Microsoft Intune Reviews, Pricing, and Features

What is Microsoft Intune?

Microsoft Intune is a robust cloud-based service designed to streamline the remote management of mobile devices and applications. This comprehensive solution offers management of both company-owned and personal devices.

Microsoft Intune simplifies Mobile Device Management (MDM) and Mobile Application Management (MAM). It enables easy organizational device and application management and protection without complex infrastructure.

Through the unified Intune admin center, administrators gain comprehensive control over the entire device lifecycle. This encompasses streamlined processes such as device onboarding with Autopilot, application deployment, configuration, security, and efficient device offboarding with device reassignment capabilities.

Additionally, Intune provides robust functionality to manage the application lifecycle, which is similar to the device lifecycle. This includes tasks like application deployment, securing application data on end-user devices, Application management, and the seamless removal of applications and organizational data.

Valuable Intune Features

1. Mobile Device Management (MDM)
2. Mobile Application Management (MAM)
3. Endpoint Security
4. Autopilot
5. Windows Update for Business
6. Intune Cloud PKI
7. Embedded Security Copilot Experience

1. Device Management [MDM]

Once you enroll your devices in Intune, you gain control over the entire device lifecycle. Various enrollment methods allow you to select the one that best fits your requirements.

Intune facilitates the management of company-owned devices and extends its support to BYOD (Bring Your Own Device) scenarios.

By utilizing the Enrollment restrictions policy, accessible through the Intune admin center, you can control the types of devices eligible for enrollment into your Intune organization.

Here are the supported operating systems for device management:

• Windows
• macOS
• Linux
• Android
• iOS

Once a device is enrolled, you can perform various actions on it. Examples include but are not limited to:

• Restart the managed device
• Send a Wipe command to the device
• Retire a Device
• Collect Diagnostic Logs
• Rename the Device and so on…

2. Application Management [MAM]

Mobile Application Management (MAM) safeguards organization data within managed applications. Initially focused on Android and iOS devices, Microsoft has expanded MAM support to Windows devices through Microsoft Edge for Business. Key features of MAM include:

• Deployment of Applications: Simplify and streamline the application deployment process on managed devices.
• Information Copy/Paste Restrictions: Enhance security by restricting copy/paste functionality within managed applications.
• App Selective Wipe: Enable the creation of wipe requests using App Selective wipe to remove managed apps and associated data from user devices.
• Application Reporting and Monitoring: Gain insights into application usage through comprehensive reporting and monitoring features.

3. Endpoint Security

The endpoint security node in Intune configures device security and manages security-related tasks for your managed devices. It allows Intune administrators to identify devices that are at risk and perform remediation tasks. The endpoint security node currently Includes:

• Security Baseline configurations
• Security tasks
• Antivirus configuration
• Disk encryption configuration settings
• Firewall
• Endpoint Privilege Management
• Endpoint Detection and response
• App Control for Business
• Attack surface reduction
• Account protection
• Device compliance
• Conditional Access
• Microsoft Defender for Endpoint Configurations

4. Autopilot

Using Autopilot, you can pre-configure new Windows devices before sending them to business users. Autopilot makes the process easy by enrolling your device in Entra ID and Intune, installing applications, and setting up security and configuration policies.

Some of the main benefits of Autopilot Include:

• Simplified Deployment: Autopilot streamlines the deployment process, allowing for quick and hassle-free provisioning of Windows devices without the need for extensive manual configurations.
• User Self-Service: End-users can easily set up their devices, reducing the dependency on IT personnel. This self-service approach enhances user experience and minimizes the time and effort required for device onboarding.
• Consistent Configuration: Autopilot ensures that devices are configured consistently according to organizational policies and standards, reducing the likelihood of configuration errors and ensuring a standardized computing environment.
• Zero-Touch Provisioning: Autopilot’s zero-touch provisioning capability enables devices to be configured automatically, requiring minimal interaction from IT administrators. This is particularly beneficial for remote or distributed deployments.
• Enhanced Security: Autopilot helps enforce security measures during the device setup, ensuring that devices are configured with the necessary security settings and compliance policies from the outset. This contributes to a more secure computing environment.

5. Windows Update for Business

Windows Update for Business seamlessly integrates with Intune, providing organizations with a comprehensive solution for managing Windows OS updates, including Drives and firmware updates. This integration extends the benefits of centralized update management, and flexible deployment rings into the Intune ecosystem.

Administrators can leverage the combined power of Windows Update for Business and Intune to establish tailored update strategies, ensuring that devices remain secure and up-to-date.

You can create Update Rings to manage Windows updates and use the Feature Update policy to handle the deployment of feature updates. This is a handy feature if you want to maintain consistency in feature updates across all your organizational devices.

6. Intune Cloud PKI

Microsoft Cloud PKI simplifies the management of intricate Public Key Infrastructure (PKI). It empowers you to create a Certificate Authority effortlessly, issue certificates to users and devices through Intune, and efficiently handle the entire certificate lifecycle, encompassing tasks such as Certificate renewal and revocation.

Microsoft released this feature in February 2024 as part of the Microsoft Intune Suite. If you don’t want a full license, you can purchase it as a standalone add-on license for $2 per user/month.

To use Intune Cloud PKI, you must Sign in to Intune admin center > Tenant administration > Cloud PKI.

7. Embedded Security Copilot Experience

Security Copilot leverages Gen-AI technology to enhance the experience of IT administrators in the security and management of end-user devices. Embedded Security Copilot Experience is launching in December 2023 as a private preview for select customers.

It will help administrators Identify and remediate issues faster by providing real-time information from the Intune admin center. It will also provide AI-driven recommendations for threats, incidents, and vulnerabilities.

Microsoft Intune Pricing

The Microsoft Intune license is billed per user per month. Various plans are available for Intune, each offering distinct feature sets and unlocking specific functionalities based on the chosen plan.

Intune Standalone Licenses	Price
Intune Remote Help	$3.50
Endpoint Privilege Management	$3
Enterprise App Management	$2
Advanced Analytics	$5
Cloud PKI	$2