IMPORTANT NOTE
The Windows10/HoloLens2 Early Adopter Programme is not a production service. Please do not contact the NHSmail Live Services Team with any queries or issues related to using an Intune-enrolled device as they will be unable to assist you.
1. Overview
This Quick Start End User Guide &FAQs document is intended for end users at who will be using Windows 10 devices enrolled onto the NHSmail Intune Service.
Please follow the step-by-step instructions to begin using your Intune-enrolled Windows 10 device. If you have any questions or queries about any of the following enrolment steps or other content in this document please contact your Local Administrator (LA).
This Quick Start End User Guide covers the steps which need to be followed to enrol both Single User and Shared User devices. There is no difference between the enrolment process for Windows 10 devices which will be used by a single user or used as shared devices.
IMPORTANT NOTE
End users should read the Windows 10 FAQs in the first instance if they are having an issue with their Windows 10 device or struggling to complete the enrolment process.
If the FAQs do not offer any resolutions, then end users should contact their Local Administrators (LAs) who will be able to provide support.
Please do not contact the NHSmail Live Services Team with any queries or issues related to using an Intune-enrolled device as they will be unable to assist you.
1.1 A note on device variations
Please be aware that the enrolment steps outlined in this document may vary depending on the specific device manufacturer of your Windows 10 device. The enrolment process should not vary considerably, but individual screens my differ slightly and some devices may require additional steps to be completed to comply with their specific terms of use/policies.
If you are unsure about whether to proceed with a step that is not in this guide, please contact your Local Administrator.
2. Getting Started on Windows 10 (Single User and Shared Devices)
Step 1 : Unbox your Windows 10 device, plug it in to power and turn it on.
Step 2 : Select your language preference and United Kingdom as your region from the list of options displayed to you.
Step 3 : You will be given the option of using a second keyboard. Either select the Add Layout, to use a second keyboard or the Skip option.
Step 4 : You will now need to connect to a Wi-Fi network. Please select the network you would like to connect to from the options listed on your Windows 10 device.
Step 5 : Please wait while your device begins enrolling and applying all relevant settings. This is an automatic process. You are not required to do anything at this step.
IMPORTANT NOTE:
This can take up to 30 minutes. Please do not turn off your device at this point.
Step 6 : You will then need to enter your NHSmail account credentials (username and password) to sign in. You will also be required to complete Multi-Factor Authentication (MFA) at this step. MFA is an additional security step and this should already have been set up by you when you created your nhs.net email address. You will be sent a Multi-Factor Authentication (MFA) request to confirm your identity before the signing in process can complete.
The MFA prompt shown below will appear on the device on which you set up two-factor authentication for your NHSmail account. This may be another device. You will need to follow the instructions presented to you, and select Approve, Confirm or Allow when asked to do so.
IMPORTANT NOTE
The process to complete Multi-Factor Authentication at this step will depend on the method of MFA you set up when you first created your NHSmail account. You will have these steps to set up MFA previously:
You may need to access the Microsoft Authenticator app on another device.
Step 7 : Once you have successfully completed the MFA step, you will see a loading screen before you are directed to the NHSmail Portal. This is an automatic process. You are not required to do anything at this step.
Step 8 : When your device shows the NHSmail Portal Login screen, you will need to enter your password. Your email address should auto-fill as you entered this on Step 6 and so you will not have to manually re-enter it at this step. Select Sign In once you have entered your password.
Step 9 : Please wait a few moments while your device is getting set up. This is an automatic process. You are not required to do anything at this step. You will see the following loading screen.
Step 10 : Once Setup tasks on your device are completed, your device will begin to download policies, apps and other settings. Please be patient while this completes. If you would like to see further details, you can select Show details for a summary of the specific tasks your device is working on completing or has completed.
IMPORTANT NOTE
This can take around 10-15 minutes depending on the speed of your internet connection. Please do not turn off your device at this point.
Step 11 : Your device will need to complete some final setup tasks. This may take several minutes. This is an automatic process. You are not required to do anything at this step. Please do not turn off your device while this is happening. You may see the following loading screens.
Step 12 : The Setting up your device for work screen will reappear and there may be some final updates to be completed. Please wait for these updates to complete. Once they have completed, you should see that all tasks are marked as complete.
If you would like to see further details, you can select Show details for a summary of the specific tasks your device is working on completing or has completed.
Step 13 : Once the setup is complete, your device will show your home screen and you will see the notification Your device is ready appear in the bottom right-hand corner. Your device is now ready to use.
3. Windows 10 FAQs
The table below lists frequently asked questions about getting started and accessing applications on your Windows 10 device. Please read through these questions and the recommended course/s of action if you are having a technical issue with your device to try to resolve the issue yourself.
IMPORTANT NOTE
If you are unable to resolve your issue with the help of these FAQs, please contact an LA at your organisation.
Please do not contact the NHSmail Live Services Team with any queries or issues related to using an Intune-enrolled device as they will be unable to assist you.
Check your device is not in airplane mode (sometimes this is a physical button on the device) Check your network settings to make sure your machine is connected to a Wi-Fi network or an ethernet cable.
Some Windows 10 devices come with a 4G Sim If your device does come with a Sim card, your device will function like a mobile phone and you will not be required to connect to WiFi.
