Managed BYOD
Windows 11 Home
Upgrade to Managed Setup
The following guide will step you through how to set up a new Windows 11 Home device and Upgrade to Managed BYOD.
Please note these devices are generally the ones purchased through a retail outlet. If you have purchased your device through an education portal with your school, you will most likely have the Windows 11 Education version which you can find set up instructions for here.
If you are unsure which version of Windows you have, please check the documentation that came with your device or confirm with your place of purchase, if necessary, before proceeding.
Before you begin, please ensure you have the following:
- Your device with Windows 11 Home.
- A stable internet connection.
- Fully charged device and connection to power.
- A personal Microsoft Account for the student with password and administrator access.
- Student鈥檚 school email address (firstname.lastname@mnstu.catholic.edu.au).
- Student鈥檚 school Password.
- Note: If you are a new student within our diocese you will not be assigned a student email, username or password until your first day of attendance at school. Please wait until you receive this information before attempting step 36 onwards in these instructions.
Setting up a Windows 11 Home Device & Upgrading to Managed BYOD
Follow the instructions or watch the video below to set up your new Windows 11 Home device and upgrade it to our Managed BYOD platform, built on Microsoft Intune. You can also download a copy of the instructions here.聽
- When first setting up your new device, the following screen will be displayed. Select 鈥楢ustralia鈥 and then click 鈥榊es鈥.

- Select 鈥楿S鈥 as the keyboard layout and then click 鈥榊es鈥.

- When prompted to add a second keyboard layout simply click 鈥楽kip鈥 to continue.

- You should then be prompted to connect to an available network. Select a known and trusted network from the list and click 鈥楥onnect鈥. Enter the appropriate password when requested.
Note: If your device is already connected to a cabled internet connection this screen will simply show the state of the connection (i.e. Connected, Internet).
When you are connected to a network with Internet Access, click 鈥楴ext’.
- The device will then check for updates, as shown below.
DO NOT TURN OFF YOUR DEVICE during this process.
This may take some time so ensure the device has power and watch for any prompts on screen.
- Once the updates are applied you may be asked to accept the License Agreement. Read the agreement and click 鈥楢ccept鈥.

- You will then be asked to name your device. Choose an appropriate name that does not give away any personal information. Note the naming requirements displayed on screen.
Also note that this will be the name that appears if you are sharing your screen with your classroom display.
Name the device then click 鈥楴ext鈥 to continue or choose to 鈥榮kip for now鈥.
- You will now be asked to sign in with your Microsoft account. This should be the students personal Microsoft account (School accounts will not work with Windows Home).
If you do not already have a personal Microsoft account created for your child, we recommend doing this separately prior to completing this step. .
Please note: As children are under 18 years of age you will need to have a parent account and it will automatically apply many Family Safety Features that will require attention at step 26.
Once you have your personal Microsoft account details for your child ready click 鈥楽ign in鈥.

- You will now need to enter your child鈥檚 personal Microsoft account email address and then click 鈥楴ext鈥.

- Now enter the password for your child鈥檚 personal Microsoft account. Then click 鈥楽ign in鈥.

- You will now be asked how you would like to set up your device. Select 鈥楽et up as a new PC鈥 and then click 鈥楴ext鈥.

- You will now be asked to create a PIN for your device. Click 鈥楥reate PIN鈥 to continueNote: On some devices you may also be given the option of setting up other sign in methods such as fingerprint recognition or facial recognition. This will vary depending on the functionality of your device.

- On the following screen enter an appropriate PIN that your child will be able to remember.
This will be the method they use to log on to their device, with their personal account, so it should be secure and memorable.Once you have entered your PIN and confirmed it, click 鈥極K鈥 to continue.
- You will then be prompted to select the privacy controls for your device. Select the options you feel are appropriate. We advise that you leave 鈥楲ocation鈥 and 鈥楩ind my device鈥 enabled. This allows your device to be located if it is lost or stolen.Be sure to scroll down the list of options. When satisfied, click 鈥楢ccept鈥.

- Next you will be asked to 鈥渃ustomize your experience鈥. Select the options that you feel are appropriate. We recommend selecting the 鈥淪chool鈥 option only. Once you have made your choices, click 鈥楢ccept鈥.

- Prompts may appear at this stage for other trial software such as Xbox Game Pass, antivirus software or Microsoft phone connections. None of these are necessary for school and we recommend selecting 鈥榮kip鈥 for any trials that are offered.

