How to Deploy and Customize the Company Portal for Windows with Intune

Intune does a lot without the user ever noticing: configuration policies, compliance checks, updates. So why put an app on every Windows PC? Because the Company Portal is the one place where users help themselves. They install the apps you make available, see whether their device is compliant (and why not), and find out how to reach your help desk. This guide deploys it to Windows devices and then makes it look like your company.

What users get in Company Portal

• Home with featured apps, and Apps with every app you assigned as Available, sorted into categories (for example one for HR).
• Downloads & updates, with what’s installing or already installed.
• Devices, where users see each device’s status and, if it isn’t compliant, what to fix. Check access syncs the device with Intune.
• Help & support, with your help desk details and a way to send logs.

Installing an app from Company Portal doesn’t need local admin rights when the app installs in system context. That makes it easier to take admin rights away from users.

1. Add Company Portal as a Microsoft Store app

1. Sign in to the Microsoft Intune admin center.
2. Go to Apps > All Apps > Create.
3. Under Store app, pick Microsoft Store app (new) and choose Select.
4. Select Search the Microsoft Store app (new), type Company Portal, select Company Portal, then Select.
5. Set Install behavior to System and select Next.

2. Assign it as required

1. Add scope tags if you use them and select Next.
2. Under Required, select Add group and pick the device group that should get it. In the video’s lab it went to all devices.
3. Review and select Create.

Users can also install Company Portal themselves from the Microsoft Store. Assigning it as required means nobody has to. For Windows Autopilot devices, Microsoft has separate guidance so the app installs before the user signs in.

The app’s Device install status in Intune shows when it has landed.

3. Customize it

Go to Tenant administration > Customization. Open the default policy and edit its Properties. You can also create up to 25 extra policies targeted at user groups (not device groups).

Branding

Setting	What it does
Organization name	Shown throughout Company Portal, up to 40 characters
Color / Theme color	One of five standard colors, or a custom hex value
Show in header	Logo and name, logo only, or name only
Logos	One for the theme color background, one for white or light backgrounds
Brand image	Background on the user’s profile page

Support information

Contact name, phone number, email address, website name and URL (for example your ServiceNow or ticket portal), and a short extra message. Users see these in Help & support, so when an app they need isn’t in the list, the way to ask for it is one click away.

Configuration

• Privacy statement URL: your company’s privacy statement.
• Device enrollment: whether and how users are prompted to enroll. It matters mostly for phones and tablets.
• App sources: show or hide Microsoft Entra Enterprise applications, Office Online applications and Configuration Manager applications next to your Intune apps.
• Hide Reset button on corporate Windows devices: removes the self-service reset from Company Portal. In the lab I hid it so a user can’t reset a company PC by accident. The Remove button is always hidden on corporate Windows devices. These two settings only exist in the default policy.

Save, and give the change a little time to reach the app and the Company Portal website.

Where Autopilot fits

With Windows Autopilot, Company Portal and your required apps are already on the PC when the user first signs in. Everything else they need is one click away in Company Portal.

Full details on every setting: Configure the Intune Company Portal apps on Microsoft Learn.