Users visit this app, or the site at portal.manage.microsoft.com, to enrol a device, install the apps offered to them, see whether they're compliant and look up how to contact IT.
Also called Intune Company Portal.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Company Portal in context, with comparison tables and the common traps.
Terms in this definition
- App protection policy
A set of Intune rules on managed apps that safeguards organisational data, for example by demanding a PIN or preventing copy-paste and save-as into personal apps. It works whether or not the device is enrolled.
- LSDOU
The sequence in which Group Policy is processed: the local policy first, followed by site, domain and organisational unit policies. The nearest, last-processed setting takes effect unless Enforced or Block Inheritance alters that.
Related terms
- Account driven user enrollment
A way to bring a personally owned iPhone or iPad (iOS/iPadOS 15 or later) under management by signing in with a work account in Settings. Corporate data is kept on its own managed APFS volume, the device is never supervised, and the method takes over from the deprecated Company Portal–based user enrolment.
- Android Management API
The interface Google recommends for Android Enterprise; on devices, the Android Device Policy app enforces it. Intune runs corporate-owned devices on it already, and is migrating BYOD work profile devices too, replacing Company Portal there with the Microsoft Intune app.
- Broker app
Without one, app-based Conditional Access can't work, since it's what registers phones and tablets in Entra ID. iPhones and iPads use Microsoft Authenticator; Android devices can use Company Portal or Authenticator.
- Custom notifications
Pushes a short message (50-character title, 500-character body) from Intune to Android and iOS/iPadOS devices, or to the users in chosen groups, via the Intune app or Company Portal. Arrival can't be guaranteed.
- Device category
A label chosen by the user, Sales for example, in Company Portal (on Windows, via its website). Assignment filters and dynamic groups can target devices by it through the deviceCategory property.
- Direct enrollment
An Apple Configurator method that leaves the device's data intact and only works for devices with no user affinity. Company Portal can't be used, and the .mobileconfig profile it relies on expires after two weeks.
- Enrollment notifications
Sent by Intune through email or a Company Portal push after someone enrols a device, so the user can flag an enrolment they don't recognise. Enrolments without a user don't trigger them.
- Terms and conditions
Intune terms that appear in the Company Portal and need accepting before a user can enrol. They carry version numbers so an update can ask users to accept again, and they are separate from Microsoft Entra terms of use.