- The device may now ask if you would like to bring your browsing data into Microsoft Edge when using it. This is a personal choice so feel free to select either 鈥楴ot now鈥 or 鈥楢ccept鈥 to continue. This can always be changed in your device settings later.

- The device will then check for updates, as shown below. Ensure your device has power and do not turn off your device during this time.

- Once the updates are complete you may find that the device restarts. Simply sign back in to the device using the PIN or sign in option you chose earlier.

- Now you must check the device is not running the Windows S version. Click the Windows icon 鈥楽tart鈥 menu Then click on 鈥楽ettings鈥.

- In the settings menu select 鈥楽ystem鈥 and then select 鈥楢ctivation鈥.

- If your device says Windows 11 Home in S Mode, continue with the next step (23).
If your device just says, Windows 11 Home, you can skip to step 26. 
- For a device in S mode, select the second drop down icon next to the S mode menu and then select 鈥極pen Store鈥.

- The Microsoft App Store will open. Click the 鈥楪et鈥 button.
Note: You may be asked to sign into the Microsoft Store at this point.
- Windows will change from S mode to the normal version of Windows Home. You will know that the process has completed successfully when the 鈥榊ou鈥檙e all set鈥 pop up appears. Click 鈥楥lose鈥.

- You will now need to adjust the content filters in your Microsoft Family Safety settings for the child account. Open the following link for the in a web browser, not through the app. (The app only provides minimal options to change access to content).
- On the landing page find the sign in button and click 鈥楽ign in鈥.
(Note that the image below may be different to what you see)
- If you followed the Microsoft instructions linked earlier at Step 8 to set up your child鈥檚 personal Microsoft account you should now see a screen similar to the one below showing the student (Child) account signed in and the Family Organiser (Dad in this example) listed.
Click on the 鈥榓ccount manager icon鈥 in the top right corner then select 鈥楽ign in with a different account鈥 to allow the family organiser to sign in.
- A Microsoft pop up window will appear like the one below. Enter your parent Microsoft account information for the 鈥渇amily organiser鈥 and click 鈥楴ext鈥.
Note: This will be the adult account in charge of managing your Microsoft Family settings shown in the previous screen.
- Select the child鈥檚 name in family members list.

- Select the 鈥楨DGE鈥 tab from the platform options at the top of the page, under the family members name and email address.

- Scroll down the page until you see the 鈥楩ilter settings鈥. Turn ON 鈥楩ilter inappropriate websites and searches鈥.
Turn OFF 鈥極nly use allowed websites鈥.
- Underneath you will see the 鈥楤locked sites鈥 area.
Ensure there are no sites listed in the block sites that might be needed for school, such as gateway zScaler.
Clear the blocked sites list by clicking on 鈥楻emove鈥 next to any sites in the blocked list.
Note that the 鈥榝ilter inappropriate websites and searches鈥 will still be operational and you can add any sites you wish to block, that are not necessary for school, to this list at any time in the future.
- Next look at the 鈥楢llowed sites鈥 area.
Add the following sites to the 鈥楢llowed sites鈥 list by typing or copying them in to the 鈥楢dd a website field鈥 and pressing the + icon.
Ensure these sites are added:
gateway.zscalerone.net
login.zscalerone.net
These two websites are what students are directed to when they need to authenticate on our network to access websites online, beyond our intranet.
- When setting changes are completed correctly it should look like the screenshot below.

We can now Upgrade the device to Windows 11 Education and the Managed BYOD enrolment for school.
Note: The user that is logged in for this process must have administrator permission for the computer. - Open a web browser (such as Microsoft Edge or Google Chrome) and navigate to the 鈥楳NConnect鈥 page at . This will normally be available, on the start menu of the device, and visible when you click the start button.Note: If you are a new student within our diocese you will not be assigned a student email, username or password until your first day of attendance at school. Please wait until you receive this information before continuing.

- Once the browser opens and you have navigated to you will be prompted to enter your school login details.

- When prompted enter your school username and school password then click 鈥楽ign in鈥.

- From the 鈥楳NConnect鈥 page, click the 鈥楧ownloads鈥 icon. This will open the 鈥楧ownloads for BYOD Devices鈥 page.

- Scroll down to find the 鈥楽oftware Downloads and Add-ons鈥 section of the page, click on the 鈥楽tep Up BYOD: Windows Education Upgrade Utility鈥 icon. This will initiate a download of the Upgrade Utility.

- If the following (or similar) prompt is displayed, simply click 鈥楧ownload鈥 to confirm that you want to download the Upgrade utility.

