Managed BYOD
Windows 11 Home
Upgrade to Managed Setup
The following guide will step you through how to set up a new Windows 11 Home device and Upgrade to Managed BYOD.
Please note these devices are generally the ones purchased through a retail outlet. If you have purchased your device through an education portal with your school, you will most likely have the Windows 11 Education version which you can find set up instructions for here.
If you are unsure which version of Windows you have, please check the documentation that came with your device or confirm with your place of purchase, if necessary, before proceeding.
Before you begin, please ensure you have the following:
- Your device with Windows 11 Home.
- A stable internet connection.
- Fully charged device and connection to power.
- A personal Microsoft Account for the student with password and administrator access.
- Studentâs school email address (firstname.lastname@mnstu.catholic.edu.au).
- Studentâs school Password.
- Note: If you are a new student within our diocese you will not be assigned a student email, username or password until your first day of attendance at school. Please wait until you receive this information before attempting step 36 onwards in these instructions.
Setting up a Windows 11 Home Device & Upgrading to Managed BYOD
Follow the instructions or watch the video below to set up your new Windows 11 Home device and upgrade it to our Managed BYOD platform, built on Microsoft Intune. You can also download a copy of the instructions here.Â
- When first setting up your new device, the following screen will be displayed. Select âAustraliaâ and then click âYesâ.

- Select âUSâ as the keyboard layout and then click âYesâ.

- When prompted to add a second keyboard layout simply click âSkipâ to continue.

- You should then be prompted to connect to an available network. Select a known and trusted network from the list and click âConnectâ. Enter the appropriate password when requested.
Note: If your device is already connected to a cabled internet connection this screen will simply show the state of the connection (i.e. Connected, Internet).
When you are connected to a network with Internet Access, click âNext’.
- The device will then check for updates, as shown below.
DO NOT TURN OFF YOUR DEVICE during this process.
This may take some time so ensure the device has power and watch for any prompts on screen.
- Once the updates are applied you may be asked to accept the License Agreement. Read the agreement and click âAcceptâ.

- You will then be asked to name your device. Choose an appropriate name that does not give away any personal information. Note the naming requirements displayed on screen.
Also note that this will be the name that appears if you are sharing your screen with your classroom display.
Name the device then click âNextâ to continue or choose to âskip for nowâ.
- You will now be asked to sign in with your Microsoft account. This should be the students personal Microsoft account (School accounts will not work with Windows Home).
If you do not already have a personal Microsoft account created for your child, we recommend doing this separately prior to completing this step. .
Please note: As children are under 18 years of age you will need to have a parent account and it will automatically apply many Family Safety Features that will require attention at step 26.
Once you have your personal Microsoft account details for your child ready click âSign inâ.

- You will now need to enter your childâs personal Microsoft account email address and then click âNextâ.

- Now enter the password for your childâs personal Microsoft account. Then click âSign inâ.

- You will now be asked how you would like to set up your device. Select âSet up as a new PCâ and then click âNextâ.

- You will now be asked to create a PIN for your device. Click âCreate PINâ to continueNote: On some devices you may also be given the option of setting up other sign in methods such as fingerprint recognition or facial recognition. This will vary depending on the functionality of your device.

- On the following screen enter an appropriate PIN that your child will be able to remember.
This will be the method they use to log on to their device, with their personal account, so it should be secure and memorable.Once you have entered your PIN and confirmed it, click âOKâ to continue.
- You will then be prompted to select the privacy controls for your device. Select the options you feel are appropriate. We advise that you leave âLocationâ and âFind my deviceâ enabled. This allows your device to be located if it is lost or stolen.Be sure to scroll down the list of options. When satisfied, click âAcceptâ.

- Next you will be asked to âcustomize your experienceâ. Select the options that you feel are appropriate. We recommend selecting the âSchoolâ option only. Once you have made your choices, click âAcceptâ.

- Prompts may appear at this stage for other trial software such as Xbox Game Pass, antivirus software or Microsoft phone connections. None of these are necessary for school and we recommend selecting âskipâ for any trials that are offered.

