University IT
Stanford Intune Device Management Guide
Intune for Android is already available to everyone. For Windows, Linux, and iOS devices, the service is in a pilot.
Please note: This page is intended for Entra ID/Intune pilot participants only.
What’s next: A phased rollout is tentatively scheduled for late 2026/early 2027. More details will be announced soon through University IT news.
Introducing Intune
With our updated Microsoft login, we're introducing an extra layer of security called Microsoft Intune.
When you log in to a Stanford Microsoft app like Outlook, Teams, or OneDrive, Intune does a quick check to make sure your device is secure enough to access university data.
If you use a Windows or Android device, Intune also serves as your device management solution, keeping it up-to-date and simplifying how you get IT support.
We'll email you when it's time for you to connect. Your next steps will be based on your device type.
| Find your device | What's next |
|---|---|
| Windows | You need to enroll your device in Intune. For many devices, this will happen automatically. For others, you'll launch an app that we provide and follow the guided prompts. |
| Mac, iPhone, or iPad | You'll keep using Jamf as you do today. You just need to complete a quick, one-time registration to connect your device to Intune. |
| Linux | You need to install Microsoft Edge and then enroll your Linux device in Intune. |
| Android | If your device is already enrolled in Intune, no action is needed from you. Otherwise, follow these instructions to enroll a device in Intune mobile device management. |
Enroll your Windows device
If your computer is in Active Directory (AD), we'll enroll it for you automatically. For all other Windows devices, you'll see a pop-up on your screen that will guide you through the set up. You can always choose to enroll manually at any time.
Automatic enrollment
Automatic enrollment for devices in AD happens in the background. You don't need to do anything — the set up will finish on its own the next time you connect to the Stanford network or VPN. Should you happen to see an error, we have some simple fixes outlined in our troubleshooting FAQs.
Guided enrollment
If your device isn't in AD, the enrollment process will start with a pop-up from BigFix. This prompt will launch the Stanford Intune Migration app, which handles the set up with a few clicks from you. Review the guides to preview the app experience, which differs slightly based on device ownership.
Manual enrollment
You can enroll manually whenever it's convenient. Follow these steps for Stanford-owned or personal devices.
Register your Apple device
If your Mac, iPhone, or iPad is already managed by Jamf, just complete a quick registration. This step connects your device to the new Microsoft login for secure access to apps like Outlook and Teams.
Mac devices enrolled in Jamf
Follow the prompts to register your Mac device.
iPhones or iPads enrolled in Jamf
Open the self-service app and follow the prompts to register your iPhone or iPad.
Enroll your Linux device
Enroll a Linux device in Microsoft Intune to get secure access to Stanford resources in Microsoft Edge.
Enroll Linux into Intune
Install Microsoft Edge and then enroll your Linux device in Microsoft Intune. These steps have been tested on Ubuntu 24.04.3 LTS and Red Hat Enterprise Linux (RHEL) 9.6.
Additional resources
For additional information and resources, refer to the "Enroll Linux device in Intune" article on Microsoft Learn.
Enroll your Android device
Intune addresses the unique needs of Android mobile devices, helping you to connect securely to internal networks without needing to configure the settings on your own.
Manually enroll your Android in Intune
Install the Company Portal app and follow and enroll in Intune mobile device management.
Automated device enrollment for Android
Beginning Jan. 27, 2026, Android phones purchased through Stanford automatically enroll in the Intune device management system.
Resources and support
Learn more
Learn more about the university's transition to a new Microsoft login.
Get help
For questions or support, submit a Help request to the University IT Service Desk team.
Frequently asked questions
Who will enroll in Intune device management and when?
This roll out will begin with all faculty, staff, and students in the School of Medicine, starting this summer (2026). Timelines for other groups transitioning to Intune will be announced as the information becomes available.
How will I know if I need to enroll in Intune device management?
If you need to enroll your device, you'll receive an email with detailed instructions. Plenty of advance notice will be provided to individuals who need to take action.
Which devices need to be enrolled or registered in Intune?
When your group moves to Intune, you'll need to enroll (Windows PC or Android) or register (Mac or iOS) each device you use for Stanford-work. Note: Android devices currently used for Stanford work should already be enrolled in Intune.
What about Android devices?
The university already uses Intune device management for Androids. If your device is already enrolled in Intune, you will need to set up Authenticator only. For new Android devices, refer to these instructions for enroll in Intune.
If my Apple device is already enrolled in Jamf for device management, why does it also need Intune?
If your Mac, iPhone, or iPad is already managed by Jamf, it should be registered (not enrolled) in Intune. Registering your Mac or iOS device in Intune will connect it to the new Microsoft login for secure access to apps like Outlook and Teams.
