Microsoft Intune Reviews

We use Microsoft Intune to manage mobile devices and distribute software. It helps us securely manage multiple vendors and operating systems.

Intune makes our organization more secure and flexible. We can onboard new employees faster and more securely. We are a governmental organization with strict regulations, and Intune helps us comply with those requirements.

The most valuable feature for us is mobile device management because it allows us to use multiple vendors and operating systems securely. I don't use Intune directly. My teams have used it, and I don't get any complaints about the user experience. 

Intune Suite's enterprise application management has made my life a little more difficult because now I know the kind of applications circulating in my organization. On the other hand, we started a program to fix the problem, and Intune helps us by providing us with insights.

Copilot helps because you can use the prompt to ask questions about the Intune-managed environment. That shortens the time we spend on reporting and that kind of stuff. Our analysis will be more efficient.

We would like to see the ability to use multiple personas on a device, similar to Samsung Knox, included in future updates.

I have used Intune for the two years I have worked for my company, but the company has been using it for longer. 

Intune's scalability is excellent. We are not a large company—only around 2,000 employees— and Intune handles our needs well.

Customer service used to be better, but as we are nearing the end of the contract, the focus on investing in us as a customer has diminished. It is what one would expect in such a situation.

Deploying Intune was difficult for me, but we have a deployment manager who handles it. 

We used multiple consultants, including Capgemini and KPN. Our experience with Capgemini has been positive due to a long-term relationship.

It is hard to quantify the ROI in hard metrics, but using Intune allows faster onboarding, increased flexibility, and more insight into device and software usage.

We are a governmental organization, so we can get discounts. Considering our environment, we get good value. 

I rate Microsoft Intune eight out of 10. Microsoft Intune fits well into our architecture, and they are developing new features like Copilot. It has contributed to the seamless integration with our existing setup.

We have hundreds of thousands of users, so we have to manage their devices, and Microsoft Intune plays an important role in managing those devices through deploying applications, operating systems, and security configurations. 

Microsoft Intune has transformed my organization. We are managing to scale the Intune deployment across all our regions efficiently. 

It works perfectly for our needs. Our organization's architecture is well-suited for Microsoft Intune. Given that we are a diverse organization, managing connectivity with our endpoints can be quite challenging. However, Microsoft Intune offers an ideal interface solution that meets our requirements.

It is a device management tool that includes all the features which were available in SCCM, such as OS deployment, user device enrollment, and Autopilot. These features are primarily important for us to do automated OS deployment.

As a user, I assess the user experience of Microsoft Intune to be seamless. Users have to log in with their email ID on the device itself, and the process is seamless. Their 365 is integrated, and Outlook is configured automatically.

Microsoft Intune is evolving. They are introducing new features every month. For instance, they integrated Copilot, among many other features added in terms of Apple and Chrome. These enhancements are being implemented gradually, and I believe they are actually improving the user experience.

Local administrators use this tool to connect with users, and they require a password to be reset or retrieved. It can be a bit inconvenient for them to log into Intune just to raise privileges and reset the password.

Their technical support can be improved. 

We have been using Microsoft Intune for Windows devices since 2021.

Microsoft Intune is stable and reliable. I did not find any anomalies with the solution that Microsoft has introduced. None of the market has reported downtime for longer periods, though they might have experienced something with very short notice, but they have not reported it.

It fits perfectly with the growing needs of my organization. 

When we raise a question or issue, it takes a longer time to resolve. I would rate the technical support a five out of ten.

Positive

We were using SCCM before Microsoft Intune. It was cost-effective to switch from SCCM to Microsoft Intune because it has no local infrastructure to manage. Earlier, we were paying to manage our SCCM across hundreds of primary and secondary servers globally.

I was the one who designed the solution for my organization. We only faced a challenge when trying to implement a hybrid solution because it wasn't feasible with our multiple forests. As a result, we had to discard the option for hybrid deployment. Instead, we decided to use pure Autopilot devices for the Entra join process. For the existing domain-joined devices, we opted for co-management. Ultimately, the primary authentication for these devices will remain with the domain, but they will operate in a hybrid state.

In terms of infrastructure costs, we were previously managing our SCCM across the entire group, which involved hundreds of primary and secondary servers for managing endpoints and distribution centers. When we calculate the total expenses, Microsoft Intune turns out to be quite cost-effective. In fact, entire regions have approached us to adopt Microsoft Intune, so I can see that the ROI is fully recoverable. 

We didn't have to pay anything for Microsoft Intune with our subscription.

We have not evaluated other options before choosing Microsoft Intune because it comes free with all our licenses distributed across our users.

I would rate Microsoft Intune a seven out of ten. There are many things they have to add.

