User Guide For Personal Mobile Devices Enrolment

MICROSOFT INTUNE User Guide ForPersonal Mobile Devices Enrolment

For further assistance/enquiries on Microsoft Intune, please contact {M365_Intune}@petronas.com.myOpen

How to enrol your Personal Mobile Devices only (laptop not included)

Start Now!

CYBER

Table Of Contents

CYBER

Introduction to Intune

Step-By-Step Guide

Slide 3

Steps to enrol your IOS device (iPhone / iPad)Steps to enrol your Android device

Learn what Intune is and why it is important

Slide 9

Support Slide 65

A Mobile Device Management (MDM) and Mobile Application Management (MAM) cloud-based service

WHAT IS MICROSOFT INTUNE?

Simply enrol your mobile devices with Microsoft Intune and enjoy peace of mind as it quietly protects your corporate apps and data.

All your private phone data remains anonymous and for your eyes only! Your device will be automatically set up for corporate email and corporate network access while you continue to have access to personal apps and data.

4

Microsoft Intune is in place to ensure a secure environment for you to work productively

WHY IS IT IMPORTANT?

5

Content Management

• Prevent unauthorised access to corporate data and enterprise applications on mobile devices.

• Securely share, view among approved apps and data storage only on corporate apps like OneDrive or SharePoint only.

Data Security

• Maintain data integrity on devices by separating company data from personal profiles and apps.

• Provide secured access to resources like Email, Teams, documents, browser and LOB application.

• Selective wipe corporate data from a BYOD device in case of lost/theft.

Device Management & Tracking

• Discover and block jail-broken, rooted and infected devices to secure company network and resources.

• Ensure that diverse user mobile devices are configured to a consistent standard and corporate policies like VPN, WI-FI and other parameters.

• In case of loss/theft, wipe device (corporate only) to ensure corporate data safety.

Mobile Application Distribution

• Company store to upload corporate mobile applications reducing threat from public store.

• Updating equipment, applications, functions, or policies in a scalable manner without rejections from Apple/Android.

PETRONAS can see PETRONAS cannot see

1 Device name and model

2 Device manufacturer

3 Operating system and version

4 Managed app inventory and names

5 Device owner

6 Device Storage Free Space

7 Device serial number

8 IMEI

1 Calling and web browsing history

2 Personal email and text messages

3 Contacts

4 Calendar

5 Passwords

6 Pictures, in the apps or camera roll

7 Any Files

8 Location of the device

Here is a list of information that PETRONAS can and cannot see from your mobile devices

IS YOUR PRIVACY AT RISK?

6

PETRONAS can PETRONAS cannot

1

Remove company data from managed apps such as Outlook and OneDrive only. No access to personal data such as photos and text messages.

2Delete / remove the device enrol from Intune, but not remove data from the device.

3

Remote lock this will lock a device remotely upon request. But using device PIN/passcode, user can unlock it again.

4Remove device passcode via physical access to device only.

WHAT ACCESS DOES PETRONAS HAVE?

Here is a list of access that PETRONAS can and cannot perform on your mobile devices

1

Change device setting from personal to corporate owned by an administrator to be able to see personal sensitive information.

2

Factory reset this will wipe the device entirely, restoring it to a default state. If the user does not have backups of their personal data, then it will be permanently lost.

3

Bypass activation lock used to recover devices where the previous owner has not relinquished control of iOS before they handed back the device (e.g. a corporate owned device that will be re-issued to another staff member may require the activation lock to be bypassed).

4Lost mode/Locate device when an iOS 9.3 or later device is in lost mode an administrator can access a limited amount of location data to try and find it.

