How to configure Microsoft Intune Enrollment Notifications

Microsoft has introduced a series of updates and features to enhance the functionality and security of Microsoft Intune, and Enrollment Notifications are one such feature.

Released as an integral part of the Core Microsoft Intune, Enrollment Notifications provide a seamless way to inform users about newly enrolled devices.

Despite its effectiveness, this feature is often left unnoticed. I highly recommend configuring Microsoft Intune Enrollment Notifications to ensure your organization stays informed and secure.

Enrollment notifications can be used for Windows, Android, iOS/iPadOS, and macOS devices. These notifications can be sent via email or push notifications to the assigned users whenever a new device is enrolled using user-driven enrollment methods.

Benefits of Enabling Enrollment Notifications

Enabling Enrollment Notifications within Microsoft Intune offers a multitude of advantages that cater to various aspects of enterprise device management. These notifications serve as a critical component in maintaining a secure and well-informed organizational environment.

• Enhanced Communication: Enrollment notifications keep employees informed about the addition of new devices, ensuring that they are aware of any changes in their device ecosystem.
• Improved Security: By notifying users of new enrollments, the feature helps to ensure that all devices accessing corporate resources are known and verified, thus bolstering security.

By leveraging Enrollment Notifications, organizations can ensure that stakeholders are promptly updated about any new device enrollments, thereby enhancing the overall end user experience.

Prerequisites

Before diving into the setup of enrollment notifications, it is important to configure the branding and customization  settings within your tenant. These settings are accessed via Tenant administration > Customization.

By configuring these customizations prior to configuring Enrollment Notifications, you will ensure a consistent look and feel across all your Enrollment Notifications.

Create an Enrollment Notification

Before creating Microsoft Intune Enrollment Notifications, I highly recommend you define which criteria must be met to ensure the notifications are effective and cohesive with your organization’s standards. These criteria should include:

• Confirm that the general layout of the notifications is user-friendly and aligns with your organization’s communication policies.
• Verify that the content included in the notifications is accurate, relevant, and has been approved by the necessary stakeholders.
• Ensure the design of the notifications is consistent with your organization’s branding guidelines.
• Ensure that any internal links included in the notifications are accessible and direct users to the correct resources or support pages.

Once these qualifications are satisfied, you can proceed to start creating your Enrollment Notifications, communicating precise information to your users.

Designing your Enrollment Notification e-mail message

I have spent hours thoroughly writing and designing my personalized enrollment notification, ensuring it captures the necessary details and communicates clearly. My personalized enrollment notification is intended to inform users about the addition of new devices to their account, and to guide them through the necessary steps to review and confirm compliance with Security Policies.

You should build every element, from the layout to the content, carefully aiming to provide a seamless user experience that is both informative and engaging.

When you successfully have designed your Enrollment Notification, the next step is to convert it into HTML for use when configuring the Enrollment Notification in Microsoft Intune.

This involves formatting your notification message, including messages body, links etc. in HTML to ensure it displays correctly across all devices and platforms.

<p>
    A new device has been added to your account. To ensure the security of your data, we request that you review this enrolment at your earliest convenience.<br>
    <br>
    <b>Review new device enrollment</b>
</p>
<p>
    If you recognize the device, no action is needed.
</p>
<p>
    If you do not recognize this device, report it immediately.
</p>
<ul>
    <li>
        Go to <a href="https://portal.manage.microsoft.com/devices/">Microsoft Company Portal</a> and attempt to reset the device.
    </li>
    <li>
        For technical assistance to reset your device, see <a href="https://learn.microsoft.com/mem/intune/user-help/reset-device-company-portal-website/">Reset device from Microsoft Intune Company Portal</a> to remotely reset a used, lost, or stolen device to factory default settings.
    </li>
</ul>
<p>
    Please review the following steps to ensure that your device enrollment is complete and to maintain compliance with our security policies.
</p>
<ol>
    <li>
        Go to <a href="https://portal.manage.microsoft.com/devices/">Microsoft Company Portal</a> or select View Details below to view the enrolled device.
    </li>
    <li>
        Check that your device complies with the organization's security settings. This includes enabling device encryption, setting strong passwords, and installing the latest security updates.
    </li>
    <li>
        Ensure that all necessary applications have been installed and are functioning correctly.
    </li>
</ol>
<p>
    Your participation is much appreciated and is important for maintaining the security and efficiency of our systems.<br>
    <br>
    Best regards,<br>
    <br>
    [Your IT Department]<br>
    <br>
    <i>Please do not reply to this e-mail, it is sent from an unmonitored mailbox.</i>
</p>

Serializing your Enrollment Notification message

By serializing the HTML code for the Enrollment Notification message, you will ensure your notification message is formatted consistently and efficiently.

• Serialization helps maintain a clean and organized structure, avoiding unnecessary line breaks and extra spaces that can inadvertently increase character count. This is crucial in keeping your message within the character limit imposed by Microsoft Intune.
• Serialized HTML allows for precise control over the appearance of your notification across various devices and platforms. You can define the exact placement and styling of elements such as titles, messages, and company branding, ensuring a polished and professional look.

In summary, serializing your HTML code effectively manages the character count, maintains consistent formatting, and enhances the overall presentation and functionality of your enrollment notifications.

