How to Recover an Android Phone Locked by Intune Company Portal
Question details
Users are locked out of their personal Android phones after Intune Company Portal applies an organization-managed password policy, which often persists even after app removal.

- Product
- Microsoft Intune Company Portal
- Device & OS
- Android
- Scenario
- Attempting to unlock an Android phone that has been locked by a new or conflicting security policy enforced by Intune.
- Observed behavior
- The phone rejects both old PINs and newly created passwords, locking the user out completely and often demanding a factory reset.
Ensure you have the contact information for your organization's IT support team and verify your device's manufacturer account credentials before proceeding.
Contact Your IT Administrator to Reset the Device Policy
The safest and most reliable way to regain access without losing data is by having your organization's IT department remove or reset the Intune device policy remotely.
When Intune enrolls your device, it enforces organizational security policies that can override personal passwords. Removing the Company Portal app locally does not always revoke the system-level lock.
Contact your company's IT helpdesk or system administrator using a secondary device or computer.
Ask the administrator to formally confirm the unenrollment of your device from the Microsoft Intune endpoint management console.
Request the administrator to use the 'Remove passcode' or remote reset device policy feature to clear the lock screen requirement.

Use Manufacturer-Specific Device Recovery Services
If IT cannot remove the lock, use your phone manufacturer's official recovery features to remotely unlock the device without losing data.
Perform a Factory Data Reset via Recovery Mode
If no approved recovery method is available, you will need to perform a factory reset, which will erase all local device data.
Stay Productive on Your Mobile Device with WPS Office
While dealing with IT policies and Microsoft Intune lockouts, you can maintain your productivity on a secondary or recovered device by using WPS Office. It provides a highly compatible alternative to Microsoft Office apps without the heavy enterprise lock-ins.
- 1. Download from Play Store: Search for WPS Office in the Google Play Store and install the free application on your recovered or secondary Android device.
- 2. Open Without Strict MDM: Launch WPS Office and easily manage your local or cloud documents without needing to enroll your personal device in Intune.
- 3. Seamlessly Edit Office Files: Tap on any .docx, .xlsx, or .pptx file to start editing immediately with full formatting support.

Frequently Asked Questions
Why does my Android phone reject my old PIN after installing Intune?
Intune applies your organization's security policies, which often require a more complex password (such as alphanumeric characters). This policy overrides your old, simpler PIN.
Will uninstalling the Company Portal app unlock my phone?
Not always. Once a security policy is applied at the system level, simply removing the app does not automatically revoke the lock. Your IT administrator must usually confirm the unenrollment from the backend.
Is there any way to back up my locked Android phone before a factory reset?
Generally, no. Modern Android encryption prevents access to local data without the correct passcode. You can only recover data that was previously synced to a cloud service like Google Drive.
Why did my setup process crash when changing the work-profile password?
This can happen due to conflicts between the device manufacturer's customized Android operating system (like Vivo's Funtouch OS) and Intune's strict password enforcement policies.