7

BEFORE YOU MOVE ON…

Here is a checklist for you to enjoy a smooth enrolment for your mobile device

Ensure your mobile devices meet the following minimum requirements:

Setup a strong passcode on your mobile device with minimum 6-digit PIN

Ensure that you have your Multi-Factor Authenticator (MFA) application ready before you begin

It is recommended that you charge your mobile devices to a minimum of 80% battery status or connected to a charging dock during enrolment

It is recommended that you connect your mobile devices to your home Wi-Fi for a stable connection during enrolment

Apple / iOS Android

Operating System iOS 13.0 & above Android 8.0 & above

Space Required 2GB 2GB

8

WHAT MOBILE DEVICE DO YOU USE?

Click on the mobile device operating system you own to be directed accordingly

9

Mobile devices that do not operate on Apple/iOS or Android (such as Harmony on Huawei) are unable to enrol with Microsoft Intune at this moment

WHICH OF THESE IOS DEVICE DO YOU OWN?

Click on the iOS device that you own to be directed to the step-by-step enrolment user guide accordingly

10

iPhone iPad

HAVE YOU SET YOUR PASSCODE FOR YOUR iPHONE?

You are required to setup a minimum of 6-digit passcode prior to enrolment. Have you?

11

Yes, I have set a strong 6-digit passcode for my

mobile device

No, I have not set a strong 6-digit passcode and I need step-by-step guide to do it

HOW TO SET PASSCODE ON iPHONE (1/2)

Setup your device passcode/PIN:

2

3

1

Step 1 Step 2 Step 3

12

3

12

Pro Tip:Your passcode needs to be a minimum of 6-digits and consists of numbers that are not sequential or repeated (e.g. 123456 or 222222)

First, setup your device passcode/PIN:Step 4Step 4 Step 5

4 5Enrol with

13

Enter New Passcode4

Re-enter your new passcode to verify

5

HOW TO SET PASSCODE ON iPHONE (2/2)

STEPS TO ENROL YOUR iPHONE

Here are the THREE (3) simple steps to enrol your iPhone with Microsoft Intune. Click on each of the steps to be directed accordingly

14

1

Prepare & Setupyour device

2

Install & Register on Microsoft Intune

3

Setup Profile & Mobile Settings on Microsoft Intune

HOW TO ENROL YOUR iPHONE (1/17)

First, prepare your Authenticator App:

Have this application running in the background in preparation for a smooth enrolment experience

2

1

Step 1 Step 2

1

2

15


Now, download the Intune Company Portal App:

4

5

3


3

4

5

16



Step 6 Step 7

8

9

6

7

17

6

7 GET


Now, you can login with your PETRONAS Enterprise ID (EID):

Enter your PETRONAS EID9

Once the Intune Company Portal 8

Step 8 Step 9

8

9

8

9

18



Step 10 Step 11

8

9

10

11

19

Enter your PETRONAS Enterprise ID (EID) password

10

You will be prompted for the MFA code You can navigate to the Authenticator App by clicking on

11


Now, you will need to setup your profile on Microsoft Intune:

13

Review the details about Device Management and Your Policy and

14

Please read PETRONAS Terms and 12


912 913

914

20


Now, you will need to setup your profile on Intune Company Portal App:

configure your device.16

17

15


915916 917

21

Pro Tip:refers to device

configuration and certificates required for Intune installation by iOS


22

Now, you can begin to setup your mobile device with Intune Company App:

19

20

Leaving the app open, go the Settings in your iPhone and click on

18


918

919

920




23



921

922

923

22

Read the Certificate message and 23

Enter your current/existing device 6-digit passcode

21





924

925

926

24

Next, finish setting up your mobile device with Intune Company Portal App:

25

Click into Intune Company Portal App from your Home Screen

26

24




Step 27 Step 28

928927


A Update Device Settings page will

is compliant with PETRONAS requirements

28

27

25


Step 29 (a) Step 29 (b) Step 30

929

929

930

26


Scenario A:If you have not installed any Productivity Applications (such as Teams, Outlook, etc) you will be

Scenario B:If you have previously installed any Productivity Applications (such as Teams, Outlook, etc) you will be

38

39



932931

933

27

32

notifications for latest updates from Intune Company portal

33

31

You are all set! Now just set your notification settings:


