Appearance
Estimated Time to Fix: 10 minutes
Summary
Set up your personal phone or tablet for work email, Teams, and company apps while keeping your personal data separate and private. This guide covers app installation, device enrollment, and work-life boundary management.
Before You Start
- A personal iPhone or Android phone.
- A Microsoft 365 work or school account.
- The Microsoft Authenticator app (for MFA).
- Your organization must allow personal devices (BYOD). Check with IT if you're unsure.
Instructions
1. Understand What BYOD Means for Your Device
Before enrolling, know what your company can and cannot see:
| Your company CAN see | Your company CANNOT see |
|---|---|
| Work email, calendar, and contacts | Personal emails, texts, or photos |
| Whether the device meets security policies (encryption, PIN) | Your personal apps or browsing history |
| Work apps installed through Company Portal | Your physical location (unless you use a company GPS app) |
| Device type, OS version, and compliance status | Personal files or media |
TIP
BYOD enrollment creates a work profile on your phone — it's a secure container for work apps and data. Your personal apps and photos remain completely private and separate.
2. Install the Required Apps
Download the work apps your organization requires.
- Open the App Store (iPhone) or Google Play Store (Android).
- Download: Microsoft Outlook, Microsoft Teams, and Microsoft Authenticator.
- If your company uses Intune or Company Portal, also download Microsoft Intune Company Portal. Your IT team will tell you if this is required.
3. Register Your Device with Company Portal (If Required)
Some organizations require device enrollment for security compliance.
- Open the Company Portal app.
- Sign in with your work email and password.
- Follow the enrollment prompts — the app asks for permissions to manage certain security aspects of your device.
- Complete MFA verification if prompted.
- Once enrolled, the app shows a green checkmark and your device is listed as Compliant.
WARNING
Read the permissions carefully. Company Portal may ask to enforce a screen lock PIN, require device encryption, or remotely wipe work data only (not your personal data). These are standard security measures — they don't give IT access to your personal photos, messages, or apps.
4. Set Up Outlook on Your Phone
Add your work email to the Outlook mobile app.
- Open the Outlook app.
- Tap Add Account and enter your work email address.
- Complete the sign-in and MFA prompts.
- Outlook downloads your email, calendar, and contacts.
- If prompted to set an app PIN or use biometrics (fingerprint/Face ID), follow the prompts — this is a security requirement from your organization.
5. Set Up Teams on Your Phone
Get Teams running for chat and meetings.
- Open the Teams app.
- Sign in with your work email and password.
- Complete MFA if prompted.
- Allow notification permissions so you receive chat and meeting alerts.
6. Manage Work-Life Boundaries
Keep work and personal time separate on the same device.
- Set Quiet Hours in Teams: Go to Settings > Notifications > Quiet hours and set your off-hours (for example, 6 PM to 8 AM weekdays, all day on weekends).
- Set Notification Schedules in Outlook: Go to Settings > Notifications and configure when you receive email alerts.
- Consider using Focus modes on your phone (iPhone: Focus, Android: Do Not Disturb schedules) to automatically silence work apps during personal time.
7. Verify Your Setup
Confirm everything is working.
- Send yourself a test email and verify it arrives in Outlook on your phone.
- Send a test Teams message and confirm you receive a notification.
- Check Company Portal (if installed) and verify your device shows as Compliant.
Troubleshooting
WARNING
If your device shows as Not Compliant in Company Portal, you may be blocked from accessing work email and Teams until you fix the issue. Common fixes include setting a screen lock PIN, updating your OS, or enabling device encryption.
| Symptom / Error | Potential Cause | Solution |
|---|---|---|
| "Your organization requires you to enroll this device" | BYOD enrollment required before accessing work apps | Install Company Portal and complete the enrollment process (Step 3). |
| "Device Not Compliant" in Company Portal | Missing PIN, outdated OS, or encryption disabled | Check the compliance details in Company Portal — it tells you exactly what to fix. See How to Fix "Device Not Compliant" Errors. |
| Outlook asks for a PIN every time you open it | App protection policy from your organization | This is normal and required. Set up biometrics (fingerprint/Face ID) to speed up access. |
| Can't install Company Portal | Phone OS too old | Update your phone's operating system to the latest version. Intune requires iOS 16+ or Android 10+. |
| Work and personal contacts mixed together | Outlook syncing contacts to phone's default contacts app | In Outlook Settings > your account > turn off Save Contacts. Work contacts will only appear inside the Outlook app. |