Intune Best Practices for Daily Work

Best Practices for Daily Work on a Managed Device

You've made it to the final lesson! Now let's put everything together with practical best practices for working productively and securely on your Intune-managed device.

Daily Habits

1. Keep Your Device Updated

• Install updates when prompted — don't keep clicking "Remind me later"
• Restart your device when asked — updates aren't complete until you restart
• Keep your device charged during updates to prevent failures
• Set update installation to happen during non-work hours if possible

2. Check Company Portal Regularly

• Open Company Portal once a week to verify compliance status
• Address any warnings immediately — don't wait for access to be blocked
• Use the "Sync" button if something seems off
• Install available apps from Company Portal rather than finding them yourself

3. Use Approved Apps for Work Data

• Use Outlook for work email (not the native Mail app)
• Use OneDrive for Business for work files (not personal Dropbox)
• Use Microsoft Teams for work communication (not personal WhatsApp)
• Use Microsoft Edge for work browsing (if IT recommends it)
• This ensures company data stays within the managed, protected ecosystem

Weekly Habits

4. Restart Your Device Weekly

Devices that run for weeks without restarting can develop issues:

• Pending updates don't install
• Memory usage grows, causing slowdowns
• Intune policies may not fully apply

Pick a day (Friday before leaving, Monday morning) and make it a habit to restart.

5. Review Your Installed Apps

Uninstall apps you don't use anymore. This frees up storage and reduces your security surface. On Android, check both personal and work profiles.

Security Best Practices

6. Lock Your Device When You Walk Away

• Windows: Press Windows key + L
• macOS: Press Control + Command + Q
• iOS/Android: Press the power button to lock
• Don't rely on auto-lock alone — lock manually when you step away

7. Don't Share Your Device

• If someone needs to use your device, create a guest account (Windows) or use a different profile
• Don't share your work app PIN with anyone
• If someone borrows your phone, pause the work profile (Android) or be aware they might see work notifications

8. Report Issues Early

• If something seems wrong (app crashing, sync failing, unusual notifications), report it to IT immediately
• Don't wait for it to become a bigger problem
• Don't try to fix security settings yourself — you could make things worse

Working Remotely on a Managed Device

9. Use the VPN When Required

• If IT provides a VPN, use it when working from public Wi-Fi (coffee shops, airports, hotels)
• VPN encrypts your connection, protecting data from eavesdroppers
• Some companies require VPN for all remote work — check with IT

10. Be Mindful of Public Wi-Fi

• Avoid accessing sensitive company data on unsecured public Wi-Fi without VPN
• Use your phone's hotspot as a more secure alternative to public Wi-Fi
• Company Portal can verify your device is compliant even on public networks

When You Get a New Device

1. Contact IT first — They may have specific enrollment procedures for new devices
2. Enroll the new device using Company Portal before accessing work resources
3. Retire the old device — In Company Portal, tap your old device and select "Remove" to unenroll it
4. Don't keep old devices enrolled — IT may have a device limit, and old enrollments are a security risk
5. Transfer personal files before retiring the old device — Company Portal only removes work data

Summary: The 5 Rules of Managed Device Success

Congratulations!

You've completed the Intune Essentials training course. You now understand:

• What Intune is and why your company uses it
• What happens during enrollment on all platforms
• How compliance policies and Conditional Access work
• How to use the Company Portal app
• How app protection policies secure company data
• How to troubleshoot common issues
• Your privacy rights on a managed device
• Best practices for productive, secure daily work

You're ready to work confidently on your managed device. Take the final quiz to test your knowledge!