Fix Phone Rejects Correct PIN After Intune Company Portal Installation
Question details
A personal mobile device becomes locked and rejects the previously correct PIN after setting up a work profile via Microsoft Intune.
- Product
- Microsoft Intune Company Portal
- Device & OS
- not provided
- Scenario
- A user installs the Intune Company Portal or a work profile on a personal device to access organizational resources.
- Observed behavior
- The phone locks out the user by rejecting the correct PIN, and the organization's IT department is unable to locate a remote reset option.
Verify whether the PIN prompt is originating from the main device lock screen, an email application like Outlook, or a Microsoft account authentication screen.
Identify the PIN Prompt Source and Contact Support
Determine exactly which app or system is requesting the PIN and reach out to the appropriate support channels to regain access.
Company policies pushed through Intune can enforce strict passcode rules (e.g., alphanumeric or specific length). If your old PIN doesn't meet these new requirements, the device may reject it or lock you out.
Carefully observe the lock screen design to determine if the lock is enforced by the device OS itself, the Outlook app, or a Microsoft Account authentication prompt.
Ask your organization's IT admin to review the Company Portal and work-profile configuration policies to see what specific password complexity was enforced on your device.
Since this is a personal device (BYOD) and IT cannot perform a remote PIN reset, reach out to your phone manufacturer or mobile provider for assistance with bypassing or resetting a system-level device lock.
Remove the Work Profile (If Accessible)
If you briefly gain access to the phone, removing the work profile may eliminate the organization's strict PIN requirements.
Use WPS Office for a Hassle-Free Mobile Work Experience
If you want to avoid strict device management policies and complex work profile configurations on your personal phone, consider using WPS Office. It is a highly compatible, lightweight, and user-friendly alternative for accessing and editing work documents safely without locking down your device.
- 1. Download the app: Visit your device's app store (Google Play Store or Apple App Store) and search for WPS Office.
- 2. Install and launch: Install the application and open it on your personal device without needing administrator profiles.
- 3. Start editing: Sign in to your preferred cloud storage and start editing Microsoft Office formats seamlessly.
Frequently Asked Questions
Why did the Company Portal change my phone's PIN requirements?
Organizations often enforce stricter security policies (such as requiring a 6-digit PIN or alphanumeric password) via Intune. If your existing personal PIN doesn't meet these requirements, the work profile may lock the device or reject the old PIN.
Can my company's IT admin reset my personal phone's PIN?
Usually, for personal devices (BYOD), IT admins do not have the authorization or technical ability to clear a system-level device passcode through Intune. They can only manage the work profile data.
What happens if I uninstall the Company Portal while locked out?
If you are completely locked out of the device, you cannot navigate to the settings to uninstall the app. You will need to contact the device manufacturer for recovery options or perform a hard factory reset as a last resort.
How do I know if the PIN prompt is for my device or for a specific Microsoft app?
Look closely at the lock screen interface. If the PIN prompt appears only when you try to open an app like Outlook or Teams, it is an app-level PIN. If it appears immediately upon waking the device or turning the screen on, it is a system-level device PIN enforced by the work profile.
