Explanation of Bring Your Own Devices (BYOD) and using personal devices for work purposes.

Introduction to the InTune Company Portal app for enrolling and managing personal devices.

Definition of InTune Company Portal as an app developed by Microsoft for securely accessing company resources on personal devices.

Benefits of installing Company Portal: accessing company resources, simplifying device enrollment, managing work apps, and boosting security.

Steps to install and configure Company Portal on Android and iOS devices.

Details on what the organization can and cannot see when using Company Portal.

Process for enrolling devices using the Company Portal app.

Explanation of how a personal container is created on Android devices after enrollment.

Overview of deploying store apps to Windows, Android, and iOS devices through the InTune admin center.

Step-by-step guide to deploying Adobe Acrobat Reader as a store app to various platforms.

Explanation of how to protect applications pushed to mobile devices.

Preview of upcoming topics in the next video, focusing on application protection.

Final summary and encouragement to follow along for further tutorials.

Transcripts

hi everyone JoJo here from Joy Jojo This

is a 16th video in our in tune tutorial

Series so far we have covered the basics

of InTune in a consecutive order from

automatic enrollment to app deployment

in previous video by following along you

should have a good understanding of what

in tune

offers I encourage you to create a free

trial account in in tune and explore the

options we have learned about so far all

right let's move on today's video

discuss about bring your own devices b y

o d bring your own devices which means

using your personal devices for work

purposes this could be your laptop

Android phone or iOS devices we will

cover how to enroll and manage these

devices the easiest way to enroll

personal device into InTune is through

company portal app so let's explore how

to install and configure company Portal

app in your Android and iOS devices

additionally we will learn how to deploy

store apps to Android and iOS devices

but before that let's understand what is

company portal is so what is in tune

company portal as a definition we can

say it as InTune company portal is a app

developed by Microsoft that allows

employees to securely access their

company's resources on the personal

devices so in your mobile phone your

your own personal device personal mobile

phone you want to access your company

resources like the customized

applications or your uh one drive or any

other company resources you want to

access it you can install company portal

on your um mobile phone and you can

configure it when you configure it it

get enrolled with in tune and you can

access your company resources through

company

portal so company portal is the official

app app that enables employees to

securely access corporate resources now

let's see what in tune company portal

does what are the benefits of installing

company portal the first benefit is that

provide access to company resources as

mentioned just now this include work

email internal app

and cloud storage like one drive for

business and all that stuff so you can

access all those company resources

through company

portal then the second Advantage is that

simplify device enrollment employees can

use the app to enroll their devices like

phone tablets laptops in the company's

mobile device management system which is

nothing but in so through company portal

you can enroll your devices to

into this Ure the device meet the

security standard before accessing work

data so they verify all the security

standards before accessing the work data

and the third Advantage is that manage

work apps user can browse and install

company approved application through

company portal which means through in

tune I'm pushing some applications I'm

approving some application that can be

installed on your machine so you can go

to company portal and install because

this is an approved application from the

InTune administrator and you can just

install it and use start using that and

boost security that is the

fourth advantage of using company portal

this app can remotely wipe and lost wipe

a lost or stallen devices to protect

sensitive company

information it may also enforce pin or

password requirement on the device so I

think it doesn't require much

explanation on that so it is something

like it boost security so installing

company portal you can if you are using

Android phone go to Play Store and

search for the InTune company portal and

install it um if you are using the iOS

go to App Store and install search for

inun company portal and install it it's

as simple as that now comes how we can

enroll the device how we can configure

the company portal so enroll the devices

first thing open the company Portal app

sign in with your work or school account

you will have a cloud you will have a

your organization cloud account log to

your company portal with that account if

prom if prompted to review notification

permission for the company portal you

just do that you can adjust notification

permission any time in the settings app

then you are prompted to accept your

organization terms and condition click

on accept all see uh the issue is that I

cannot show it in my uh and my mobile

device because I don't have a screen

recorder any application I have not

installed on my um personal device so

that is the reason why I am showing the

step by step the available document in

the public domain so you can easily

follow this uh to enroll the device so

once if you enroll that device what

happens a personal container will be

created on your Android device and all

the application that has been pushed

from the in tune will be will be

displayed there okay and we'll go back

to this review your organization can and

cannot see you should understand what

organization can see cannot see when we

ask the users to install company portal

they will be bit scared to be scared

because they think that their personal

device data will be seen by the inun

administrator company can never see call

and web history know your call and web

history cannot be seen by your in InTune

administrator or anybody from your

organization your location email and

text messages no not your email or text

message cannot be seen by the InTune

administrator contacts passwords

calendar camera role so all these item

cannot be seen by the InTune

administrator but the InTune

administrator can see your model number

of your device serial number operating

system app names owner device name

manufacturer phone number of corporate

devices so all these details can be seen

by the administrator but not your call

history or your web history location

emails

such things cannot be seen by the by

your

organization so if you move down see I

can keep the link uh in the description

so you can just follow it to configure

the company portal in your mobile device

in your Android or iOS device so steps

are similar both in the Android and the

iOS devices and anybody can do this this

is not a big task just click next next

and it will get installed and configured

as I mentioned once this company portal

installed and configured properly what

happens uh from the InTune admin

Center the device will be listed here

will be enrolled the device will be

enrolled in the inun admin Center and

InTune admin Center can view your device

here if you are enoll your Android

devices the Android device will be

listed here if it is an any iOS or IP OS

device then it comes under this menu for

the user and a separate container as I

mentioned earlier a separate container

will be created in your mobile device

and inside that container and it may be

named as work profile and inside that

work profile all the application that is

pushed from the in tune will be visible

there now let us see how we can deploy

store apps to your windows Android and

iOS devices as you have installed

company portal on your mobile devices

once the store app deployed from the

InTune admin Center it will be get

displayed on the company portal certain

apps will be approved status you can uh

go there and install it and start using

that let's see how we can deploy store

apps from in admin Center for that you

have to click on apps click on all app

you could see the application that I

have already deployed from the in admin

center now to add a new store to deploy

a new application I have to click on ADD

button here and select the platform in

our case first we'll uh send to the

Microsoft our laptops from the Microsoft

store app

select here we have to search for the

Microsoft store apps now we will search

we will push adob

reader yeah adob Acrobat Reader I select

that

so all the uh details taken

automatically click on next and assign

to the particular designated group

members in my case I'm allocating to add

all user and all devices click on next

review and created so you can in this

way you can very easily you can deploy

the store apps to Windows devices now

let's see how we can do this these two

um iOS devices for that again go back to

the all apps click on ADD button select

iOS Store app select click on on select

and again search for the same thing

search for the app I'm searching for

adob

reader yeah could see adob Acrobat

Reader here and PDF reader I select the

first one and select it details are

taken automatically from the store click

next assign to a particular group when

it comes to Android it is bit it is bit

different it is again we'll see that to

do that again go back to appli apps

click on all apps click add and managed

Google Play App managed Google Play App

click on that select

it and let's select adob batter

read click on select and click on

sync so that will be listed here so in

the in InTune company portal it will be

displayed as approved app so we can

install it

there so that's an overall about how we

can deploy store apps to all the

different Platforms in the next session

we will learn how we can protect the

application that is pushed to the mobile

devices so that we can see in the next

video till then

goodbye