Windows Enrollment Guide

This guide explains how to enroll your Windows device into semi-protected mode.

Supported versions: Windows 10 and Windows 11 (latest updates recommended).

If you are not sure how to proceed, or something does not work as expected, please contact Helpdesk. Our team can guide you through the process.

1. Prepare Your Device

• Complete any initial Windows setup if this is new device.
• Ensure you are connected to unmanaged VPN before starting. This connection is required so that Microsoft Intune can communicate with our company systems during enrollment. Follow this guide to setup FortiClient VPN on Windows device.
• Make sure you have local administrator rights on your computer.

2. Start Enrollment

1. Open Windows Settings.
2. Go to Accounts.
3. Select Access work or school.
4. Click Enroll only in device management.

3. Sign In

1. When prompted, enter 4finance email address.
2. Enter your account password.
3. If required, confirm login with MFA.
4. Windows will now connect to our Microsoft Intune service and register your device.

This process may take a few minutes.

4. Confirm Enrollment

1. Once registration completes, you’ll see a confirmation message – click Got it.
2. A new entry for your company account will appear under Access work or school in Settings.
3. Windows will now begin applying compliance policies.

5. Compliance Requirements

After enrollment, Intune will check that your device meets security requirements:

• Disk Encryption (BitLocker):
  • If BitLocker is not enabled, you will be prompted to turn it on.
  • We recommend enabling BitLocker during setup for the most reliable configuration.
• Password Policy:
  • You must have a strong password on your Windows account.
  • If your password does not meet company policy, you will be required to change it.
• Microsoft Defender Antivirus:
  • Defender must be enabled and active.
  • If disabled, you will be prompted to turn it back on.

Any missing requirements will trigger a notification banner guiding you to fix them.

6. Troubleshooting

• If enrollment fails, restart your computer and try again.
• If compliance issues remain after fixing them, wait a few minutes and click Sync under Access work or school to refresh.
• If issues persist, take a screenshot and contact Helpdesk.

7. Done

Enrollment complete. Your Windows device is now secured in semi-protected mode.

Support

If you experience issues during or after enrollment:

• Contact Helpdesk for assistance

‍

‍

‍

‍

‍

‍

‍