Azure AD Registration

Question

Simple question. Can Company Portal App on Windows BYOD be used for Azure AD Registration process?

I know you can do it via Start>Setting>Work/School account, but want to know if it is doable via Company Portal?

If yes, can you nudge me in the right direction with a link explaining it.

Many thanks.

Answer 1

@Anonymous Thanks for posting in our Q&A. From your description, did you mean that you want to use Company Portal app to enroll a windows device to intune? If there is anything misunderstanding, please correct me.

Please refer to the following article to try：
https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-windows-10-device

With this method, the device's ownership will show "Personal" and join type will show "Azure AD registered".

Hope it will help.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

@Lu Dai-MSFT

OK what you are saying is that by unchecking the box the device is AD Registered only and I get the identity management side of things on my BYOD device.

However, I have Azure AD Premium P1 as part of my MS 365 Business Premium licences, so I really need to check the box as I want to enrol the BYOD device into Intune and get the benefits of App Protection Policies.

Is that assumption, correct?

Answer 3

@Anonymous If you only want to deploy app protection policies, the device is not needed to enroll to intune. App protection policies are supported on devices that not enrolled in any mobile device management solution.
https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#app-protection-policies-on-devices

However, if you want to use intune to do other things in the future, such as deploy compliance policies, configuration policies and deploy apps, please check the box to enroll the device to intune.

Hope the above will clarify something.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

@Lu Dai-MSFT
The mist is now starting to clear, on this matter.

When enrolling in Intune it allows you to deploy compliance policies, configuration policies and deploy apps, as you said.

• We are talking BYOD devices, do we explicitly need to tell the User of the device what compliance, configuration and deployed apps will deploy, prior to them using Company Portal?
  • When you say Deployment of Apps are you talking about Automatic Enrollment rather the User selecting from the Apps on the Company Portal?