28

Productivity Apps are automatically installed upon successful enrol

34

You are all set! Sit back and relax while Intune Company Portal will push for automated download of Microsoft Teams, Outlook, OneDrive & Edge

934

Step 34 Step 35 (a) Step 35 (b)

935

935

You will notice that your PETRONAS Enterprise ID (EID) has been automatically identified and you can now enjoy Single-Sign On

Scenario A:

Scenario B:On Teams, click on your PETRONAS EID

35


Step 37 Step 38

937

938

29

If you decide to download additional productivity apps, you may do so on Intune Company Portal:

Step 36

936

You can open your Company Portal app

36

PETRONAS approved applications37

You may choose to install any of the available apps from the Intune Company Portal Featured apps

38

Pro Tip:This step is optional if you would like to install other applications that had not been


939

30

You will be prompted to verify your 40

favourite productive applications on your mobile device

39


Learn what happens if you already downloaded these apps previously

Step 40 Step 41Step 39

940

downloaded and you can login to use them for work purposes

41



943

944

31

Sign out from all your existing applications

43

Sign in again to all your productivity apps

44

Go to the settings on your applications

42

If you have already installed the Productivity Apps prior to Microsoft

enrol (e.g. Teams):

Learn how you can have more support

HAVE YOU SET YOUR PASSCODE FOR YOUR iPAD?

You are required to setup a minimum of 6-digit passcode prior to enrolment. Have you?

32

Yes, I have set a strong 6-digit passcode for my

mobile device

No, I have not set a strong 6-digit passcode and I need step-by-step guide to do it

HOW TO SET PASSCODE ON iPAD (1/3)


2

screen1

Step 1 Step 2

33


21


34

Enter New Passcode4


Step 3 Step 4

4


3

3


Enrol with

35

Re-enter your new passcode to verify

5


Step 5

5

STEPS TO ENROL YOUR iPAD

Here are the THREE (3) simple steps to enrol your iPad with Microsoft Intune. Click on each of the steps to be directed accordingly

36

1


2


3


HOW TO ENROL YOUR iPAD (1/16)


Have this application running in the background in preparation for a smooth enrolment experience

2

1

Step 1 Step 2

1

2

37



Intune Company Portal4

3

38

Step 3 Step 4

4

3



39

6

7 GET

Step 5 Step 6

5

6



Enter your PETRONAS EID8

Once the Intune Company Portal 7

40

Step 7 Step 8

7

8



41

Enter your PETRONAS Enterprise ID (EID) password

9

You will be prompted for the MFA code You are required to navigate to the Authenticator App to obtain this code as outlined in Step 1 & 2

10

Step 9 Step 10

910


Now, you will need to setup your profile on Microsoft Intune:

Review the details about Device Management and Your Policy and

12

11

42

Step 11 Step 12

1211 Pro Tip:

Here in Step 12, you can toggle between the tabs to view what PETRONAS can & cannot see/do on your mobile device.



configure your device.14

13

43



Step 13 Step 14

14

13



44



Step 15

15

15


45


17

Leaving the app open, go the Settings in your iPad and click on

16



Step 16 Step 17

17

16


46


Enter your current/existing 6-digit passcode

19

18



Step 18 Step 19

19

18


47




Step 20 Step 21

20

21 20

21


48


Step 22 (a) Step 22 (b)

22 22

Scenario A:If you have previously installed any Productivity Applications (such as Teams, Outlook, etc) you will be

Scenario B:If you have not installed any Productivity Applications (such as Teams, Outlook, etc) you will be

22


49

You are all set! Sit back and relax while Intune Company Portal will push for automated download of Microsoft Teams, Outlook, OneDrive & Edge

Step 23 Step 24

24

23

Productivity Apps are automatically installed upon successful enrolment

23

app to finish setting up your mobile device

24


50


enrolment process25

You may choose to install any of the available apps from the Intune Company Portal Featured apps

26

Step 25 Step 26

25

26


51

Open any Productivity Apps (Teams, Outlook, OneDrive) and

27

With Microsoft Intune installed, now you can sign-in on your productivity apps:

You will notice that your PETRONAS Enterprise ID (EID) have been automatically identified and you can now enjoy Single-Sign On

28

Step 27 Step 28

27

28


52


Step 29

29

You will notice a pop-up to inform you that your productivity apps are now managed by the PETRONAS IT department

29

With Microsoft Intune installed, now you can sign-in on your productivity apps:

HAVE YOU SET YOUR PINCODE FOR YOUR MOBILE?

