No Ticket Needed

Appearance

10 min fix 5 min read Recently reviewedBeginner

By , IT support technician

Quick Answer

Download the Intune Company Portal app from your app store, sign in with your work account, and follow the prompts to install a secure Work Profile (Android) or Management Profile (iOS) on your device.

How to Set Up Your Work Profile on a Personal Device (BYOD) ​

Estimated Time to Fix: 10 minutes

Applies to: iPhone, Android, Microsoft 365
Article Type: How-To
Last Updated: 2026-07-16

Summary ​

Set up your personal phone or tablet for work email, Teams, and company apps while keeping your personal data separate and private. This guide covers app installation, device enrollment, and work-life boundary management.

Prerequisites ​

  • A personal iPhone or Android phone.
  • A Microsoft 365 work or school account.
  • The Microsoft Authenticator app (for MFA).
  • Your organization must allow personal devices (BYOD). Check with IT if you're unsure.

Instructions ​

1. Understand What BYOD Means for Your Device ​

Before enrolling, know what your company can and cannot see:

Your company CAN seeYour company CANNOT see
Work email, calendar, and contactsPersonal emails, texts, or photos
Whether the device meets security policies (encryption, PIN)Your personal apps or browsing history
Work apps installed through Company PortalYour physical location (unless you use a company GPS app)
Device type, OS version, and compliance statusPersonal files or media

TIP

BYOD enrollment creates a work profile on your phone — it's a secure container for work apps and data. Your personal apps and photos remain completely private and separate.

2. Install the Required Apps ​

Download the work apps your organization requires.

  1. Open the App Store (iPhone) or Google Play Store (Android).
  2. Download: Microsoft Outlook, Microsoft Teams, and Microsoft Authenticator.
  3. If your company uses Intune or Company Portal, also download Microsoft Intune Company Portal. Your IT team will tell you if this is required.

3. Register Your Device with Company Portal (If Required) ​

Some organizations require device enrollment for security compliance.

  1. Open the Company Portal app.
  2. Sign in with your work email and password.
  3. Follow the enrollment prompts — the app asks for permissions to manage certain security aspects of your device.
  4. Complete MFA verification if prompted.
  5. Once enrolled, the app shows a green checkmark and your device is listed as Compliant.

WARNING

Read the permissions carefully. Company Portal may ask to enforce a screen lock PIN, require device encryption, or remotely wipe work data only (not your personal data). These are standard security measures — they don't give IT access to your personal photos, messages, or apps.

4. Set Up Outlook on Your Phone ​

Add your work email to the Outlook mobile app.

  1. Open the Outlook app.
  2. Tap Add Account and enter your work email address.
  3. Complete the sign-in and MFA prompts.
  4. Outlook downloads your email, calendar, and contacts.
  5. If prompted to set an app PIN or use biometrics (fingerprint/Face ID), follow the prompts — this is a security requirement from your organization.

5. Set Up Teams on Your Phone ​

Get Teams running for chat and meetings.

  1. Open the Teams app.
  2. Sign in with your work email and password.
  3. Complete MFA if prompted.
  4. Allow notification permissions so you receive chat and meeting alerts.

6. Manage Work-Life Boundaries ​

Keep work and personal time separate on the same device.

  1. Set Quiet Hours in Teams: Go to Settings > Notifications > Quiet hours and set your off-hours (for example, 6 PM to 8 AM weekdays, all day on weekends).
  2. Set Notification Schedules in Outlook: Go to Settings > Notifications and configure when you receive email alerts.
  3. Consider using Focus modes on your phone (iPhone: Focus, Android: Do Not Disturb schedules) to automatically silence work apps during personal time.

7. Verify Your Setup ​

Confirm everything is working.

  1. Send yourself a test email and verify it arrives in Outlook on your phone.
  2. Send a test Teams message and confirm you receive a notification.
  3. Check Company Portal (if installed) and verify your device shows as Compliant.

Troubleshooting ​

WARNING

If your device shows as Not Compliant in Company Portal, you may be blocked from accessing work email and Teams until you fix the issue. Common fixes include setting a screen lock PIN, updating your OS, or enabling device encryption.

Symptom / ErrorPotential CauseSolution
"Your organization requires you to enroll this device"BYOD enrollment required before accessing work appsInstall Company Portal and complete the enrollment process (Step 3).
"Device Not Compliant" in Company PortalMissing PIN, outdated OS, or encryption disabledCheck the compliance details in Company Portal — it tells you exactly what to fix. See How to Fix "Device Not Compliant" Errors.
Outlook asks for a PIN every time you open itApp protection policy from your organizationThis is normal and required. Set up biometrics (fingerprint/Face ID) to speed up access.
Can't install Company PortalPhone OS too oldUpdate your phone's operating system to the latest version. Intune requires iOS 16+ or Android 10+.
Work and personal contacts mixed togetherOutlook syncing contacts to phone's default contacts appIn Outlook Settings > your account > turn off Save Contacts. Work contacts will only appear inside the Outlook app.