We use Microsoft Intune for our mobile devices, including tablets and mobiles, across both iOS and Android. Our intention is to eventually use Intune to manage our laptop estate as well.

The integration into Azure stack and M365 stack is highly powerful. Additionally, no longer having to pay for a third-party MDM solution is a significant benefit. We also appreciate the conditional access rules and the basic Azure/M365 security scoring, which offer centralized control and the ability to manage policies from one point.

I would like more clarity on how Intune is migrating control from Active Directory group policies, especially as we move over to Windows 11. It seems inefficient to manage some settings in Active Directory and others in Intune.

I have used the solution for approximately just under two years.

I would rate the stability of Intune as a 10. We have not experienced downtime, bugs, or glitches. The only issues we encountered were during the initial setup.

I would rate the scalability of Intune as a 10. You can scale as much as needed based on the size of your tenants.

We use a third party for support instead of Microsoft directly. Our value-added reseller, who specializes in Intune, is excellent, and I rate them as a 10.

Positive

We previously used BlackBerry UEM. We switched to Microsoft Intune to bring our system under Microsoft and achieve more seamless integration. The cost is included in our licensing, eliminating the need for separate servers and complex configurations.

I have been in the IT field for 30 years, and the initial setup made me scratch my head, so we brought in a third party to help. The deployment stretched over several weeks.

We engaged a third party to help with the implementation.

Financially, we saved four to £5,000 a year on MDM licensing after switching from BlackBerry. The one-touch commissioning has also saved significant time by simplifying device configuration and maintenance.

We saved on licensing costs as Microsoft Intune is included in our existing licensing deal.

BlackBerry UEM

I recommend Intune but only once your M365 configuration is established to support it and after completing your Exchange Online migration. I rate the overall solution as a 10.

I use Microsoft Intune to Autopilot our devices and manage various configuration policies mainly on Windows PCs. It helps in efficiently deploying company configurations remotely.

Intune has streamlined our onboarding process. Most of our workforce is remote, and there typically isn't an office where they can pick up the devices. It's easy to ship them to any address and configure them remotely. 

The Autopilot feature is the most valuable because it saves significant time on managing devices. We can ship devices globally, and users can set them up on their own. It's convenient.

The user experience is pretty solid. We've gotten great feedback on the onboarding process and replacing devices. Every employee on the Windows PC has gone through Intune's Autopilot process.

Microsoft Intune could improve in reporting data for endpoints and fleets. Enhanced capabilities to run queries and gather specific device data to identify trends or issues would be beneficial. The feature parity for MacOS and handling devices from an MDM perspective is not comprehensive. Consolidation of these functionalities within Intune would simplify processes and finances.

I have used Microsoft Intune for about four years.

Microsoft Intune is very stable. I cannot recall any significant service outages in the last few years.

Microsoft Intune is scalable and handles our workload efficiently. Although our organization is not very large, we foresee continuing with Intune as it supports scalability effectively.

We do not utilize Microsoft customer service and technical support since it is generally a waste of time.

We used SCCM before, and now we are in a hybrid state, co-managing with SCCM and Microsoft Intune. The primary reason for the switch was the convenience of joining devices to our environment over the Internet.

 Microsoft Intune's initial setup was straightforward. It took some effort to configure it to a finalized version. Like every other piece of technology, it's constantly undergoing configuration changes. From an out-of-the-box perspective, it's super-easy to set up, but, you know, you have to continue iterating on it over time.

The implementation was primarily conducted by my team, especially my endpoint administrator on the Windows side.

Factoring in the setup time, we've saved about 1,000 hours in the last couple of years.

We spend a lot of money on Intune licensing, and some of our users have to be double licensed just because of how our dev and corporate environments are segmented.

I rate Microsoft Intune eight out of 10. Offering the same features for MacOS would make it a 10.

We use Microsoft Intune to enroll devices in our environment, install software, and monitor security patches.

In the past, our cumbersome OSD installation model using images made it difficult for IT to track installations and required users to visit the help desk for reinstallation. However, with Intune, employees can now conveniently manage installations themselves.

I have no complaints about the Intune user experience.

I appreciate Intune's Autopilot feature, which allows us to enroll devices and install applications to meet corporate requirements seamlessly.

I would like to see Intune improve its handling of hybrid domain joins. We continue to experience issues with machines losing their hybrid domain join status.

I have been using Microsoft Intune for several years now.

Intune's stability has been generally good, although recent issues caused devices to stop checking in and become unmanageable. We hope this is resolved before we begin redeployment.

Intune's scalability appears satisfactory, as we have not experienced any scaling issues.

Support has become more challenging to navigate over the past couple of years. It takes some effort to engage the right level of support, but once the right person is contacted, support works well.

Neutral

Before Intune, we used the OSD image approach. We switched to Intune for end-user ease of use and to lessen the burden on support teams.

