Navigation auf uzh.ch
The management scenarios specified on this page are scheduled to be replaced by end of August 2021. Due to absences the activation has been postponed from July to August. For a reference of what to expect afterwards, please consider these pages:
Pilot: Use of Privately Owned Mobile Devices
Pilot: Use of UZH Owned Mobile Devices
If you would like to use Microsoft 365 (or components thereof, e.g. teams) on your mobile device, additional security requirements must be met for its use in compliance with data protection regulations. For example, every mobile device must be protected with a password or code so that the data is not freely accessible if the device is lost.
In order to make the configuration as user-friendly as possible and at the same time to ensure that all necessary settings are made, UZH uses the "Intune Enterprise Portal". This is a so-called Mobile Device Management System (MDM), i.e. software that checks and manages the security settings of mobile devices.
After installing the corporate portal app from the appropriate store and logging in with a Microsoft 365 UZH account, the security requirements are checked and a management profile is installed. In addition to the security settings, the profile also contains the account information and allows access to UZH data with the Office 365 applications (e.g. OneDrive, OneNote, Word, Excel, PowerPoint). If the profile is removed by the user or the UZH administrator, all Office 365 UZH data and account information is automatically deleted from the device. Direct access to the data stored on the device or the user's connection data is not possible.
If a device does not meet the security requirements, or if a user does not want to install MDM, Microsoft 365 UZH cannot be accessed through the Microsoft Apps. In this case, restricted functionality is available via the browser of the device (https://portal.office.com). However, this variant does not offer any offline options.
In general, the use of private devices is permitted with Microsoft 365 UZH. However, the Central IT reserves the right to block devices in case of misuse or for security reasons and to delete Microsoft 365 UZH data. Microsoft 365 UZH data is stored separately from the existing data on the devices in so-called accounts. This allows parallel operation of different Microsoft 365 accounts on a single device. However, multiple management profiles cannot be installed.
It is strongly recommended to make regular backups of the mobile devices. Device backups do not include Microsoft 365 UZH data, but they are backed up within Microsoft 365. Central IT does not offer support for the recovery of private data, please contact the respective manufacturer support.
Please do not use an UZH e-mail address for the registration of your store accounts, as you will not be able to access purchased content such as apps and music or your backups if you leave UZH.
Information about Intune Enterprise Portal (MDM): https://docs.microsoft.com/en-us/mem/intune/user-help/use-managed-devices-to-get-work-done
Self Service Portal to manage the personal devices: https://portal.manage.microsoft.com/devices