Frequently Asked Questions (FAQ)

Skip Menu

Program Overview

When does this take effect?

Now – Intune has been undergoing extensive configuration development and testing to ensure that the controls are effective and minimally invasive.  Pilot group testing has been completed and practices for ongoing controls development have been generated and approved by UTMB leadership.
What is Intune?

Intune is a component of UTMB’s Microsoft licensed management and security tools.  Intune adds a small application to enrolled systems to allow it to respond to configuration checks (and eventually to request applications from the UTMB Company Portal).
Controls and Policy

These controls have been part of UTMB policy.  UTMB Security Practice Standards 1.4 Portable Computing (created Jan. 1, 2008) and 5.1 Platform & Application Hardening (created Sept. 3, 2002) require computers (UTMB and personally owned) to be securely configured to access UTMB networks and data.  The updated BYOD process just confirms secure configuration prior to allowing access to UTMB resources.

Note:: If the FAQ does not address your questions about this change, please email the UTMB Office of Information Security at security@utmb.edu or call (409) 772-3838.

Search the National Vulnerability Database

Quick Links

FAQ

Can this change affect my Contacts even if I don't enroll in Intune?

Yes, anyone currently using their personal mobile device to access UTMB Exchange Email may need to save their contacts depending on their device settings. (Important: This is true for all users, not just those who will enroll in Intune.) For more information, see the Android instructions and iOS instructions pages for details related to your specific device.
What if I need help enrolling my device in Intune?

If you need assistance enrolling your device in Intune, please contact the UTMB Service Desk at (409) 772-5200. If possible, call from a landline or a different cellphone.
Where can we learn more about Intune?

If you have additional questions regarding Intune or the changes to UTMB’s BYOD practices, email the Office of Information Security at security@utmb.edu or call and leave a voicemail at (409) 772-3838.

You can also check out Microsoft’s Intune knowledgebase page, What info can your organization see when you enroll your device?
Are students required to enroll in Intune?

Personal device enrollment only applies to UTMB employees. Students, including those who are also employed by UTMB, are currently not required to enroll.
Can “jailbroken” or “rooted” devices enroll in Intune and be confirmed as compliant for accessing UTMB networks, resources and data?

“Jailbroken” or “rooted” devices can enroll in Intune, however they are not compliant, and will not be able to access UTMB networks, resources, and data.
Are there "productivity" options for users or personal devices that are not enrolled in Intune?

Yes.  Devices not enrolled in Intune (or determined to not be security controls compliant by Intune) will still have access to the Citrix virtual desktop (Storefront) environment.  Please note:  Access to UTMB email via Outlook, webmail, POP/SMTP will be restricted to Intune enrolled/confirmed compliant devices.
Is Intune required for Duo multifactor authentication for remote work/access?

No, Duo MFA device registration (to receive Duo push, passcode or phone call notifications for remote access via VPN/Citrix/etc.) is a completely separate process and does not require Intune enrollment.

Please note: iOS and Android devices used to access UTMB resources via VPN/remote access, will need to be enrolled in Intune to confirm compliance.
Does Intune track my location or activity?

No, location services, call logs, etc. are maintained as personal settings or are controlled via personal applications.  Intune does not have access to personal device settings or personal app settings.
Does Intune have access to my personal files?

No, Intune will only monitor for compliant configuration settings and allow access to UTMB resources, as appropriate.  No access to personal data/files is established and only limited device information (Model, OS version, etc.) is collected and maintained by Intune.
What classes of mobile devices are included?

In this phase of the roll-out, only iOS-based and Android devices (tablets, smartphones, etc.) are included, however additional development and configurations are progressing to include Windows-based laptops and other device classes. This does not apply to UTMB Owned devices as they are configured in Intune differently.
Can Intune WIPE (erase data and/or reset configuration) or PUSH apps/software/configuration changes to my personal device?

No, the Personal Device profile used by Intune does not allow wiping or “factory settings reset” on personal devices.  If/when changes to device setting are required to establish or maintain access to UTMB resources or updates to apps loaded from the UTMB Store are required, enrolled devices/users will receive notices and guidance to make the changes, however the device/user MUST INITIATE the change/update.