You are required to setup a minimum of 6-digit pincode prior to enrolment. Have you?

53

Yes, I have set a strong 6-digit pincode for my

mobile device

No, I have not set a strong 6-digit pincode and I need step-by-step guide to do it

HOW TO ENROL ANDROID DEVICE (1/1)


2

Set a 6-digit PIN3

1


54

1

2

3

Enrol with


STEPS TO ENROL YOUR ANDROID DEVICE

Here are the THREE (3) simple steps to enrol your Android device with Microsoft Intune. Click on each of the steps to be directed accordingly

55

1


2


3



Have this application running on the background in preparation

2

1

Step 2

2

56


1

Step 1

Now, download the Intune Company Portal App from the Google Play Store:

4

5

3

Step 4 Step 5

57


Step 3

3

4

5

Once the app has been installed, proceed to register with your PETRONAS Enterprise ID (EID):

7

Enter your PETRONAS credentials 8

6

Step 7 Step 8

58


Step 6

8

7

6

Once the app has been installed, proceed to register with your PETRONAS Enterprise ID (EID):

59


10

9

9

You will be prompted for the 6-digit code that is generated from your Authenticator App Obtain the code from the Microsoft Authenticator app in Steps 4 & 5

10


Congratulations! You are now being signed into Intune Company Portal App

11

Now, you will need to setup your Intune Company Profile on the application. Follow these steps:

60


1312

Read the Terms & Conditions and 12

your mobile device13


Read the Privacy Policy on what PETRONAS can and cannot see on your mobile devices and click

14

14


61


15

application to set up a work profile15

This process will take a few minutes depending on internet connection

Do not leave the application during this step

16


Once the set-up for your Work Profile is completed, the application will automatically create access to company resources Do not leave the application during this step

17


62


18

Once the set-up is completed, click 18

Finish your device setup by clicking 19


Congratulations! You are all set! Your Intune Profile has been successfully set-

20

19 20

Learn what happens next after enrol

Now that you are all set, you will notice some additional changes on your mobile device:

63


There will be a toggle between and

icon tagged to each application

21

Productivity Apps (such as Outlook and Teams) will automatically be installed if you would like to install other applications, click on

22


You can choose from the available PETRONAS approved applications

23

23

Sign into your work applications

21

22

With the Microsoft Intune enrol & Work Profile on your mobile device, your PETRONAS Enterprise ID will automatically be recognised on all Productivity Apps:

64


Click on your PETRONAS Enterprise ID to login to the Productivity Apps

24

For first-time login, you will be prompted to acknowledge the privacy policy for each Productivity App

25


Congratulations! You are all set!26

26

24

25


Support

SUPPORT

66

Contact Microsoft Intune Project Team if additional support is required

Click on the following to access resources that will help in your enrolment with Microsoft Intune

User Guides

Microsoft Teams Group

FAQ

Video Guides

https://teams.microsoft.com/l/team/19%3a7d0305c064774ae5884e1d10222b86a4%40thread.tacv2/conversations?groupId=77429421-ef58-476d-9fbd-79a9446f7621&tenantId=3b2e8941-7948-4131-978a-b2dfc7295091

https://mypetronas.com/group-digital/cybersecurity/fi-msintune



Congratulations, you have successfully enroledyour mobile device with Microsoft Intune!

6

7

Open

Documents

User Guide For Personal Mobile Devices Enrolment