For most jobs, having work email on your phone is now expected. Setup is straightforward if you follow the standard path.

1. Mobile device management (MDM)

Many companies require enrolling your device in MDM:

  • Intune (Microsoft, integrated with M365)
  • Workspace ONE (VMware)
  • Jamf (Apple-focused)
  • Cisco Meraki (mixed)

MDM lets the company:

  • Push apps to your device
  • Set policies (PIN required, encryption)
  • Wipe corporate data if needed
  • Track lost devices

The trade-off is some company control of your device.

2. Intune enrollment (most common)

On iOS:

  1. Settings → General → VPN & Device Management
  2. Enroll via the company's Intune profile
  3. Sign in with work account
  4. Approve push notifications

On Android:

  1. Download Intune Company Portal from Play Store
  2. Sign in with work account
  3. Enroll device

3. Email setup

After enrollment (or instead of, depending on org):

  • Install Outlook mobile from App Store / Play Store
  • Sign in with work account
  • Outlook handles everything (email, calendar, contacts)

Don't use your phone's built-in mail app for corporate email — it lacks security features.

4. Teams mobile

  • Install Microsoft Teams from App Store / Play Store
  • Sign in with work account
  • All chats and channels available

5. OneDrive mobile

  • Install Microsoft OneDrive
  • Sign in
  • Browse work files

6. Conditional access

Your work may have rules:

  • Mobile must be enrolled in MDM
  • Mobile must have screen lock
  • Mobile must be on supported OS version

If you can't access work apps from your phone, conditional access is often the reason.

7. BYOD vs. corporate phone

If the phone is yours (BYOD):

  • Some apps require enrollment first
  • Personal data is kept separate
  • Selective wipe can be done if you leave (removes work data only)

If the phone is company-issued:

  • Same setup typically
  • Full wipe possible
  • Subject to company use policy

8. Account separation

Your personal email and work email should stay separate:

  • Different apps for each
  • Different sign-ins
  • Don't mix personal and work in the same Outlook profile

9. Lock screen and PIN

Required by most corporate policies:

  • Phone must have screen lock
  • PIN, password, fingerprint, or face
  • Required after enrollment

Set up before enrolling to avoid being locked out.

10. Lost or stolen phone

If your phone is lost:

  • Wipe via Find My iPhone or Android Device Manager
  • Remote wipe via Intune Company Portal
  • Report to IT immediately

Most damage is from delayed reporting. Quick action limits exposure.

When to ticket

Raise a ticket if:

  • Enrollment fails
  • Specific corporate apps don't sign in
  • You need a corporate-issued phone
  • Your phone needs to be unenrolled (you're leaving or switching devices)

Include the phone model, OS version, and what's failing.