If your device is not turning on, it could mean the device battery level is too low. In this instance, plug in your device into a power socket. If your device is still having issues turning on, there may be a hardware issue and your device will need to be replaced. Please contact your Local Administrators (LAs).
Please follow the steps below to switch on your Wi-Fi connection:
1. Open the Settings app
2. Click Network and Internet
3. Click Wi-Fi from dropdown menu
4. Click Show available networks
5. Select network you wish to connect to
6. You may need to enter a password for Wi-Fi network to connect. You should be able to access this locally.
Google Chrome and Microsoft Edge browsers will be pre-installed on the Windows 10 devices. Other applications, such as Adobe PDF reader, Outlook and other Office 365 applications will not be installed on the device (including. Microsoft Word, PowerPoint, and Excel).
PDF files should open in a web view, but there are some scenarios where the PDF file will be downloaded to Downloads folder. In this scenario, you can open the file in either the Microsoft Edge or Google Chrome browser. Office 365 applications will be available by logging into the NHSmail portal.
You will also be able to access three web applications/websites from your desktop or via your web browser, including OcularOutcomes, Outcomes4Health and PharmOutcomes.
Outlook will not be installed on the Windows 10 device. If you need to access your Outlook/ email, you can do this via the Internet using your web browser.
As part of the baseline security policy, you will not be able to add web extensions when you browse in incognito mode or as a guest.
As part of the baseline security policy, downloading and installing applications has been disabled. You will see the following message:
If you require an application on the device, please contact your LA. 
The file may be trying to open in an application which is not installed locally on the device (e.g., an Excel file). Office applications are not installed on the device. Please use web browser alternatives if required. If you require an application on the device, please contact your LA.
No. VPN connectivity is not be required to login to your device or to access web applications.
As part of the baseline security policy, In-Private or Incognito browsing mode will be used to prevent data from being saved in the browser since this may be a shared device.
Windows Hello is turned off by design. To login to your Windows 10 device please use your NHSmail username and password. These devices are configured to only be used with your NHSmail username and password
Adobe PDF reader is not pre-installed on the device. You can download PDFs to your Downloads folder as required by some web applications. When opening the PDF, it will open in the Microsoft Edge browser. 
If your device shows an error message for example: Installation exceeded the time limit set by your organisation. Please try again or contact your IT support person for help, the enrolment of your device has taken too long. This may be because of poor/slow wi-fi connection. Either restart the enrolment process yourself or speak to your LA.
As part of the baseline security policy, connecting to external drives has been disabled. You will not be permitted to use any accessories to transfer or store data. Accessories which are required to access web applications will be listed so that they can be used. If you require the ability to connect to an external drive, please contact your LA
Yes, barcode scanners have been authorised in the Windows 10 build. This should allow you to connect to these devices. If you are having any issues with getting these connected, please contact your LA.
As part of the baseline security policy, connecting to external devices has been disabled.
As part of the baseline security policy, connecting to printers has been disabled. Only LAs will have permissions to add devices and you will be shown the following error message when you try to add devices yourself. If you need to add a new device, please contact your LA.
If you have forgotten your password, you will need to use the self-service password reset feature within the NHSmail Portal. To use self-service, you must know the answers to your security questions and have a mobile number set within the profile section of your account (you must have access to this mobile). If you try to use the CRTL+ALT+DELETE shortcut, you will not be able to successfully update your password.
If you are unable to use the self-service password reset feature, please contact your LA who will be able to redirect you to reset your password.
Login details will not be automatically saved during browsing sessions. This will prevent you from accessing another user’s account since these may be shared devices.
Remember to log out of the device if you are on a break and once you have finished to allow others to begin using the device.
Avoid downloading and saving any files locally to the device; if you do need to save something locally such as a PDF, please remember to delete the file(s) once you have finished. If you delete the file, remember to also empty the recycle bin. Alternatively, the following shortcut will permanently delete a file from your files and recycling bin CTRL + Shift + Delete
No. If you have finished working on a device or plan to take a break, you must:
1. Sign out of any applications
2. Close all browser tabs and windows
3. Sign out of the device so that other users can log in
Please do not use these devices for any personal business such as online banking, social media, etc or to store personal photos. Your device is managed by LAs and you may lose personal data if it is stored on your device.
Personalisation settings made while logged into the device will not be visible by other users once they have logged in. If there are any accessibility changes which you require such as changing the language, then you will be able to make the changes while you are logged into your account.
When using a shared device, it is important to ensure data from one user does not become available to anyone else. Each user will be required to login to their own nhs.net account whilst using a shared device. Users are restricted to using private browsing sessions to prevent login credentials from being saved to the device. For example, InPrivate browsing in Microsoft Edge or Incognito browsing in Google Chrome.
All Windows 10 devices will be encrypted without a BitLocker PIN. When the device turns on you will only be asked to enter your nhs.net credentials once. If you are prompted to provide a BitLocker recovery key, please contact your Local Admin/s.
If your device is crashing and blue screening regularly, there may be a hardware fault with your device. Please contact your LAs who will be able to assess the issue and will work to resolve it. If this is a hardware fault, the device will need to be replaced.
If you have misplaced your device, you should immediately report this to your LAs, so they can reset the device. If you have broken or damaged your device, please contact your LAs for assistance.
| Last Reviewed Date | 10/08/2021 |
