MDM Setup

The school uses Microsoft InTune for device management (Mobile Device Management). Here you will find instructions for each platform — explained step by step.

Which management level do I need?

Intune Company Portal

The Intune Company Portal is Microsoft's central app for device management. It is the entry point for registering your device and obtaining school apps on iOS and Windows.

What can the app do?

• Device registration — register your device with the school IT (Partial or Full Management)
• Install school apps — required apps (WebUntis, Teams) are deployed automatically; additional apps can be installed from the app catalogue
• Check compliance status — shows whether your device meets school policies (e.g. passcode set, OS up to date)
• Rename device — optionally give your device a recognisable name
• Unregister device — the registration can be reversed at any time

ℹ️How to find the app

Search the App Store for "Intune" or "Company Portal". Look for the app icon shown on the left. Publisher: Microsoft Corporation.

Open directly in the App Store

iOS (iPhone / iPad)

Option 1: Apps Only

Install the required apps (WebUntis, Teams, etc.) directly from the App Store. No registration needed.

Option 2: Partial Management (recommended)

Option 3: Full Management

Configured automatically for devices from the device initiative. The iPad is enrolled via Apple DEP (Device Enrollment Program) on first boot — no manual setup needed.

Common iOS Issues

• "Registration failed" — Make sure you are connected to the school Wi-Fi and the password is correct. After 10 failed attempts the account is locked for 10 minutes.
• Profile installation aborts — Go to Settings → General → VPN & Device Management and check if a "Downloaded Profile" is waiting. If so, tap it and install manually.
• "Device not compliant" — Most common cause: no device passcode set. Go to Settings → Face ID & Passcode (or Touch ID & Passcode) and set up a passcode.
• Apps are not installing — Open the Company Portal → "Devices" tab → tap your device → "Check compliance". If all green: wait 5–10 minutes, apps are downloading in the background.
• Company Portal won't open — Uninstall and reinstall from the App Store. Your registration is preserved.

Windows 10 / 11

For Windows there are three paths — from "don't register at all" to "fully managed". For private laptops we recommend connecting via your school account (Partial Management).

Option 1: Use browser only (no registration)

You can use all school services (Office 365, WebUntis, edu.Suite) directly in the browser without registering your device. Just sign in at portal.office.com with your school account. This is the simplest and most privacy-friendly option.

Option 2: Connect with your school account (Partial Management — recommended)

This registers your private device with Microsoft Entra ID (formerly Azure AD) — it is not fully managed. You remain the owner and administrator of the device; the school only gets limited access (deploying school apps, compliance checks). Personal files stay private.

Option 3: Full management (school devices)

Windows devices issued by the school are already fully managed via Windows Autopilot (like the iPads). No manual setup is needed — the device enrols automatically on first start.

Common Windows issues

• "Something went wrong" when connecting — Connected to the school Wi-Fi/internet? Are the PC's date and time correct? Then try again.
• Login fails — Always use the full email lastname.firstname@bgzwn.at as the username. After 10 failed attempts the account is locked for 10 minutes.
• School apps missing — after connecting, wait 10–15 minutes; apps install in the background. Optionally install the Company Portal from the Microsoft Store to get apps manually.
• Accidentally "joined" (full join)? Disconnect (see below) and set it up again via "Connect".

Remove the registration

Settings → Accounts → Access work or school → click the school account → "Disconnect" → confirm. Then restart the device.

General Notes

• With Partial Management, IT has no access to personal files, photos or messages
• Required apps like WebUntis and Teams are provided automatically after registration
• You can undo the registration at any time in device settings
• For problems: admin@bgzwn.at

Legal Sources

• § SchUG, BGBl. Nr. 472/1986 i.d.g.F. — § 14 Abs. 8a (use of digital devices in the classroom)
• § IKT-Schulverordnung, BGBl. II Nr. 382/2021 — § 10 (device management and configuration), § 5 (authentication and secure access)