Microsoft released almost two weeks ago Conditional Access for Macos operating systems as part of Azure AD, which allows you to control that you only allow access from devices that are managed by Microsoft Intune and that are compliant. At the same time Microsoft released the preview of the Company Portal for the same device platform. Until now devices needed to be enrolled via the web portal, like described earlier in this blog late 2015.
- Company Portal App Download
- Company Portal App For Mac Os 10 6
- Intune Company Portal App Mac Os
- Company Portal App For Mac Os Download
- Company Portal App For Mac Os X
- Sep 05, 2017 Microsoft released almost two weeks ago Conditional Access for Macos operating systems as part of Azure AD, which allows you to control that you only allow access from devices that are managed by Microsoft Intune and that are compliant. At the same time Microsoft released the preview of the Company Portal for the same device platform. Until now devices needed to be enrolled via the web portal.
- The Company Portal provides access to corporate apps and resources from almost any network. Your company must already subscribe to Microsoft Intune, and your IT admin must set up your account before you can use this app.
Mac Catalyst. Native Mac apps built with Mac Catalyst can share code with your iPad apps, and you can add more features just for Mac. In macOS Big Sur, you can create even more powerful versions of your apps and take advantage of every pixel on the screen by running them at native Mac resolution. Apps built with Mac Catalyst can now be fully controlled using just the keyboard, access more iOS. Sep 02, 2017 Intune Company Portal for macOS Experience. With the Company Portal, the user experience is streamlined, with the management profile installed automatically and you can see device compliance status from within the app. Here’s a quick look at the end-user experience with the Intune Company Portal for macOS on macOS Sierra.
Conditional Access in action
For a long time applications connecting Exchange Online via the Exchange Web Services, like the Microsoft Outlook for Macos app did not work with Conditional Access. Either you want to allow it or block it via Exchange Online by configuring the EwsAllowMacOutlook setting in the Organizational Config of Exchange (Online). For Outlook this is finally fixed via Conditional Access.
To be able to show the Company Portal at best we need to enable Conditional Access in Azure AD. This can be done for all Cloud Apps or just for Office 365 Exchange Online. Targeting the Device platforms for Conditional Access can be done per platforms at the time or by selecting All platforms (including unsupported), this should be the option if you want to target all platforms.
So after enabling Conditional Access in Azure AD to also control Macos devices you will see that when accessing Exchange Online from the Microsoft Office Outlook app that you will need to enroll the device to get access.
Access is blocked via the Outlook App, device needs to be enrolled
Also when trying to access Outlook Web App ( https://outlook.office.com ) a message that the organization require device management to allow access to Exchange Online.
Enrolling the device via the Intune Company Portal
So as mentioned the Microsoft Intune Company Portal for Macos devices is in preview and can be used to enroll your device and check compliance. Let’s see how the experience looks like.
First of all you can download the Company Portal here.
So after downloading and starting the Company Portal you need to logon. First you need to click Sign In to start the process.
Sign in to the Company Portal
Company Portal App Download
You will be redirected to the logon page and you need to authenticate with your credentials. Next you will need to go through the same enrollment experience like we have with iOS and Android devices.
The users will be informed why they need to enroll the device.
Why enroll your device?
Also information is shared about the privacy of the user.
Next enroll the device in Microsoft Intune.
start enrolling
During the enrollment process the management profile will be installed at the Mac and all other recourses like Wi-Fi and VPN profiles will be deployed.
Device is enrolled and compliant
After the device is enrolled and marked as complaint we are done.
The company portal shows information about the device, like the name, manufacturer, OS and model. also information about the compliance state is shown.
Device options
In the Device menu we are able to Sync the device for new policies, rename and remove the device.
So what happens if a device is not compliant or becomes not compliant? The device will be marked as Not in compliance in the company portal and when looking for more information the user will see what is wrong so that the user is able to fix it and get compliant.
Trying to get access to Outlook Web App will result in the following message that a complaint device is required.
Requires a compliant device
The story around management of Macos devices is getting better and better, be sure to test the Microsoft Intune Company Portal if you have Microsoft Intune and (unmanaged) Macos devices in your environment.