The initial setup was fairly straightforward.

We did the implementation in-house ourselves.

We did not evaluate other solutions because Intune was included with our Microsoft 365 solution.

Overall, I like Intune as a solution and would rate it nine out of ten. The rating isn't a ten because we haven't enrolled our entire environment in it yet, but so far, it looks promising. It might reach a ten at some point.

We have over 50,000 employees and 75,000 machines.

We use Microsoft Intune to manage mobile devices across almost all platforms, including Android, Windows, and Linux, which was recently added just a few months ago.

Previously, we relied on on-premises infrastructure using SCCM to manage mobile devices alongside other tools. Intune is a cloud-based solution that empowers administrators to manage cloud devices, implement policies, and deploy applications. While other MDM platforms exist, Intune is a top choice due to its feature set.

Microsoft Intune consolidates our endpoint and security management tools into a single platform. While still under development with new security features on the horizon, the current capabilities offer administrators ample tools to fortify the environment.

Intune simplifies mobile device management by consolidating endpoint and security tools into a single platform. This centralized approach enables IT administrators to efficiently manage various aspects, including Windows updates, Wi-Fi and VPN policies, application restrictions, and user account creation, all within the Intune interface, significantly streamlining the overall management process.

The user experience is quite smooth for most users because administrators handle all necessary configurations. Options like Windows Autopilot and zero-touch deployment enrollment significantly simplify the process, minimizing user intervention and effort required to set up and use devices.

I currently support Microsoft admins and have handled numerous cases related to Enterprise Application Management. Many companies utilize this tool to manage their in-house applications. While not all companies employ this method, most larger organizations do. These companies often deploy their enterprise applications using Intune, which offers a feature that allows admins to protect application data through mobile application management policies. To enable MAM, applications must be wrapped with the Intune Software Development Kit to communicate with Intune services. This process is valuable as it empowers admins to safeguard sensitive data. Intune provides SDK options for both iOS and Windows applications.

There are two methods for automatically updating the application: independent updates within the application itself or updates to the application package managed through Intune. The chosen method depends on the enterprise application's configuration. Recently introduced Azure application registration simplifies the process by requiring registration before deployment, enhancing security through authentication.

We utilize advanced endpoint analytics within the Intune suite, and the recent release of Windows Autopilot's version has expanded the range of analytics tools available to administrators. While Intune provides data on devices and users under its management, more in-depth reports can be accessed through Log Analytics or Azure Monitor. However, Intune's analytics are sufficient for gathering reports on managed devices.

The advanced endpoint analytics feature within the Intune suite allows us to access detailed information about our devices. This includes data on device counts, specific settings for bulk administration or devices, and the ability to filter devices based on our needs.

I have experience with several MDM solutions. While Microsoft Intune is excellent for managing thousands of user devices, it may not be ideal for specific use cases like bulk printer or Jabra device management, which could present challenges. However, Intune shines in organizations with large numbers of users, especially when integrated with existing on-premises infrastructure or SCCM. This integration can streamline operations and reduce staffing needs. For example, a ten-person IT team might only require two to five people dedicated to Intune management with on-premises support. While I cannot provide a full sales pitch, I confidently recommend Intune to anyone seeking a robust MDM solution.

Copilot in Intune is valuable when integrated with back-end data, such as our existing tools and libraries. This integration empowers administrators to assess information effectively. However, the tool's effectiveness hinges on the quality of data input and query formulation. As users are still familiarizing themselves with Copilot, its adoption varies across environments, with some users enabling it and others disabling it.

Copilot in Intune simplifies IT operations by quickly responding to inquiries about integrated systems. Users won't need to search for specific details as Copilot offers a variety of solutions.

Intune offers more than device management; it also aids in user management. Regardless of the platform, Intune provides various options for device enrollment. Intune prevents mixing personal and corporate data, whether using a corporate or personal device. It also offers robust security features, enabling granular control over user access to applications, resources, and other tools.

In a hybrid environment, security management depends on whether devices are co-managed and how policies are configured in Intune. Intune offers various features, including remote actions, to address these scenarios. However, I discovered an issue with BYOD devices on iOS: wiping an enrolled device deletes all data, not just corporate data. This is a problem that needs to be addressed internally.

With the endpoint privilege management feature, the admin can create an EPM policy. If a user tries to access a resource, the admin will be prompted to grant or deny access based on the policy.

Suppose I need to access data, logs, or files on a Windows device that a global administrator restricts or requires approval for. In that case, I can configure an EPM policy to remind users that additional authorization is necessary. For instance, I encountered cases where users frequently mistakenly assigned test applications to production environments. To prevent this without restricting access or privileges, we configured an EPM policy to prompt users specifically when assigning that application to a production environment. This approach demonstrates how EPM policies can be tailored to address various requirements.