- Click 鈥極pen File鈥 from the Downloads prompt or open the location where application file was saved in Windows file explorer (this will most likely be the 鈥楧ownloads鈥 folder). Locate 鈥楥DMN-BYOD-Upgrade-vx-xx.exe鈥 and double-click it to launch the application.

- Initially, the following window will appear.

After this window opens you will get a pop-up box asking you to sign in with your Microsoft account.
At this point you must enter the student鈥檚 full school email address (firstname.lastname@mnstu.catholic.edu.au) then click 鈥楴ext鈥.

- The application will then prompt you to sign into your school account. Enter your school username and password as shown below, then click 鈥楽ign in鈥.

- The application will then verify your account and retrieve the upgrade key.
A message will be displayed in the application window when ready.
Click the 鈥楿pgrade NOW鈥 button to continue.Note: The verification process allows each student to upgrade one device. If you need to upgrade multiple devices or if there is an issue with verification, please contact your school technology support person.The upgrade process will restart your device to complete.
- You may now see the following pop up on screen asking for permission to make changes to your device. If you see this click 鈥榊es鈥 to continue.
Once the upgrade process begins, progress will be displayed as shown below: 
- When the upgrade process is complete and the device has restarted, you will be prompted to log on. Sign on to the device with the personal Microsoft account you have just used as normal.

- Once logged on, a message should appear to confirm the success of the upgrade process (shown below). Click on the message box to open the relevant settings page.

This will display the Windows Edition and the activation state.

Note: If the above activation window does not appear after clicking on the 鈥榮uccess!鈥 pop up, or the success pop up does not appear after signing back in to your device, it is also possible to verify the Windows Edition and activation state (just like we did at step 20 when checking for Windows S mode) by clicking on the 鈥榃indows start button鈥 and opening the 鈥楽ettings Menu鈥. Then from the 鈥楽ystem鈥 listing, click 鈥楢ctivation鈥 and you will see the above window. - At this point, the Windows Edition upgrade process is complete, and your device is now running Windows Education edition. It is now ready, to be enrolled in CDMN鈥檚 device management platform. Continue with the next steps to ensure the device is enrolled in the managed program correctly.Continue to follow the instructions below to enrol your device in CDMN鈥檚 device management platform:
- Ensure you are still logged in to the device as normal with the personal Microsoft account that you have been using.
- Click the 鈥楽tart鈥 button, then click 鈥楽ettings鈥

- When the 鈥楽ettings鈥 window opens, click on 鈥楢ccounts鈥 and then 鈥楢ccess Work or School鈥.

- Now click the 鈥楥onnect鈥 button as shown below:

- The following window will then open. Click the 鈥Join this device to Microsoft Entra ID鈥 link.

- You will then be prompted to 鈥楽ign in鈥. On the screen that appears, enter your full e-mail address(ie firstname.lastname@mnstu.catholic.edu.au) and click 鈥楴ext鈥.

- When the standard CDMN (CeNET) logon prompt appears, enter your school details as shown.
Note: The username format here is simply firstname.lastname.
- You will now see the following screen, click 鈥楯oin鈥 to confirm and complete the process of enrolling your device.

- Once enrolment is complete, the following confirmation screen will be displayed. Simply click 鈥楧one鈥.

- You will now need to restart your device (or 鈥楽witch Accounts鈥 as explained in the previous pop up above) before you can sign into your device with your school account.Note: Before switching to your school account, consider transferring any files or data you want to access via your school account to your school OneDrive. Your school OneDrive can be accessed via Click the Windows Start icon, then the power button icon, and select 鈥楻estart鈥.

- When the device restarts, select 鈥極ther user鈥 from the bottom left icons and then enter your full school e-mail address and password in the other user fields. Then press enter or click the arrow icon beside your password to log in.

- Once logged in with your school account, the process to enrol your device is complete. Relevant applications and device profiles will be installed as required. Additional apps may be made available for installation in the 鈥楥ompany Portal鈥. In most cases it will appear in the list of 鈥楻ecommended鈥 applications. If this not the case, then click 鈥楢ll apps鈥 and select It from the list of installed applications.It may take a few minutes for the Company Portal to be deployed to your device after the initial setup is complete.

- You should now be able to see all apps available to you at your school in the Company Portal. Some applications will be automatically deployed to your device, as defined by your school.
- Your student BYOD device is now completely setup and ready to use on the school network.
- When you take your device into school you will select the wifi network called 鈥淐SMN鈥 to connect to the school wifi.
- Your school and teachers will provide any other specific information on how you will use your device in the classroom.