- The device may now ask if you would like to bring your browsing data into Microsoft Edge when using it. This is a personal choice so feel free to select either âNot nowâ or âAcceptâ to continue. This can always be changed in your device settings later.

- The device will then check for updates, as shown below. Ensure your device has power and do not turn off your device during this time.

- Once the updates are complete you may find that the device restarts. Simply sign back in to the device using the PIN or sign in option you chose earlier.

- Now you must check the device is not running the Windows S version. Click the Windows icon âStartâ menu Then click on âSettingsâ.

- In the settings menu select âSystemâ and then select âActivationâ.

- If your device says Windows 11 Home in S Mode, continue with the next step (23).
If your device just says, Windows 11 Home, you can skip to step 26. 
- For a device in S mode, select the second drop down icon next to the S mode menu and then select âOpen Storeâ.

- The Microsoft App Store will open. Click the âGetâ button.
Note: You may be asked to sign into the Microsoft Store at this point.
- Windows will change from S mode to the normal version of Windows Home. You will know that the process has completed successfully when the âYouâre all setâ pop up appears. Click âCloseâ.

- You will now need to adjust the content filters in your Microsoft Family Safety settings for the child account. Open the following link for the in a web browser, not through the app. (The app only provides minimal options to change access to content).
- On the landing page find the sign in button and click âSign inâ.
(Note that the image below may be different to what you see)
- If you followed the Microsoft instructions linked earlier at Step 8 to set up your childâs personal Microsoft account you should now see a screen similar to the one below showing the student (Child) account signed in and the Family Organiser (Dad in this example) listed.
Click on the âaccount manager iconâ in the top right corner then select âSign in with a different accountâ to allow the family organiser to sign in.
- A Microsoft pop up window will appear like the one below. Enter your parent Microsoft account information for the âfamily organiserâ and click âNextâ.
Note: This will be the adult account in charge of managing your Microsoft Family settings shown in the previous screen.
- Select the childâs name in family members list.

- Select the âEDGEâ tab from the platform options at the top of the page, under the family members name and email address.

- Scroll down the page until you see the âFilter settingsâ. Turn ON âFilter inappropriate websites and searchesâ.
Turn OFF âOnly use allowed websitesâ.
- Underneath you will see the âBlocked sitesâ area.
Ensure there are no sites listed in the block sites that might be needed for school, such as gateway zScaler.
Clear the blocked sites list by clicking on âRemoveâ next to any sites in the blocked list.
Note that the âfilter inappropriate websites and searchesâ will still be operational and you can add any sites you wish to block, that are not necessary for school, to this list at any time in the future.
- Next look at the âAllowed sitesâ area.
Add the following sites to the âAllowed sitesâ list by typing or copying them in to the âAdd a website fieldâ and pressing the + icon.
Ensure these sites are added:
gateway.zscalerone.net
login.zscalerone.net
These two websites are what students are directed to when they need to authenticate on our network to access websites online, beyond our intranet.
- When setting changes are completed correctly it should look like the screenshot below.

We can now Upgrade the device to Windows 11 Education and the Managed BYOD enrolment for school.
Note: The user that is logged in for this process must have administrator permission for the computer. - Open a web browser (such as Microsoft Edge or Google Chrome) and navigate to the âMNConnectâ page at . This will normally be available, on the start menu of the device, and visible when you click the start button.Note: If you are a new student within our diocese you will not be assigned a student email, username or password until your first day of attendance at school. Please wait until you receive this information before continuing.

- Once the browser opens and you have navigated to you will be prompted to enter your school login details.

- When prompted enter your school username and school password then click âSign inâ.

- From the âMNConnectâ page, click the âDownloadsâ icon. This will open the âDownloads for BYOD Devicesâ page.

- Scroll down to find the âSoftware Downloads and Add-onsâ section of the page, click on the âStep Up BYOD: Windows Education Upgrade Utilityâ icon. This will initiate a download of the Upgrade Utility.

- If the following (or similar) prompt is displayed, simply click âDownloadâ to confirm that you want to download the Upgrade utility.

