MacOS Client Enrollment for Intune and GLBA compliance

Prerequisites

  • Device running macOS 14 (Sonoma) or later.
  • Stable network connection.

Download and Install Company Portal

  1. Download the Company Portal app from this link.  URL is: https://go.microsoft.com/fwlink/?linkid=853070 (to provide users with installer).  
  2. The Company Portal installer .pkg file will download. Open the installer from your Downloads folder and continue through the steps.

Open cardboard box icon above the filename “CompanyPortal-Installer.pkg” and file size “28.5 MB.”

  1. Agree to the software license agreement.
    • Microsoft Update may open to update Microsoft software. After all updates are installed, then continue.
  2. Enter your Mac’s password or registered fingerprint to install the software then click Install
  3. After completing, Microsoft Update may ask to AutoUpdate.  Before doing so, ensure that the Mac device has added to the list available in the Microsoft InTune Device Management group.  This will be available in the Intune Admin Portal under Home->Devices->MacOS Devices to confirm it's been added to our managed Mac OS devices.  It's typically easiest to sort the device by primary user and then if appropriate, update device name in the list or have Luke/Xavier do this for you.  
    1. If the device is not in our managed device list, you should provide the computer using Serial # to Luke Hays/Xavier Gonzales which should be reflected in the Intune Device's Management name.
    2. After confirming the device has been added check for updates.    
  4. Allow Microsoft Autoupdate to run if prompted:  
    Microsoft AutoUpdate Image
     
  5. Open Company Portal from your Finder -> Applications folder.

 

Company Portal app icon with a blue person silhouette and the text “Company Portal.app.”

 

If desired, you can also 

Enroll your Mac in Intune

  1. Click ‘Sign in’ within Company Portal and have the user log into the company portal.  If the device has been successfully enrolled, the user should be able to log in using their UWYO username.  

Company Portal sign-in page with a blue user icon, “Sign in” button, and privacy information.

  1. The next screen will prompt to set the device up, click the ‘Begin’ button.  Since it is enrolled in our domain's Intune, it will pick up permissions and profile management information remotely.  

University of Wyoming device-access setup screen with three setup steps, a “Begin” button, and a “Postpone” link.

  1. Review what the University of Wyoming can and cannot see on your enrolled device. Then click ‘Continue’.

University of Wyoming device-management privacy screen listing information the organization can and cannot access.

  1. On the Install management profile screen, click ‘Download profile’.

University of Wyoming device-management setup screen showing instructions to install a management profile.

  1. Your device's system preferences will open.  Double-click “Management Profile” then in the resulting window, click ‘Install’.

Profiles settings window showing a downloaded management profile that is not installed and requires review.

Device-management profile installation screen showing a verified Management Profile and Install, Ignore, and Cancel buttons.

       

  1. Enter your Mac’s admin password when prompted and click ‘Enroll’.
  2. Return to Company Portal and click ‘Done’.

University of Wyoming device setup window showing all three setup steps completed and a “Done” button.

*IMPORTANT NOTE:  If File Vault is already enabled, the user needs to rotate the key to get it into Azure. The terminal command to do this is: sudo fdesetup changerecovery -personal
Was this helpful?
0 reviews
Print Article