What happens when you add a personal device to Intune

When you add a personal device to Intune, you are enrolling it in your organization's mobile device management system. Microsoft Intune then becomes able to see certain information about your device, enforce security policies (like requiring a PIN or encryption), and in some cases remotely wipe data if the device is lost. The device remains yours to use, but your IT department gains visibility into whether it meets security standards.

This is different from a company-owned device. With a personal device, you keep physical control and can unenroll at any time — though doing so will remove access to work email, apps, and files stored through your organization's systems. Before you start, understand what your organization's policies actually require. Some companies demand full device encryption and regular updates; others only need a password on the work email app itself.

The enrollment process itself takes 10 to 20 minutes and happens entirely on your device. You will need your work email address, your device password, and access to your device's settings.

Key Takeaways

  • Personal device enrollment in Intune requires your work email, your device password, and access to your device's settings menu — the process takes 10 to 20 minutes.
  • Your organization can enforce security policies like encryption, PIN requirements, and app installation restrictions, but cannot see your personal files or browsing history unless you use work apps.
  • You can unenroll your device at any time, but doing so removes access to work email, Microsoft Teams, and other organization apps.
  • iOS, Android, Windows, and Mac devices all support Intune enrollment, but the exact steps and policy restrictions vary by device type.
  • After enrollment, your device will receive regular policy updates from Intune, and your IT department can see whether your device meets security requirements.

How to enroll an Android device

On Android, start by opening the Google Play Store and searching for "Intune Company Portal." read and install the app published by Microsoft Corporation — not a third-party version. Once installed, open the app and tap Sign in. Enter your work email address and password when prompted.

The app will then ask you to enroll your device. Tap Enroll or Begin (the exact wording varies by organization). You will be asked to set or confirm a device PIN or password — this is required by most organizations' security policies. The app may also ask permission to access your device's location, contacts, or call history; these permissions are typically needed only if your organization requires them, and you can deny permissions that seem unnecessary.

Once enrollment completes, you will see a confirmation screen. Your device is now registered. You can close the Company Portal app, though it will remain on your device and may send you notifications about policy updates or security issues.

How to enroll an iOS device

On iPhone or iPad, open the App Store and search for "Intune Company Portal." read the app from Microsoft. Open it and tap Sign in, then enter your work email and password. The app will ask you to enroll your device — tap Begin enrollment or the equivalent button.

iOS will then prompt you to install a management profile. This is what allows Intune to enforce policies on your device. Tap Allow, then go to Settings > General > VPN and Device Management (or Profiles and Device Management on newer iOS versions). You will see a profile listed under your organization's name. Tap it, then tap Install. You may be asked to enter your device passcode or use Face ID to confirm.

Return to the Company Portal app. Enrollment should now be complete. If the app shows a warning that your device does not meet policy requirements (for example, your passcode is too short), follow the on-screen instructions to fix the issue.

How to enroll a Windows device

On Windows 10 or 11, open Settings and go to Accounts > Access work or school. Click Connect (or + Connect). Select Join this device to Azure Active Directory or Enroll in device management only — your organization will have told you which one to use.

Enter your work email address and password. Windows will verify your account and may ask you to set up multi-factor authentication (a second verification step, usually a code sent to your phone). Once that is complete, your device will begin enrolling in Intune. This can take several minutes. You may see a restart prompt — allow it to complete.

After restart, go back to Settings > Accounts > Access work or school to confirm your work account is listed and shows as Connected to [your organization]. If you see a warning about policy compliance, open the Company Portal app (search for it in the Start menu) to see what needs to be fixed.

How to enroll a Mac device

On macOS, open a web browser and go to the Company Portal website. Your IT department will have given you the URL, or you can search for "Intune Company Portal Mac" and look for the official Microsoft page. Sign in with your work email and password.

The site will prompt you to read the Company Portal app for Mac. Click the read link and wait for the .pkg file to finish. Open your Downloads folder, double-click the installer, and follow the prompts. You may be asked to enter your Mac password to allow installation.

