Sync the GAL to phones without Intune or MDM

“We would need Intune for that.” The sentence comes up often when a team wants the colleagues on the work phone. It is not true. Intune manages devices and apps, but it does not bring the global address list to the phone. This post sorts out what device management has to do with contacts, what it does not, and what the route without it looks like.

What Intune has to do with contacts, and what not

Intune is Microsoft’s tool for device management (MDM) and app protection. For contacts it knows exactly one setting: “Save Contacts” in the Outlook app. Microsoft describes it in the app configuration for Outlook for iOS and Android like this: “Saving contacts to the mobile device's native address book allows new calls and text messages to be linked with the user's existing Outlook contacts.” The default is “Off”, the recommendation “Enable” (retrieved on 16 October 2026).

The decisive part is in the quote: “existing Outlook contacts”. The setting mirrors the contacts that sit in the person’s mailbox into the phone’s contacts app. The global address list does not sit there. It is a directory that Outlook queries live on every search and never stores as contacts.

Three terms that are often confused

The route without device management: put the contacts into the mailbox

All three routes above share the same denominator: they show what is a contact in the mailbox. So the GAL has to go there. That is exactly what GALYNSKI does, server-side, with no device involved:

1. Connect. An administrator grants GALYNSKI admin consent in the tenant once. The app works with application permissions and without any user passwords.
2. Create an address book. Name “Colleagues”, source “Global address list”, recipients all users or specific groups.
3. Nightly run. In the window from 02:00 to 05:00 local time, GALYNSKI creates its own contact folder in every recipient’s mailbox and writes the GAL entries into it as contacts. Rooms, resources and system accounts are filtered out.
4. Onto the device. The folder appears by itself in Outlook on the computer and in the Outlook app. The contacts reach the contacts app and caller ID through the Outlook app: on Android with “Sync Contacts”, on the iPhone with “Save Contacts”. No extra app, no MDM profile. More in the guide Company contacts on Android.

From then on the same applies to the GAL as to any other contact in the mailbox: the device shows it as soon as the mailbox’s contacts are on the device.

What has to be visible on the phone

For caller ID to show the name, the mailbox’s contacts have to be in the phone’s contacts app: switch on “Sync Contacts” (Android) or “Save Contacts” (iPhone) once in the Outlook app. This can be set centrally via Intune but is not a requirement for GALYNSKI. Whether the switch is already on is shown in the Outlook app’s settings under the company account.

Microsoft describes the benefit in the FAQ for Outlook for iOS and Android: “By enabling contact synchronization between Outlook and the native contacts app, users receive the rich experience that the native operating system provides (for example, inbound and outbound caller-ID, text messaging name resolution, and so on).” (retrieved on 16 October 2026)

When Intune still helps

If you use Intune anyway, you can make the last step more convenient with it. None of this is required.

• Preset “Save Contacts” for everyone. According to Microsoft, administrators can enable contact synchronisation by default on enrolled devices. The person still has to allow the app access to the contacts app once.
• Limit the fields. An app protection policy can define which contact fields are exported to the contacts app, for example without notes.
• Prevent the export. Where company contacts should not go into the device’s contacts app, synchronisation can be switched off via app protection policy. The contacts then remain visible in Outlook.

Data protection without device management

Without MDM the question remains where the data lives. The answer is the same as with MDM: the contacts live in the mailboxes of your tenant, in a separate folder that GALYNSKI created. They reach a device only if the mailbox is set up there. GALYNSKI does not touch employees’ private contacts. The contracting party is SSIG-IT GmbH in Germany; the DPA and the data protection documentation are public.

GALYNSKI costs 4 € per user per month, less on the annual plan; counted are the people who receive contacts. All prices on the pricing page. Which contacts should be distributed at all is covered in the guide Sync the global address list to iPhone and Android.

Frequently asked questions

Do I need Intune for the company contacts to appear on the phone?

No. GALYNSKI writes the contacts into a folder in the mailbox, and Outlook shows it by itself. Everyone switches on “Sync Contacts” (Android) or “Save Contacts” (iPhone) once in the Outlook app; Intune can preset this, but it is not required.

What has to be switched on on the phone for caller ID to show the name?

The mailbox’s contacts have to be in the phone’s contacts app: switch on “Sync Contacts” (Android) or “Save Contacts” (iPhone) once in the Outlook app. This can be set centrally via Intune but is not a requirement for GALYNSKI.

Does this also work on private phones?

The contacts live in the mailbox. They reach a phone only if the company account is set up there in Outlook. Nothing arrives on a phone without the company account.

Can I still set “Save Contacts” via Intune?

Yes. Microsoft documents the app setting “Save (or Sync) Contacts” for Outlook for iOS and Android, default off, recommendation enable. That saves the trip to every single person but does not change the fact that only contacts from the mailbox are mirrored.

Does this apply to Android too?

Yes. According to Microsoft, Outlook for Android syncs the Outlook contacts in both directions with the device’s contacts app; on iOS the app exports them to the contacts app. In both cases: what is not a contact in the mailbox does not arrive.