IT and Library Services

Intune managed laptop FAQ

Here we answer some of your frequently asked questions about setting up and using an Intune managed laptop.

This FAQ covers technical questions; please refer to the IT asset management project FAQ for non-technical questions.

Where do I go for support?

Support will be through the IT Service Desk as normal.

How do I login?

On first login* ensure you device is connected to the internet, eduroam on campus or another network while away from campus.  When logging into an Intune laptop you will need to login using your university account using username@gre.ac.uk

*After your initial login a local account will be created, and this will not require a network connection in future.

How do I know if my device is an Intune device?

There are several ways of telling if your device is an Intune device:

  • There should be a sticker on the underside of the laptop saying “INTUNE”
  • A piece of software called “Company Portal” will be installed on the device.
  • Your laptop name/hostname will start UOG-AP and this can be found within Company Portal or by opening the Command Prompt application and then typing hostname and hitting enter.

If you contact the IT Service Desk, they may ask you to confirm if your device is an Intune and request the hostname as this will help with a speedier resolution to any issues.

Are there user guides available to help me get started?

You can find support on setting up your laptop and connecting to a dock and additional display screens here: Using staff laptops - guides.

How long does it take to set up an Intune laptop?

It will take approximately half an hour to complete the initial setup (depending on your Wi-Fi speed) - please connect the device to a power supply before you start.

Will all of my software be available straight away?

You will be able to use Microsoft 365 as soon as setup is complete. Software Center will not be available right away, and you will not be able to install additional software until Software Center is available. This is expected behaviour. We recommend that you keep the laptop powered and switched on (locked if necessary) to enable background tasks to complete. This usually takes up to 48 hours but may take longer e.g. if the laptop is in sleep mode.

How do I install software?

As with our existing desktop PCs additional pre-packaged software can be downloaded and installed via Software Center. Search Software Center on your laptop to access this.

Not all of the software titles available on a campus desktop PC are licensed for installation via Software Center on a staff laptop. Our list of standard software available for Intune laptops is updated as additional software becomes available. If the software you need is not available, please follow the AMP process to request approval for set up and installation.

How do I set up the Mimecast add-in for Outlook?

  1. Install the Mimecast App from the Software Centre. To install correctly, you must have Outlook closed.
  2. You should now be signed into Mimecast via Outlook.
  3. Once installed, click on the “Mimecast” tab within Outlook, then select “Account Settings.”
  4. Once the Mimecast window opens up. Click on “Authenticate.”
  5. Click Next and then enter your username@gre.ac.uk and password as prompted. (You may need to make the window full screen or use the scroll option within the window at this point to show all the required information.)
  6. You will be prompted for your MFA (Multi-Factor Authentication) information at this stage.

Find out more about Mimecast for Outlook.

Why am I asked for MFA on login?

Intune Laptops will require MFA for login to the device and authentication to the VPN as well as the normal logins to systems such as Microsoft 365. You may get multiple MFA prompts on first login to your device or occasionally thereafter, it is important to remember that a different number is used for each prompt and these should appear in order via the authenticator app.

How to set up MFA

What is Always on VPN (Global Protect)?

Always On VPN (Global Protect) provides secure access to our services. The term "Always On" means that the device connects automatically on login and remains persistent.

Connection to the VPN allows access to our internal network securely. There is no need for manual intervention, other than the occasional MFA prompt on login. Only traffic to university secure services passes through the VPN. Other internet traffic, such as accessing websites or services outside of our network, will bypass the VPN connection.

If you have trouble connecting to the VPN, please ensure that your device has all the necessary Windows updates installed. Keep your operating system up to date to help address any known issues or security vulnerabilities. This will ensure a smooth and secure connection.

How do I print?

You can use WebPrint on campus to print to our MFDs, either via the web interface or by adding the queue manually. To set this up please follow the guide.

When working from home:

USB Printing

When connecting via USB to a printer, your laptop should pick up the printer and install any required print drivers automatically.