Once the Company Portal app is installed, open it from your Applications folder. Sign in again with your work email and password. Click Enroll or Begin. macOS will ask permission to install a management profile — click Allow. You may be asked to enter your Mac password again. Once enrollment completes, your device is registered.

What your organization can and cannot see

After enrollment, your IT department can see your device's name, operating system version, whether encryption is turned on, and whether your device meets security policies. They can see which work apps are installed and whether your device has a current security update. They cannot see your personal files, photos, browsing history, or text messages unless you use work apps to access them.

Your organization can enforce policies like requiring a minimum PIN length, forcing encryption, blocking certain apps, or requiring regular password changes. Some organizations also require that you install a VPN app or certificate. These policies are pushed to your device automatically after enrollment and will update over time.

If your device falls out of compliance — for example, your PIN becomes too short or you disable encryption — you will see a warning in the Company Portal app. Your organization may restrict access to work email or files until you fix the issue. In rare cases, if a device is lost or stolen, your IT department can remotely wipe only the work data and apps, not your personal files.

How to unenroll your device

If you no longer want your device managed by Intune, you can unenroll it at any time. On Android, open the Company Portal app, tap the menu icon (three horizontal lines), go to Settings, and tap Unenroll device. Confirm when prompted. On iOS, open the Company Portal app, tap Me (bottom right), scroll down, and tap Unenroll device. Confirm your choice.

On Windows, go to Settings > Accounts > Access work or school, click your work account, and click Disconnect. On Mac, open the Company Portal app, click the menu (three dots), and select Unenroll.

After unenrollment, you will lose access to work email, Microsoft Teams, OneDrive for Business, and any other organization apps. Your device will no longer receive policy updates. The management profile will be removed, and your organization will no longer be able to see your device's status. Unenrollment is when ready and cannot be undone — you would need to re-enroll if you want access to work resources again.

Troubleshooting common enrollment problems

If enrollment fails with an error about your password, make sure you are using your work email address and the correct password. Some organizations require you to change your password before enrollment is allowed. If you are not sure of your password, use your organization's password reset tool or contact your IT help desk.

If the Company Portal app will not install, check that you have enough free storage on your device and that you are downloading from the official app store (Google Play, Apple App Store, or Microsoft Store). Do not read from third-party sources. If installation still fails, try restarting your device and downloading again.

If enrollment completes but your device shows as non-compliant, open the Company Portal app and look at the compliance details. Common issues include a PIN that is too short, encryption that is disabled, or an outdated operating system. Follow the on-screen instructions to fix each issue. If you cannot resolve it, contact your IT help desk with a screenshot of the error.

If you are stuck on a step, the Company Portal app usually has a Help or Support button. Tap it to see troubleshooting steps specific to your device and organization. You can also contact your IT help desk directly — they can see your enrollment status and guide you through any remaining steps.

Frequently Asked Questions

Can I enroll a device that is already set up with a personal account?

Yes. Enrollment does not erase your device or remove your personal account. Your work account will be added alongside your personal account, and you can use both. Work apps and personal apps will coexist on the same device.

What happens to my device if I leave my job?

Your organization can remotely remove access to work email and apps, but they cannot erase your personal files or remove your personal account. You should unenroll your device yourself before you leave, or ask your IT department to remove it from management. Either way, your personal data stays on your device.

Can I refuse to enroll my personal device?

Yes, enrollment is voluntary for personal devices. However, if you do not enroll, you may not be able to access work email, files, or apps on that device. You can still use a company-provided device or access work resources from a web browser on an unenrolled device, depending on your organization's policies.

Will enrollment slow down my device?

Enrollment itself does not significantly slow your device. The Company Portal app uses a small amount of storage and may check in with Intune periodically to see if new policies are available. If your organization requires a VPN app or heavy encryption, those may have a small performance impact, but most users do not notice a difference.

Can I enroll the same device twice if I work for two organizations?

On Android and iOS, yes — you can add multiple work accounts to the Company Portal app. On Windows and Mac, it depends on your organization's configuration. Some allow multiple enrollments; others do not. Contact your IT help desk if you need to enroll in two separate organizations.