Company Portal App For Mac Os 10 6
Till next time!
Comments
-->Enroll your macOS device with the Intune Company Portal app to gain secure access to your work or school email, files, and apps.
Organizations typically require you to enroll your device before you can access proprietary data. After your device is enrolled, it becomes managed. Your organization can assign policies and apps to the device through a mobile device management (MDM) provider, such as Intune. To get continuous access to work or school information on your device, you must set up your device to match your organization's policy settings.
This article describes how to use the Company Portal app for macOS to set up and maintain your device so that you meet your organization's requirements.
What to expect from the Company Portal app
During initial setup, the Company Portal app requires you to sign in and authenticate yourself with your organization. Company Portal then informs you of any device settings you need to configure to meet your organization's requirements. For example, organizations often set minimum or maximum character password requirements that you'll be required to meet.
After you enroll your device, Company Portal will always make sure that your device is protected according to your organization's requirements. For example, if you install an app from a source that's not trusted, Company Portal will alert you and might restrict access to your organization's resources. App protection policies like this one are common. To regain access, you'll likely need to uninstall the app.
If after enrollment your organization enforces a new security requirement, such as multi-factor authentication, Company Portal will notify you. You'll have the chance to adjust your settings so that you can continue to work from your device.
To learn more about enrollment, see What happens when I install the Company Portal app and enroll my device?.
Get your macOS device managed
Use the following steps to enroll your macOS device with your organization. Your device must be running macOS 10.12 or later.
Note
Throughout this process, you might be prompted to allow Company Portal to use confidential information that's stored in your keychain. These prompts are part of Apple security. When you get the prompt, type in your login keychain password and select Always Allow. If you press Enter or Return on your keyboard, the prompt will instead select Allow, which may result in additional prompts.
Install Company Portal app
- Go to Enroll My Mac.
- The Company Portal installer .pkg file will download. Open the installer and continue through the steps.
- Agree to the software license agreement.
- Enter your device password or registered fingerprint to install the software.
- Open Company Portal.
Important
Microsoft AutoUpdate might open to update your Microsoft software. After all updates are installed, open the Company Portal app. For the best setup experience, install the latest versions of Microsoft AutoUpdate and Company Portal.
Enroll your Mac
- Sign in to Company Portal with your work or school account.
- When the app opens, select Begin.
- Review what your organization can and can't see on your enrolled device. Then select Continue.
- On the Install management profile screen, select Download profile.
- Your device's system preferences will open.
a. Select Install and then select Install again.
b. If you’re prompted to, enter your device password. - Once the profile is installed, it will appear in the profiles list under Management Profile.
- Return to Company Portal.
- Your organization might require you to update your device settings. When you're done updating settings, select Retry.
- When setup is complete, select Done.
Troubleshooting and feedback
If you run into issues during enrollment, go to Help > Send Diagnostic Report to report the issue to Microsoft app developers. This information is used to help improve the app. They'll also use this information to help resolve the problem if your IT support person reaches out to them for help.
After you report the problem to Microsoft, you can send the details of your experience to your IT support person. Select Email Details. Type in what you experienced in the body of the email. To find your support person's email address, go to the Company Portal app > Contact. Or check the Company Portal website.
Additionally, the Microsoft Intune Company Portal team would love to hear your feedback. Go to Help > Send Feedback to share your thoughts and ideas.
Unverified profiles
When you view the installed mobile device management (MDM) profiles in System Preferences > Profiles, some profiles might show an unverified status. As long as the management profile shows a verified status, you don't need to be concerned.
The management profile is what defines the MDM channel connection. As long as the management profile is verified, any other profiles delivered to the machine via that channel inherit the security traits of the management profile.
Intune Company Portal App Mac Os
Updating the Company Portal app
Company Portal App For Mac Os Download
Updating the Company Portal app is done the same way as any other Office app, through Microsoft AutoUpdate for macOS. Find out more about updating Microsoft apps for macOS.
Next Steps
Company Portal App For Mac Os X
Still need help? Contact your company support. For contact information, check the Company Portal website.