How can I configure Basic Mobility and Security if I already have Intune configured?

Raj Joshi 0

We cannot afford Intune licenses for all our users. I would like to configure most of the users for Basic Mobility. However, starting out we had Intune configured for the admin user. How can we now set the users up for Basic Mobility? When try to setup the users who don't have a Intune license, they get a license error in the Company Portal app on the device.

Raj Joshi 0 Reputation points

2024-03-28T13:44:56.8033333+00:00

Any help will be great as we are a startup with limited resources.

2 answers

glebgreenspan 2,230 Reputation points

2024-03-28T16:55:46.05+00:00

Hello Raj

If you are looking to configure most of your users for Basic Mobility in Intune, you can assign them a "Basic Mobility" security group that has been configured with appropriate policies and settings for basic device management.

To address the license error issue in the Company Portal app for users who do not have an Intune license assigned, you have a couple of options:

Remove the Intune license from the user: If you do not require full Intune management for certain users and only need Basic Mobility, you can remove the Intune license from their user account in the Microsoft 365 admin center. This will allow them to use the Company Portal app without encountering a license error.

Use Intune App Protection policies: Instead of assigning an Intune license to these users, you can deploy Intune App Protection policies to manage and secure the apps and data on their devices. App Protection policies do not require an Intune license for the user but can provide basic security features for company data within apps.
Please sign in to rate this answer.
Raj Joshi 0 Reputation points

2024-03-28T17:09:10.7266667+00:00

To give you an idea, I have 1 Business Premium user (with Intune license) and 5 Business Standard license (no Intune license). The Business Premium is having all the devices managed under Intune. For the 5 Business Users, I have enabled Basic Security in MS 365, however, when they login into the Company Portal app, they get a License error.

Do I need to take out Intune license from the Business Premium account user? If so, how do I do that?

glebgreenspan 2,230 Reputation points

2024-03-28T17:19:19.76+00:00

If you have one Business Premium user with an Intune license managing all devices under Intune and five Business Standard users without Intune licenses encountering a license error when logging into the Company Portal app, you may need to adjust the licensing configuration to ensure that all users can access the Company Portal app without encountering errors.

Here's how you can address the issue:

1.     Consider Intune App Protection Policies: For the Business Standard users who do not have Intune licenses, you can consider using Intune App Protection policies instead of full Intune device management. This way, you can protect corporate data within apps on their devices without requiring an Intune license for each user.

2.     Review License Assignment:

o    If the Business Premium user is the only one managing devices under Intune, you may consider removing the Intune license from this user to free up a license for another user.

o    To remove the Intune license from the Business Premium user, you can do the following:

§ Go to the Microsoft 365 admin center and select "Users" > "Active users".

§ Locate the Business Premium user and click on their account.

§ In the user's settings, navigate to the licenses section and remove the Intune license from their assigned licenses.

3.     Assign Licenses Appropriately:

o    Ensure that the Business Standard users have the appropriate licenses assigned, such as Microsoft 365 Business Standard licenses.

o    Verify that the Basic Security settings in Microsoft 365 are correctly configured for these users.

4.     Review Company Portal Access:

o    After adjusting the licensing configuration, have the Business Standard users attempt to log in to the Company Portal app again to verify that the license error no longer occurs.

Raj Joshi 0 Reputation points

2024-03-28T19:54:05.3133333+00:00

Thank for the response. I tried the #2. I removed the Intune license from the Business Premium User by unchecking the appropriate box. I double checked that the Business Premium User and the Business Standard user have no Intune licenses assigned. I double checked that no devices are enrolled in Intune anymore. Then I did the following:

I had the Business Premium uninstall and reinstall Company portal.

When the logged this time, now they are also seeing UserLicenseTypeInvalid error

Addtionally, I had Business Standard user do the above 2 steps and they are getting the same license error. Please advise on what I need to modify on my steps.

Raj Joshi 0 Reputation points

2024-03-29T19:27:23.6766667+00:00

Any advice based on my previous comment? We have done everything you have asked, but still getting the license error for every user.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Crystal-MSFT 48,591 Reputation points Microsoft Vendor

2024-03-29T01:53:21.3633333+00:00

@Raj Joshi. Thanks for the reply. Based on my researching, we can manage users and their mobile devices using both Intune and Basic Mobility and Security in the same Microsoft 365 Business Standard organization by setting up Basic Mobility and Security first, and then adding Microsoft Intune. This allows you to choose Basic Mobility and Security or the more feature-rich Intune solution.

https://learn.microsoft.com/en-us/microsoft-365/admin/basic-mobility-security/choose-between-basic-mobility-and-security-and-intune?view=o365-worldwide#differences-in-capabilities

If you have enabled Microsoft Intune first then set up Basic Mobility and Security, Basic Mobility and Security, may not work. Please open case to see if it can be changed to let it work.

https://learn.microsoft.com/en-us/mem/get-support

Have a nice day!

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Raj Joshi 0 Reputation points

2024-03-29T19:26:37.3+00:00

Thank you. I have already reviewed this link and it does state that if you setup with Intune first, then you cannot set it up with Basic Security for users. For a Startup company with very limited resources, we cannot afford Intune licenses for everyone. Most of the users are MS 365 Business Standard users which does not include an Intune license. I am hoping that the Microsoft Rep can come back and help us.

Crystal-MSFT 48,591 Reputation points Microsoft Vendor

2024-04-01T02:26:09.12+00:00

@Raj Joshi, Thanks for the reply. Try to open case to see if more help can be given.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How can I configure Basic Mobility and Security if I already have Intune configured?

2 answers

Your answer