How can I configure Basic Mobility and Security if I already have Intune configured?

Raj Joshi 0 Reputation points
2024-03-28T03:33:02.44+00:00

We cannot afford Intune licenses for all our users. I would like to configure most of the users for Basic Mobility. However, starting out we had Intune configured for the admin user. How can we now set the users up for Basic Mobility? When try to setup the users who don't have a Intune license, they get a license error in the Company Portal app on the device.

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,336 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. glebgreenspan 1,215 Reputation points
    2024-03-28T16:55:46.05+00:00

    Hello Raj

    If you are looking to configure most of your users for Basic Mobility in Intune, you can assign them a "Basic Mobility" security group that has been configured with appropriate policies and settings for basic device management.

    To address the license error issue in the Company Portal app for users who do not have an Intune license assigned, you have a couple of options:

    Remove the Intune license from the user: If you do not require full Intune management for certain users and only need Basic Mobility, you can remove the Intune license from their user account in the Microsoft 365 admin center. This will allow them to use the Company Portal app without encountering a license error.

    Use Intune App Protection policies: Instead of assigning an Intune license to these users, you can deploy Intune App Protection policies to manage and secure the apps and data on their devices. App Protection policies do not require an Intune license for the user but can provide basic security features for company data within apps.

  2. Crystal-MSFT 42,961 Reputation points Microsoft Vendor
    2024-03-29T01:53:21.3633333+00:00

    @Raj Joshi. Thanks for the reply. Based on my researching, we can manage users and their mobile devices using both Intune and Basic Mobility and Security in the same Microsoft 365 Business Standard organization by setting up Basic Mobility and Security first, and then adding Microsoft Intune. This allows you to choose Basic Mobility and Security or the more feature-rich Intune solution.

    https://learn.microsoft.com/en-us/microsoft-365/admin/basic-mobility-security/choose-between-basic-mobility-and-security-and-intune?view=o365-worldwide#differences-in-capabilities

    If you have enabled Microsoft Intune first then set up Basic Mobility and Security, Basic Mobility and Security, may not work. Please open case to see if it can be changed to let it work.

    https://learn.microsoft.com/en-us/mem/get-support

    Have a nice day!

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.