Launch workplace control panel from hyperlink


You want to send a simple email to your Windows Phone 8.1 users to enrol their devices in the Windows Intune service, without telling them how to go to settings and find the workplace control panel.

You want a simple hyperlink in the email that redirects the end users to the workplace control panel for Windows Phone 8.1.



The Windows Phone 8.1 MDM Protocol guide is a mecca for information around the current capabilities for the Windows Phone platform.

As part of this documentation there are some powerful and handy tips.

One of these tips is around launching the workplace control panel from a hyperlink. In the documentation is describes that Windows Phone 8.1 supports the launching of the workplace control panel using a hyperlink: mssettings-workplace.

This should read : mssettings-workplace:

Please note the : at the end.


This sounds really promising to help end users join the workplace for Windows Intune. This means you can send an email to a user with the above hyperlink which intern open the workplace control panel.


However when receiving emails from an Exchange server, Windows Phone automatically filters out links like ms-settings-workplace: .  If you copy/paste the link, you will see that it has been replaced.

So the end users end up seeing the below




To work around this, the system does support HREF tags for HTML.  In order for this to work, you must host a re-direct website or page that can redirect the user to ms-settings-workplace: via a website to avoid the remapping on the client.  This will invoke the IE browser to deep-link into the settings page.

For example here is some source for a HTML page that you can copy and paste into notepad or web editor;


<html lang=”en-US”>
<meta charset=”UTF-8″>
<meta http-equiv=”refresh” content=”0;url=”ms-settings-workplace://”>
<script type=”text/javascript”>
window.location.href = “ms-settings-workplace://”
<title>Page Redirection</title>
<!– Note: don’t tell people to `click` the link, just tell them that it is a link. –>
If you are not redirected automatically, follow the <a href=’ms-settings-workplace://’>link to example</a>


Save this html to a file called wp811.htm . You can then upload or host it on your production website for your organisation.

As this point I can then send a email out to my end users. With a hyperlink that redirects clients to your WP811.htm location in an email that can be picked up on there Windows Phone 8.1 devices.

As an example here is my link that will kick off the workplace control panel :

As example here is the whole workflow


I have highlighted some pages that your end user will never see, as an example the redirect page will not show.

References :

Windows Phone 8.1 MDM protocol documentation :

Windows Phone 8.1 MDM protocol documentation PDF : Windows Phone 8.1 MDM protocol documentation

Microsoft Online Services – Service Level Agreement

A customer recently reached out to me asking for the service level agreement for Microsoft Online Services.

We have a detailed set of information on the Windows Intune Trust Center

if you do a search for service you will find this section.


The link takes you to you to : 

Which details in a number of languages the SLA for the Microsoft Online Services which include Intune along many others.


References :

Microsoft Online Services SLA –

Windows Intune Trust Center –

Windows Phone 8.1 MDM protocol documentation

One of the best pieces of documentation that I have used when developing content for Windows Intune for Windows Phone 8.1 is the MDM protocol guide.


Windows Phone 8.1 provides an enterprise management solution to help IT administrators manage company security policies and business applications while avoiding compromise of the users’ privacy on their personal phones. A built-in management component in Windows Phone 8.1 can communicate with the device management server. There are two parts to the Windows Phone management component, the enrollment client, which enrolls and configures the phone to communicate with the enterprise management server and the phone management client, which periodically synchronizes with the management server to check for updates and apply the latest policies set by an IT administrator. Third-party MDM servers can manage Windows Phone 8.1 by using the Enterprise Device Management protocol. The built-in Windows Phone 8.1 management client is able to communicate with a third-party server proxy that supports the protocols outlined in this downloadable document to perform enterprise management tasks.

Windows Phone 8.1 MDM protocol documentation : 

Direct link to document : Windows Phone 8.1 MDM protocol documentation

Lets take this example :

You want to understand how to block or allow an application to run on Windows Phone 8.1. Currently today in Windows Intune this can not be achieved via the GUI from Configuration Manager.

The Windows Phone 8.1 MDM Protocol document will enable you to understand the structure of the OMA URI string that needs to be created as a setting into Configuration Manager


You can then find the relevant setting


And craft a string / setting to be deployed into Configuration Manager that is then targeted for your Windows Phone 8.1 users.

You also get examples of the XML that you may require to set that policy


There is a whole number of configurations and capabilities that you can look to set.

This document is extremely powerful and can really help you deliver some great customisations/controls for your Windows Phone 8.1 platform using OMA URI in Configuration Manager with Windows Intune.

Reference :

Windows Phone 8 MDM protocol documentation PDF : Windows Phone 8 Enterprise Device Management Protocol 

Windows Phone 8.1 MDM protocol documentation : 

Windows Phone 8.1 MDM protocol documentation PDF : Windows Phone 8.1 MDM protocol documentation

Black or Whitelist applications on Windows Phone 8.1 with Windows Intune :