%3CLINGO-SUB%20id%3D%22lingo-sub-293624%22%20slang%3D%22en-US%22%3ESupport%20Tip%3A%20Reduce%20your%20helpdesk%20costs%20for%20device%20password%20reset%20with%20Intune%20Company%20Portal%20Website%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-293624%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EWant%20to%20reduce%20support%20tickets%3F%20We%20recently%20heard%20from%20a%20couple%20of%20customers%20that%20they%20weren%E2%80%99t%20aware%20you%20can%20have%20your%20end%20users%20reset%20their%20own%20enrolled%20device%20passwords%20through%20the%20Intune%20Company%20Portal%20Website%20at%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fportal.manage.microsoft.com%252F%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C4fe0db82a6b84e1ebeca08d65605fb01%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636790981026191888%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3D2G6bld4fd%252Ftq422VKTgTpEj73uA81bxt33TWPkRuCss%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.manage.microsoft.com%2F%3C%2FA%3E%20or%20through%20the%20Company%20Portal%20app.%20In%20this%20post%2C%20we%20walk%20through%20a%20few%20more%20details.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThe%20Intune%20Company%20Portal%20Website%20allows%20an%20end%20user%2C%20after%20authenticating%2C%20to%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSPAN%3ERemotely%20lock%20their%20devices%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3ERename%20their%20device%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3ERemove%20their%20device%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3EReset%20their%20device%20password%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3EReset%20and%20erase%20their%20device%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EEnd%20users%20can%20take%20these%20actions%20on%20personally-owned%20MDM-enrolled%20devices.%20When%20an%20end-user%20logs%20in%20with%20their%20corporate%20credentials%20(if%20needed)%20at%20%3CA%20href%3D%22https%3A%2F%2Fna01.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fportal.manage.microsoft.com%252F%26amp%3Bdata%3D04%257C01%257Ccacamp%2540microsoft.com%257C4fe0db82a6b84e1ebeca08d65605fb01%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C636790981026191888%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C-1%26amp%3Bsdata%3D2G6bld4fd%252Ftq422VKTgTpEj73uA81bxt33TWPkRuCss%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.manage.microsoft.com%2F%3C%2FA%3E%20they%20will%20see%20these%20options%20as%20shown%20in%20the%20screenshot%20below%2C%20including%20the%20reset%20device%20passcode%20option.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F61127iC74413AF3CFF499B%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22ApusAndroidDevice.PNG%22%20title%3D%22ApusAndroidDevice.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThis%20is%20a%20useful%20feature%20if%20your%20end%20user%20forgets%20their%20enrolled%20device%20password%2C%20or%20if%20they%20lose%20a%20device%20and%20want%20to%20reset%20it.%20A%20few%20additional%20notes%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSPAN%3EYou%20can%E2%80%99t%20use%20this%20approach%20to%20reset%20a%20password%20if%20you%20use%20MFA%20requiring%20the%26nbsp%3BMicrosoft%20Authenticator%20app%20on%20the%20device%20that%E2%80%99s%20locked.%20%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3EFor%20iOS%20if%20you%20use%20DEP%20or%20have%20a%20supervised%20device%2C%20then%20just%20an%20IT%20Admin%20or%20helpdesk%20with%20the%20proper%20authorization%20can%20reset%20passwords%20for%20these%20specific%20types%20of%20devices%20that%20are%20enrolled.%20%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%3EEach%20platform%20(iOS%2C%20Android%2C%20Windows)%20has%20different%20terms%20of%20use%20and%20legal%20language%20that%20you%20can%20customize%20to%20a%20certain%20extent%20based%20on%20the%20platform%2C%20which%20is%20helpful%20particularly%20for%20reset%2Fetc.%20You%20can%20read%20more%20about%20that%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fterms-and-conditions-create%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune%2Fterms-and-conditions-create%3C%2FA%3E.%20%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EBe%20sure%20to%20share%20this%20with%20your%20helpdesk!%20There%E2%80%99s%20documentation%20on%20this%20feature%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fintune-user-help%2Fusing-the-intune-company-portal-website%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fintune-user-help%2Fusing-the-intune-company-portal-website%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3EUpdates%3CBR%20%2F%3E%3C%2FEM%3E12%2F3%2F18%20-%20Updated%20with%20the%20right%20service%20name%20for%20Microsoft%20Authenticator%20(we'd%20called%20it%20Azure%20Authentication%20app).%3CEM%3E%3CBR%20%2F%3E%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-293624%22%20slang%3D%22en-US%22%3E%3CP%3EReduce%20your%20helpdesk%20costs%20by%20having%20your%20end%20users%20reset%20their%20own%20device%20pin%2Fpassword%20through%20the%20Intune%20Company%20Portal%20Website%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-293624%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMDM%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESupport%20Tip%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376500%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Reduce%20your%20helpdesk%20costs%20for%20device%20password%20reset%20with%20Intune%20Company%20Portal%20Web%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376500%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288449%22%20target%3D%22_blank%22%3E%40WietseD%3C%2FA%3E%20we%20call%20out%20in%20the%20article%20that%20%22%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20font-family%3A%20'SegoeUI'%2C'Lato'%2C'Helvetica%20Neue'%2CHelvetica%2CArial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3EEnd%20users%20can%20take%20these%20actions%20on%20personally-owned%20MDM-enrolled%20devices.%22%20If%20you%20are%20using%20corporate%20owned%20devices%20such%20as%20iOS%20DEP%20or%20have%20a%20supervised%20device%2C%20then%20this%20won't%20work.%20Hope%20this%20helps!%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369986%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Reduce%20your%20helpdesk%20costs%20for%20device%20password%20reset%20with%20Intune%20Company%20Portal%20Web%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369986%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20someone%20explain%20to%20me%20why%20on%20earth%20a%20user%20should%20be%20able%20to%20delete%20their%20company%20owned%20device%3F%3C%2FP%3E%3CP%3EThis%20makes%20companies%20lose%20track%20of%20there%20devices%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300459%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Reduce%20your%20helpdesk%20costs%20for%20device%20password%20reset%20with%20Intune%20Company%20Portal%20Web%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300459%22%20slang%3D%22en-US%22%3E%3CP%3ERamesh%20-%20found%20a%20good%20dialog%20here%20that%20explains%20what's%20going%20on%3A%26nbsp%3B%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F638a2c21-6e48-4f85-8efe-33801b54ef5f%2Fpasscode-reset-greyed-out%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F638a2c21-6e48-4f85-8efe-33801b54ef5f%2Fpasscode-reset-greyed-out%3C%2FA%3E%3C%2FFONT%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-299098%22%20slang%3D%22en-US%22%3ERe%3A%20Support%20Tip%3A%20Reduce%20your%20helpdesk%20costs%20for%20device%20password%20reset%20with%20Intune%20Company%20Portal%20Web%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-299098%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGood%20feature%20in%20terms%20of%20End%20user%20self%20service%20password%20reset.%20But%20the%20challenge%20is%20%2C%20Reset%20password%20option%20is%20grayed%20out%20for%20Android%207.0%20%26amp%3B%20above%20OS.%20Is%20there%20any%20configuration%20setting%20that%20needs%20to%20be%20relaxed%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E