The result:

<p>A new device has been added to your account. To ensure the security of your data, we request that you review this enrolment at your earliest convenience.<br><br><b>Review new device enrollment</b></p><p>If you recognize the device, no action is needed.</p><p>If you do not recognize this device, report it immediately.</p><ul><li>Go to <a href="https://portal.manage.microsoft.com/devices/">Microsoft Company Portal</a> and attempt to reset the device.</li><li>For technical assistance to reset your device, see <a href="https://learn.microsoft.com/mem/intune/user-help/reset-device-company-portal-website/">Reset device from Microsoft Intune Company Portal</a> to remotely reset a used, lost, or stolen device to factory default settings.</li></ul><p>Please review the following steps to ensure that your device enrollment is complete and to maintain compliance with our security policies.</p><ol><li>Go to <a href="https://portal.manage.microsoft.com/devices/">Microsoft Company Portal</a> or select View Details below to view the enrolled device.</li><li>Check that your device complies with the organization's security settings. This includes enabling device encryption, setting strong passwords, and installing the latest security updates.</li><li>Ensure that all necessary applications have been installed and are functioning correctly.</li></ol><p>Your participation is much appreciated and is important for maintaining the security and efficiency of our systems.<br><br>Best regards,<br><br>[Your IT Department]<br><br><i>Please do not reply to this e-mail, it is sent from an unmonitored mailbox.</i></p>

Configuring Enrollment Notifications

When looking at Enrollment Notifications, it all starts with the configuration. The configuration is done per platform, but the configuration steps are identical for every platform. Only the starting point differs by platform.

Configuring Enrollment Notifications in Microsoft Intune to notify users of newly enrolled devices. Enrollment notifications are sent to assigned users via your selected method of push notification or/and e-mail.

Reference: Create an enrollment notification 

The following guide will focus on how to configure Enrollment Notifications for Windows Enrollment.

1. Sign in to the Microsoft Intune admin center  as an Intune Administrator.

2. Go to Devices > Enrollment.

3. Select the Windows tab (default).

4. Choose Enrollment notifications.

5. Select Create notifications.

6. In Basics, configure the following settings:

   Name: Enter a descriptive name for the notification. Name your notifications so you can easily identify them later.

   Description: Enter a description for the notification. This setting is optional, but recommended.

7. Select Next.

8. In Notification settings, configure the notification messages.

   Send Email Notification: Flip the switch On to enable and create an email notification.

   Subject: Enter the subject of the enrollment notification.

   Raw HTML editor: Flip the switch On to enable HTML formatting.

   Message: Enter your message. The character limit is 2000.

   Show company logo: Flip the switch On to make your organization’s logo visible in the email header.

   Show device details: Device details are turned off by default.

   Show company name: I usally keep this settings off.

   Show contact information: I usally keep this settings off.

   Show Company portal website link: Flip the switch On to show a link to the Company Portal website.

   

9. Select Next.

10. Optionally, assign a scope tag.

11. In Assignments, select the users or groups receiving the notification, I often select All Users.

12. Select Next.

13. In Review + create, review the notification details, and then select Create.

Test and validate Enrollment Notification

There isn’t really an easy way to test and validate your newly created Enrollment Notification, but to enroll a device.

Windows Enrollment can be accomplished in several ways; I prefer to use Windows Autopilot  , Windows Autopilot device preparation  or User Enrollment (BYOD) using Company Portal sign-in  (Primarily for testing purposes or special scenarios and require Enrollment restrictions to allow this).

Any of the mentioned enrollment scenarios, will result in the user are receiving an Enrollment Notifications e-mail.

Going further…

When you are happy with your newly created Enrollment e-mail Notification, you should consider adding a Push Notification for Windows enrollment. Next, you should consider adding Enrollment Notifications for all required platforms.

Enrollment Push Notifications for Windows enrollment

Enrollment Push Notifications are not currently supported in the Company Portal for Windows and will not appear here. However, if users already have an enrolled mobile device, the user will receive a notification in the Company Portal mobile App when enrolling a new Windows device.

Microsoft Intune Enrollment Push Notification

Action Requested: Review new device enrollment

A new device has been added to your account. To ensure the security of your data, we request that you review this enrolment at your earliest convenience.

• If you recognize the device, no action is needed.
• If you do not recognize this device, report it immediately.

Please check the e-mail we just sent you for further information.

Your participation is much appreciated and is important for maintaining the security and efficiency of our systems.

Best regards,

[Your IT Department]

Enrollment Notifications for all required platforms

Ensuring your users are well-informed during the device enrollment process across all platforms is crucial. This not only helps in setting the right expectations but also in improving the overall user experience.

Adding Enrollment Notifications for Android, iOS, and macOS is straight forward, just follow the principles above.

By adding Enrollment Notifications for all the required platforms, you can achieve a consistent and seamless communication strategy.

Wrap-up

In summary, the addition of Enrollment Notifications is a pivotal step in enhancing user communication during the device enrollment process.

By including notifications for Windows, Android, iOS, and macOS, you can ensure a consistent and seamless user experience.

This effort reflects a commitment to keeping users well-informed and setting the right expectations, ultimately improving the overall effectiveness of your communication strategy.

Happy exploring.

–Jesper