Intune Mobile Application Management without …

1 Intune Mobile Application Management without Enrollment (MAM-WE), MFA, SSPR and BT DMA Prepared for Herrick Technology Labs, Inc. Kazi Rahman Architect Planet Technologies, Inc. Ph (301) 721-0100 Fx (301) 721-0189 All information contained in this document is Planet Technologies, Inc. Proprietary and is limited to distribution between Planet Technologies, Inc., and the Quadrint, Inc. Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 2 of 51 Table of Contents Register Your Multifactor Authentication and Self-Service Password Reset .. 5 Step1: Download and Install Microsoft Authenticator App on Android devices .. 5 Download and Install the Microsoft Authenticator App on iOS devices .. 6 Step2: Login to Login to Office 365 Portal .. 7 If You Have a Microsoft Authenticator App, Please Follow the Below Instructions: .. 7 If you Do Not Have a Microsoft Authenticator App, Please Follow the Instructions Below.

2 15 If You Want to Change the Default MFA Authentication Method, Please Follow the Instructions Below .. 22 Configure Outlook App on iOS and Android devices .. 27 Download and install Outlook App for iOS and Android .. 27 iOS devices .. 27 Android devices .. 30 Reconfigure Outlook Profile using BitTitan Deployment Pro Agent .. 36 Sign out of Office Pro Plus Must be completed before reactivating .. 38 1) Remove O365 account from Windows .. 38 2) Remove account from Office software .. 38 3) Remove O365 saved credentials .. 39 1) Confirming successfully cleared Windows account (no account listed): .. 40 2) Confirming successfully cleared Office account (no account listed, only sign-in box) 41 If not done already, reboot your PC, then sign into Office .. 42 Confirm Office account activation .. 42 Confirm account activation in Windows .. 43 Intune Mobile Device Management without Enrollment (MAM-WE) .. 44 What is MAM? .. 44 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc.

3 Page 3 of 51 Benefits of MAM App Protection .. 44 MAM Support for Device 44 App Protection Policies .. 45 What are app protection policies?.. 45 What are examples of app protection policies? .. 45 Apps you can manage with app protection policies .. 45 App protection features .. 47 App experience on Android .. 50 Disabled services and features .. 50 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 4 of 51 Overview 1. Download and Install the Microsoft Authenticator app on iOS and Android devices . a. Or use Cell phones (for phone calls and SMS). It is not recommended. 2. Login and setup MFA and SSPR (must be done before proceeding) 3. Download and Install Microsoft Outlook App and Microsoft Authenticator App on iOS devices and configure the Outlook app 4. Download and Install Microsoft Outlook App and Intune Company Portal App on Android devices and configure the Outlook App 5. Configure Outlook App using BitTitan DeploymentPro Agent 6.

4 Sign out of Office Pro Plus and sign in using the GCC High account. Note: Users must Install the Microsoft Authenticator app and Microsoft Outlook app on iOS devices . Users must install the Intune Company Portal app and Outlook app on their Android devices . Users do not need to sign in to Company Portal App on Android devices . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 5 of 51 Register Your Multifactor Authentication and Self-Service Password Reset Step1: Download and Install Microsoft Authenticator App on Android devices Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 6 of 51 Download and Install the Microsoft Authenticator App on iOS devices . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 7 of 51 Step2: Login to Login to Office 365 Portal If You Have a Microsoft Authenticator App, Please Follow the Below Instructions: Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc.

5 Page 8 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 9 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 10 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 11 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 12 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 13 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 14 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 15 of 51 If you Do Not Have a Microsoft Authenticator App, Please Follow the Instructions Below Click on I want to set up a different method . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 16 of 51 Click on Phone . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 17 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc.

6 Page 18 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 19 of 51 Click on I want to set up a different method . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 20 of 51 Click on Email . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 21 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 22 of 51 If You Want to Change the Default MFA Authentication Method, Please Follow the Instructions Below Click on My Account . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 23 of 51 Click on Security Info . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 24 of 51 If you want to add an alternate phone please following the instruction below Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 25 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 26 of 51 If you want to change your default authentication method, please follow the instruction below.

7 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 27 of 51 Configure Outlook App on iOS and Android devices Download and install Outlook App for iOS and Android End users need to install the app on their devices . Users can search for "Microsoft Outlook" in the Apple App Store or Google Play Store and download it from one of those locations. To leverage app-based conditional access policies, the Microsoft Authenticator app must be installed on iOS devices . For Android devices , the Intune Company Portal app is leveraged. iOS devices Install Microsoft Authenticator App and Outlook App on iOS devices . Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 28 of 51 Configure Outlook App on iOS devices Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 29 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 30 of 51 Android devices Install Intune Company Portal App and Outlook App on Android devices , you do not need to sign in to Intune Company Portal App.

8 Open Outlook App and sign in with your HTL O365 account. Use your PC login/domain password, as they are now synchronized. Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 31 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 32 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 33 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 34 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 35 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 36 of 51 Reconfigure Outlook Profile using BitTitan Deployment Pro Agent Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 37 of 51 Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 38 of 51 Sign out of Office Pro Plus Must be completed before reactivating 1) Remove O365 account from Windows Start -> Settings (gear icon) -> Accounts -> Access work or school If a Work or school account exists, click disconnect and then yes on the pop-up.

9 Do not disconnect accounts listed under Connected to HTL AD domain 2) Remove account from Office software Open Word or Excel, click File, then Account. Click Sign Out, then close the program. Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 39 of 51 3) Remove O365 saved credentials Start -> Credential Manager | Click Windows credentials and look under Generic Credentials Expand and remove any credentials that contain the text listed below. Asterisks are wildcards. For example, a credential named MicrosoftOffice16_Data matches MicrosoftOffice1* and should be deleted. Reboot PC after deleting. MicrosoftOffice1* msteams* Microsoft_OC* OneDrive* Delete the two below(or ALL) if you run into an issue with reactivation: Virtualapp/didlogical SSO_POP_Device Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 40 of 51 1) Confirming successfully cleared Windows account (no account listed): Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc.

10 Page 41 of 51 2) Confirming successfully cleared Office account (no account listed, only sign-in box) Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 42 of 51 If not done already, reboot your PC, then sign into Office Open Word or Excel, click File -> Account Sign in with your O365 username (email address) and enter your PC log-in/domain password to register and activate Office. The password for email is now synchronized from your PC login/domain password. The email username is your full email address. Confirm Office account activation Your account should be listed under user information Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc. Page 43 of 51 Confirm account activation in Windows Start -> Settings (gear icon) -> Accounts -> Access work or school On the same screen, click Email & accounts to confirm it is listed under Accounts used by other apps Intune MAM-WE, MFA, SSPR and BT DMA Herrick Technology Labs, Inc.