Want to reduce support tickets? We recently heard from a couple of customers that they weren’t aware you can have your end users reset their own enrolled device passwords through the Intune Company Portal Website at https://portal.manage.microsoft.com/ or through the Company Portal app. In this post, we walk through a few more details.

 

The Intune Company Portal Website allows an end user, after authenticating, to:

  • Remotely lock their devices
  • Rename their device
  • Remove their device
  • Reset their device password
  • Reset and erase their device

 

End users can take these actions on personally-owned MDM-enrolled devices. When an end-user logs in with their corporate credentials (if needed) at https://portal.manage.microsoft.com/ they will see these options as shown in the screenshot below, including the reset device passcode option.

 

ApusAndroidDevice.PNG

 

This is a useful feature if your end user forgets their enrolled device password, or if they lose a device and want to reset it. A few additional notes:

  • You can’t use this approach to reset a password if you use MFA requiring the Microsoft Authenticator app on the device that’s locked.
  • For iOS if you use DEP or have a supervised device, then just an IT Admin or helpdesk with the proper authorization can reset passwords for these specific types of devices that are enrolled.
  • Each platform (iOS, Android, Windows) has different terms of use and legal language that you can customize to a certain extent based on the platform, which is helpful particularly for reset/etc. You can read more about that here: https://docs.microsoft.com/intune/terms-and-conditions-create.

 

Be sure to share this with your helpdesk! There’s documentation on this feature here: https://docs.microsoft.com/intune-user-help/using-the-intune-company-portal-website

 

Updates
12/3/18 - Updated with the right service name for Microsoft Authenticator (we'd called it Azure Authentication app).

 

4 Comments
Occasional Visitor

Hello,

 

Good feature in terms of End user self service password reset. But the challenge is , Reset password option is grayed out for Android 7.0 & above OS. Is there any configuration setting that needs to be relaxed ?

Ramesh - found a good dialog here that explains what's going on: https://social.technet.microsoft.com/Forums/en-US/638a2c21-6e48-4f85-8efe-33801b54ef5f/passcode-rese... 

Senior Member

Hello, 

 

Can someone explain to me why on earth a user should be able to delete their company owned device?

This makes companies lose track of there devices?

 

Thank you 

@WietseD we call out in the article that "End users can take these actions on personally-owned MDM-enrolled devices." If you are using corporate owned devices such as iOS DEP or have a supervised device, then this won't work. Hope this helps!