- Click âOpen Fileâ from the Downloads prompt or open the location where application file was saved in Windows file explorer (this will most likely be the âDownloadsâ folder). Locate âCDMN-BYOD-Upgrade-vx-xx.exeâ and double-click it to launch the application.

- Initially, the following window will appear.

After this window opens you will get a pop-up box asking you to sign in with your Microsoft account.
At this point you must enter the studentâs full school email address (firstname.lastname@mnstu.catholic.edu.au) then click âNextâ.

- The application will then prompt you to sign into your school account. Enter your school username and password as shown below, then click âSign inâ.

- The application will then verify your account and retrieve the upgrade key.
A message will be displayed in the application window when ready.
Click the âUpgrade NOWâ button to continue.Note: The verification process allows each student to upgrade one device. If you need to upgrade multiple devices or if there is an issue with verification, please contact your school technology support person.The upgrade process will restart your device to complete.
- You may now see the following pop up on screen asking for permission to make changes to your device. If you see this click âYesâ to continue.
Once the upgrade process begins, progress will be displayed as shown below: 
- When the upgrade process is complete and the device has restarted, you will be prompted to log on. Sign on to the device with the personal Microsoft account you have just used as normal.

- Once logged on, a message should appear to confirm the success of the upgrade process (shown below). Click on the message box to open the relevant settings page.

This will display the Windows Edition and the activation state.

Note: If the above activation window does not appear after clicking on the âsuccess!â pop up, or the success pop up does not appear after signing back in to your device, it is also possible to verify the Windows Edition and activation state (just like we did at step 20 when checking for Windows S mode) by clicking on the âWindows start buttonâ and opening the âSettings Menuâ. Then from the âSystemâ listing, click âActivationâ and you will see the above window. - At this point, the Windows Edition upgrade process is complete, and your device is now running Windows Education edition. It is now ready, to be enrolled in CDMNâs device management platform. Continue with the next steps to ensure the device is enrolled in the managed program correctly.Continue to follow the instructions below to enrol your device in CDMNâs device management platform:
- Ensure you are still logged in to the device as normal with the personal Microsoft account that you have been using.
- Click the âStartâ button, then click âSettingsâ

- When the âSettingsâ window opens, click on âAccountsâ and then âAccess Work or Schoolâ.

- Now click the âConnectâ button as shown below:

- The following window will then open. Click the âJoin this device to Microsoft Entra IDâ link.

- You will then be prompted to âSign inâ. On the screen that appears, enter your full e-mail address(ie firstname.lastname@mnstu.catholic.edu.au) and click âNextâ.

- When the standard CDMN (CeNET) logon prompt appears, enter your school details as shown.
Note: The username format here is simply firstname.lastname.
- You will now see the following screen, click âJoinâ to confirm and complete the process of enrolling your device.

- Once enrolment is complete, the following confirmation screen will be displayed. Simply click âDoneâ.

- You will now need to restart your device (or âSwitch Accountsâ as explained in the previous pop up above) before you can sign into your device with your school account.Note: Before switching to your school account, consider transferring any files or data you want to access via your school account to your school OneDrive. Your school OneDrive can be accessed via Click the Windows Start icon, then the power button icon, and select âRestartâ.

- When the device restarts, select âOther userâ from the bottom left icons and then enter your full school e-mail address and password in the other user fields. Then press enter or click the arrow icon beside your password to log in.

- Once logged in with your school account, the process to enrol your device is complete. Relevant applications and device profiles will be installed as required. Additional apps may be made available for installation in the âCompany Portalâ. In most cases it will appear in the list of âRecommendedâ applications. If this not the case, then click âAll appsâ and select It from the list of installed applications.It may take a few minutes for the Company Portal to be deployed to your device after the initial setup is complete.

- You should now be able to see all apps available to you at your school in the Company Portal. Some applications will be automatically deployed to your device, as defined by your school.
- Your student BYOD device is now completely setup and ready to use on the school network.
- When you take your device into school you will select the wifi network called âCSMNâ to connect to the school wifi.
- Your school and teachers will provide any other specific information on how you will use your device in the classroom.