How to Enroll Windows Mobile Phone to Intune via Workplace Join

7

This is a quick post to tell you about the Windows Phone Enrollment Process. First of all your infrastructure should be ready to support Windows Phone enrollment. Follow Support Tool for Microsoft Intune Trial Management of Windows Phone 8/ 8.1 guide to setup Microsoft Intune Company Portal application and .PFX certificate for Windows Phone enrollment. In this post, I’m going to provide the steps you need to follow in the phone to enroll the Windows Phone devices into SCCM + Intune infrastructure.

Following are the technet Links which would be useful for you to learn more about Intune :-

1. What is new with Microsoft Intune

2. Getting started with Microsoft Intune: walkthrough guide

3. What to know before setting up Microsoft Intune – Network Bandwidth usage, User accounts etc..

4. How to Manage mobile devices with Microsoft Intune 

5. How to Manage Mobile Devices by Using Configuration Manager and Microsoft Intune

Go to Settings of the Windows Phone then Click on Workplace.

Windows Phone Enrollment

Windows Phone Enrollment1

Inside Workplace Settings, click on “add account” option. On the next window put in one of your Intune enrollment (email) account ([email protected]) and click on Sign in.

Windows Phone Enrollment2Windows Phone Enrollment3

Once you sign in you’ll be able to see “the connection dots” ….. on top of your Windows Phone and it’s “we’re looking for your settings”. On the next window, you would be able see it asking for server details. Email id will automatically published, enter the name of the servermanage.microsoft.com“. The server is common for all the devices. Once you enter server name CLICK on Sign IN.

Windows Phone Enrollmen-4Windows Phone Enrollmen-5

You’ll be able to see BLUE dots in the Windows Phone screen, don’t worry, it’s trying to connect to server and authenticate you. On the next page, you’ll be able to see Workplace window and below that you’ll be asked to log into Windows Intune with your organization account. In my case it’s the account (email id) used above as I’m using trail version of Intune. Enter email id and password click on Sign IN option.

Windows Phone Enrollmen-5Windows Phone Enrollmen-6

On the next windows you will be able to see BLUE dots in the blank screen of Windows Phone. Don’t worry it’s working in the background. Here you go!! Next screen is the confirmation screen where you can see the message “ACCOUNT ADDED“.

Also, the following message “You’ve successfully added your Anoop’s (your company name) account. Changes from your company policy will usually be applied on your phone within the next hour. Just one more thing. Your company also has an app you can install. If you skip this step, you can install it later. Go to Settings –> Workplace, then tap your account “.

Make sure you’ve checked the box “Install Company App” then tap on DONE button.

Windows Phone Enrollmen-7Windows Phone Enrollmen-8

On the next screen you would be able to see Settings –> Workplace and at the bottom Anoop’s enrolled. Anoop’s is my company name in my LAB environment. Now, You’re successfully enrolled your devices.

Windows Phone Enrollmen-9

7 COMMENTS

  1. Hi,

    Once i enter the email address and the server name it is saying “Make sure you have a cellular data or wifi connection, then try again. If you still can’t connect check the email address and the server address are correct”. This comes even when data and wifi is connected.

    Thanks,
    Kanishka

  2. Hi Anoop,

    My tenant MDM is SCCM, I am able to enroll window 10 phone but when I try to enroll windows 8.1 phone using same UPN get the below error:
    We weren’t able to set up this account on your phone. try again later. If you still cant add it, contact your company ‘s support person for help.
    Also I tried enroll this device using Company portal app get error : This device is either not enrolled , or the company portal can’t identify it.

    Please suggest what else I can do.

    • I think there are some changes in enrollment process and DNS records.

      Unlike iOS and Android, Windows devices (Windows Phone 8.1, and 10 and Windows PCs 8.1 and 10) have UI built into the operating system to enroll a device for management. The user enters a corporate email address which matches the User Principal Name (UPN) set for user identity. The device tries to auto-discover the server and start the enrollment process.
      Underneath the covers, here’s what happens when enrolling a Windows Phone 8.1 device:
      If there is no CNAME configured, the device enrollment server won’t be found, and the device presents a screen to allow the user to enter the server address.
      IMPORTANT: The server address the user needed to enter used to be manage.microsoft.com, but due to the changes necessary to move to the new grouping and targeting structure, the FQDN to enroll a device to Microsoft Intune changed to enrollment.manage.microsoft.com. Both FQDNs can be used now, but support for manage.microsoft.com ended in February of 2017.
      More details – https://blogs.technet.microsoft.com/intunesupport/2017/03/04/which-cnames-to-use-for-auto-discovery-during-mdm-enrollment/

      • Type Host name Points to TTL
        CNAME EnterpriseEnrollment.company_domain.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour

        The company_domain in the FQDN should be the registered domain name(s) you are using for single sign on with the UPN. For example if users at Contoso use [email protected] as their email/UPN, the Contoso DNS admin would need to create the following CNAMEs.

        Type Host name Points to TTL
        CNAME EnterpriseEnrollment.contoso.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour

        If you have more than one UPN suffix, you need to create one CNAME for each domain name and point each one to EnterpriseEnrollment-s.manage.microsoft.com. For example if users at Contoso use [email protected], but also use [email protected], and [email protected] as their email/UPN, the Contoso DNS admin would need to create the following CNAMEs.

        Type Host name Points to TTL
        CNAME EnterpriseEnrollment.contoso.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour
        CNAME EnterpriseEnrollment.us.contoso.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour
        CNAME EnterpriseEnrollment.eu.contoso.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour

        For more information, see https://docs.microsoft.com/en-us/intune/deploy-use/set-up-windows-device-management-with-microsoft-intune.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.