Manage mobile devices with Intune

Completed

Intune administration can be accessed using Microsoft Endpoint Manager admin center located at https://endpoint.microsoft.com. This console includes all the management capabilities provided by Intune, but also includes common management tasks such as managing users and groups. The Endpoint Manager admin center portal replaces the Intune console previous found in the Azure portal.

You can also access the Endpoint Management web console from the Microsoft 365 Admin center, which is listed in the Admin Centers in the navigation menu.

Intune Company Portal

The Company Portal is available as a web application and as an application for desktops and mobile devices on all platforms. Users use this portal to self-manage device enrollment and also to access applications that company administrator publishes. They access it via https://portal.manage.microsoft.com/ or by installing the Company Portal app on Windows, iOS, or Android devices.

Device Management Lifecycle

Managing mobile devices, like most IT management activities, follows a lifecycle. The mobile device management lifecycle contains four phases:

  • Enroll. In the Enroll phase, devices register with the mobile device management solution. With Intune, you can enroll both mobile devices, such as phones, and Windows PCs.
  • Configure. In the Configure phase, you help to ensure that the enrolled devices are secure and that they comply with any configuration or security policies. You can also automate common administrative tasks, such as configuring Wi-Fi.
  • Protect. In the Protect phase, the mobile device management solution provides ongoing monitoring of the settings established in the Configure phase. During this phase, you also use the mobile device management solution to help keep devices compliant through the monitoring and deployment of software updates.
  • Retire. When a device is no longer needed, when it's lost, or when it's stolen, you should help to protect the data on the device. You can remove data by resetting the device, performing a full wipe, or performing a selective wipe that removes only corporation-owned data from the device.