How to Check and Remediate Windows Device Compliance with the Company Portal App

Can't access your Stanford Microsoft 365 email or other Microsoft apps on your Windows device? It may be because your device doesn't meet university compliance and security requirements.

Your device must be enrolled in Intune

This is required. To access Stanford Microsoft 365, including your Stanford email in Outlook, you must enroll your Windows device in Stanford's Intune device management system. Enrollment is the first step in ensuring your device is secure and compliant. 

Not enrolled yet? Follow the instructions in the Intune migration guide.

Company Portal app vs Company Portal website

When you enroll in Intune, the Company Portal app automatically installs on your device. You can use this app to check your compliance status and resolve any issues. While you can also check compliance using the Company Portal website, we recommend using the app. 

Use the app (recommended)

• The Company Portal app is device-specific and better for troubleshooting issues on your device.
• When you open the app and click Check access, it forces your device to sync and can actively solve compliance issues.

Use the website 

• The Company Portal website is accessible from anywhere, but only shows your device's last reported status.
• Use the Company Portal website when you cannot physically access your device. 

Check your Windows device compliance status using the app

Open the Company Portal application and follow these steps to check compliance.

1. On the home page under Your devices, select the device with the THIS DEVICE tag.
   

2. Review any compliance issues that are listed. Follow instructions for resolution.

   

Review university compliance requirements

The Company Portal app checks your device against these criteria used to measure compliance:

• Operating system (OS) version: Your device must run an updated OS version as defined by the Service and Software Sunset Schedule.
• Device encryption: Your Windows device must be encrypted with BitLocker.
• Stanford Device Registration: You must have run the Stanford Device Registration (SDR) app on your device at least once. See the SDR for Windows User Guide for details.
• Last report time: Your device must check in regularly with Stanford management systems to ensure the security controls are up-to-date.

Fix specific compliance issues

Instructions will be provided within the Company Portal app to resolve each compliance issue. Below are important considerations and additional instructions for specific issues you may encounter.

BitLocker encryption issues

While the Company Portal includes instructions for issues related to BitLocker encryption, we highly recommend running the Stanford Device Registration (SDR) application to encrypt your device. For more information, see the SDR for Windows User Guide.

Important: After completing BitLocker encryption, you must restart your device for the compliance status to update.

Intune sync issues

If you see a syncing issue, it's most likely because your device has been offline for an extended period. Connecting to the internet should resolve the issue.  However, you can force a sync using these instructions from Microsoft: Sync enrolled device for Windows - Microsoft Intune.

If your device has been connected to the internet for longer than 24 hours and Company Portal displays a “Sync your device with Intune” message, please contact your local IT staff to investigate the issue.

Important considerations about timing

• Compliance status changes can take several hours to complete.
• Using the Check access button in the Company Portal application under the device page can expedite the process, but the time it takes for compliance status to update may still vary.

Need help?

If you encounter any issues during this process, please submit a Help request for assistance.