Wireless Printing

To connect to a wireless printer:

  1. In the search menu type "Add a printer or scanner" and click on that option when it appears.
  2. On the next screen click on the "Add device" button.
  3. Windows will search for devices. When you see the option that says "show Wi-Fi direct printers"; click on it.
  4. You will then see a list of wireless printers on your local network. Select your printer from the list to install it on your laptop.

Can I change my desktop wallpaper?

No. The wallpaper has been set to a standard background for the following reasons:

  • Improved security by eliminating the risk of embedded malware in the desktop background.
  • Standard desktop look for all staff.
  • All devices adhering to university brand guidelines.

Can I use Bluetooth/Wireless devices?

Yes, you will be able to connect Bluetooth and wireless devices as you would normally.

What browsers are installed?

Edge is our core browser and will be the only one installed on Intune devices. All our core systems and services will be tested to ensure they work on Edge. Please read our Web browser information for managed workstations.

Why is Chrome not installed?

Other browsers including Chrome are not available due to data protection and security concerns, and the challenges in ensuring they are regularly updated. If another browser is required, then please log an AMP request giving the reasons this is required. Each request will be looked at on a case-by-case basis. Please read our Web browser information for managed workstations.

Where are my bookmarks?

We are working to automatically save bookmarks in Edge to Microsoft 365 so they are available across all devices. You can import your bookmarks from other devices.

How can I set Google as my default search engine on Edge?

  1. Open Microsoft Edge.
  2. At the top right, click the icon with the three dots then select Settings.
  3. On the left, click Privacy, search, and services.
  4. Scroll down to "Services".
  5. Click Address bar and Search.
  6. In the "Search engine used in the address bar" drop-down, select Google.

How can I transfer my bookmarks from Chrome to Edge?

You can export your bookmarks as an .html file and then import the file to Edge.

  1. In Chrome, press Ctrl+Shift+O to open the Bookmarks Manager and then click the three dots on the upper right of the page > Export bookmarks. Save the file to your preferred location.
  2. In Edge, go to Settings > Profiles > Import browser data.
  3. Under 'Import from other browser' select 'Choose what to import'
  4. Change the dropdown under 'Import from' to 'Favorites or bookmarks HTML file'.
  5. Navigate to where you saved your bookmarks and select the file. This should then save your bookmarks into Edge.

How do I install a website as an app in Microsoft Edge?

  1. Open the Microsoft Edge browser on your Windows 11 computer.
  2. Browse to the website that you want to convert into an app on your system.
  3. Click on the three-dot button at the top right-hand side of the browser window. This will reveal a drop-down menu.
  4. In the drop-down menu, hover over the ‘Apps’ option to reveal a sub-menu.
  5. Click on the ‘Install this site as an app’ option from the sub-menu. Confirm the operation by clicking on the ‘Install’ button on the confirmation window.

You will see that the site has been turned into an application that you can use without a browser. You can navigate between different sections of the site as you would on the browser version. All the internal site elements will function as intended.

How do I add cookies and site permissions in Edge?

For some sites to work fully in Edge you will need to allow 3rd party cookies:

  1. In Edge, go to Settings.
  2. Click on Cookies & Site Permissions
  3. Select Manage and Delete cookies and site data
  4. Add a site under ALLOW (e.g. for CRM add [*.]crm4.dynamics.com and  [*.]clickdimensions.com )
  5. Ensure that you have ticked the Include 3rd party cookies box

Why can't I see some of my files?

Access to the U: and G: drives is not available from Intune laptops. In the majority of cases, you should store your documents on MS Teams (Departmental documents) or One Drive (Personal documents). A project is currently underway to transfer all remaining U: drive and G: drive data to MS Teams and OneDrive.

How do I access the U: or G: drive?

The U: and G: drives are due to be decommissioned in July 2024. If you need to access the U: or G: drive as an interim measure before the data is moved to OneDrive/Teams, you will need to login to the Staff Desktop service.  This is available by installing the VMware Horizon client from Software Center.

Information on using the university's Remote Desktop service is available here: Remote Desktop for staff.

In this section