6.0 Intune Enrollment Information for Agencies

Owned by Maestas, Alicen D.
Last updated: Jan 26, 2024
4 min read

Let’s learn more about being InTune! In order to get started, there is preparation work that we ask agencies to complete for their county devices. Being on the latest version and having a full charge is a huge help for enrollments. The team will provide on-site support to enroll the existing county devices in the environment and also reinstall apps such as PingID, Teams, and Outlook.

Apple Business Manager (ABM) is the system that enrolls county iPhones and iPads. The majority of devices in Franklin County are Apple.

Samsung Knox is the system that enrolls county Android devices and tablets.

Intune has features to reset the county-owned device if it is lost or stolen, can help locate the county-owned device, and can track inventory of your agency’s devices. Laptop credentials will also sync over to your county device, as Active Directory (AD) is now connected to Apple and Samsung Knox. Once enrolled, the device is reset and has those features enabled + an 8-digit PIN enabled.

Pre-Enrollment Preparation for Your Device

  1. Devices need to be on the latest version or at least one version below.

Try to make sure the device is updated ahead of enrollment day as this can take considerable time because the phone will try to enroll into Intune and download the new version.

  1. 16.0 or higher is the version for iOS or iPadOS.

    1. Apple Guide linked here.

  2. 9.0 or higher is the version for Android.

  1. Successful enrollments are usually at 50% battery and above.

Some enrollments can take time.

  1. Verify applications that need to be on the device(s).

Most of this should already be done but agencies may have left some out or may have new applications that need assigned.

  1. Users can back up their devices if there is important information.

Apple Guide linked here.

How-To Geek Guide linked here.

  1. Attach a sticky note to device with the NAME, current PIN, and current Apple ID Password.

This helps the team identify one or multiple devices when processing them. The PIN will be changed during enrollment to an 8 digit PIN. The Apple ID Password will sync with AD credentials (your laptop credentials) once enrolled into Intune.

  1. If your agency has Shared iPads, then a Service Account will need created beforehand.

    e.g. FCDCiPad@franklincountyohio.gov

    15 iPads can be attached to 1 Service Account.

Security Request Form > Request to Add a New Service Account

image-20240123-153026.png

County Device Processing into Intune… What happens next?

The Intune team provides on-site support to enroll existing devices. The Intune Project Manager or your BRM will coordinate an enrollment date and time for your agency. Doing the pre-enrollment steps helps tremendously with the enrollment process! If your agency provided information in the Intune Pre-Enrollment Survey, that information will be leveraged for scheduling purposes. Sharing how many devices, what type of devices (iPhone, iPad, Android), and who they are assigned to ensures that FCDC can take steps to ensure your county device is backed up properly and then enrolled into Intune.

Once complete, the Intune team will bring back your device and you will log into your new Managed Apple ID and the Company Portal using your Franklin County credentials. You will receive your new 8-digit PIN. There is an option to add biometrics on the device and re-install PingID.

Post-Enrollment Checklist for Your Device

Sign into the Company Portal Application and Check Status / Check In the device.

Company Portal > Devices > Check Status

 

(For iPhones)

Sign into the Apple ID using the Managed Apple ID and Active Directory (AD) credentials for the user.

A Managed Apple ID is owned and managed by FCDC - including password resets and role-based administration.  Intune has features to reset the county-owned device if it is lost or stolen, can help locate the county-owned device, and can also track inventory of your agency’s devices.

(For iPhones)

Go into device Settings and Messages, scroll down and toggle the switch for “Send as SMS”

Also check Send & Receive while here and verify that both the Apple ID and the phone number are showing for sending and receiving (the first field).

Share the new 8-digit PIN for the device with the user.

An option for users is to leverage Biometrics so they don’t have to type in an 8-digit PIN every time they need to access their device.

  1. Face ID guide is linked here.

Begin installs of any needed apps while finishing the steps below.

Teams and Outlook can be signed into here as well.

If needed, re-pair Ping ID on the device.

Go to setup.franklincountyohio.gov on a browser and then follow the prompts. This is where you will can a QR code.

  1. Ping ID guide is linked here.

If needed, re-pair MiCollab on the device.

File a Jira ticket for the Communications and Collaboration team to process.

FCDC Help Desk | helpdesk@franklincountyohio.gov | 614-525-3282