EPM provides an additional layer of authentication for accessing a resource, application, or permission. For ASR, we can define rules by which users can access the resources.

Intune has significantly improved productivity by simplifying tasks like certificate authority restoration. For example, using a deployed CA server certificate, I've set up a Wi-Fi profile with auto-authentication. Previously, expiring certificates required manual reissuance, but Intune automates this process by revoking certificates when they approach their expiration threshold. This threshold, configurable within the certificate profile, can be set as a percentage of the certificate's lifespan. A revocation request is triggered when the threshold is reached, ensuring a new certificate is issued for the device or user profile before the old one expires.

Intune's integration with Microsoft 365 and Microsoft Security for both cloud and co-managed devices is beneficial because it offers a centralized platform. We can directly assign licenses within Intune instead of using the separate M365 admin portal to create users, simplifying the process. Intune synchronizes features and functions from M365, streamlining management. However, purchasing new licenses still requires accessing the admin center. Despite this, Intune effectively synchronizes information to endpoints.

While conditional access isn't solely limited to Intune, we can also effectively implement and manage conditional access policies through Azure. However, Intune significantly simplifies application deployment, mobile application management, and policy enforcement, such as restricting user access to specific applications, thereby enhancing overall environment security. Furthermore, Intune automates numerous tasks previously requiring manual configuration by administrators, streamlining the process by creating simple policies for desired outcomes.

There are specific devices we can focus on. For example, due to GMS restrictions in China, we face limitations. However, BlackBerry UEM can enroll Android devices as Android Enterprise, though the exact method is unclear. We could explore whether Intune can replicate this functionality. Since GMS is unavailable in China, we currently rely on device administrator enrollment for managing Android devices there. This suggests potential opportunities to develop solutions or collaborate with Chinese partners to create new features within Intune for managing Android devices in the Chinese market.

I have been using Microsoft Intune for three years.

While some specific tenants experience occasional outages and bugs, our monitoring team is actively tracking an upcoming issue affecting certain tenants in specific regions. Both the support and broader teams are diligently working to resolve this. Aside from this, Microsoft Intune is demonstrating overall stability.

If an organization has the budget, they can easily scale Microsoft Intune.

Microsoft's technical support for Microsoft Intune and the broader Microsoft environment consists of several tiers. Customers can choose between broad commercial support, Pro support, or Premier support, the latter including dedicated Customer Success Account Managers and Incident Managers to facilitate access to specialized engineers. Support engineers are categorized into levels one, two, and three. We collaborate weekly with global subject matter experts to address ongoing issues and cases. For complex or backend problems, we engage the product group using a specific request form. While Microsoft previously employed support staff primarily in the US and Canada, they now utilize vendors in India and the Philippines, offering varying levels of expertise. To enhance support quality, Microsoft should invest in training these engineers and consider opportunities for full-time employment, rather than incurring the costs of recruiting and training new staff.

Positive

An organization migrating to the cloud typically requires an Azure subscription as a starting point. While our FastTrack Team offers full migration solutions, IT administrators can also independently move operations to the cloud by purchasing an Azure subscription, tenant, and licenses and configuring policies, privileges, and workloads. Existing on-premises infrastructure can be synced to the cloud using Azure AD Connect, enabling management within a hybrid or pure Azure AD environment. The ease of migration depends on the administrator's experience, and Microsoft support is available for those requiring assistance.

One to two solution architects are enough for the deployment.

Several factors influence the time required for deployment. For instance, with a user base of 100, deployment can be achieved within a week. However, environments with thousands of users and devices, especially on-premises setups, present greater challenges. Customers or administrators migrating to the cloud and adopting Intune often follow a phased approach. They typically start by deploying and testing a subset of policies to assess manageability and feasibility before proceeding with application deployment. As a result, the overall deployment timeline varies significantly across organizations and can extend to several weeks.

Microsoft services are slightly more expensive than competitors but offer advantages and disadvantages. Even if they charge a premium, they aim to provide equal value.

I have experience with SOTI MobiControl, Jamf Pro, and AirWatch. SOTI MobiControl excels at managing specific devices, offering a list of compatible models upon request. Intune, however, struggles with printer management and Zebra device compatibility. Its network security features are limited due to ongoing development, and it lacks in-built policies for third-party applications, hindering compatibility and communication with external devices and manufacturers. While custom policies can be implemented, comprehensive built-in options would be beneficial.

I would rate Microsoft Intune eight out of ten.

Intune requires no maintenance after initial deployment, but ongoing subscriptions are necessary for each user as individual licenses are needed monthly. Microsoft continually updates the service to support the latest operating systems and applications, so ensuring our environment is up-to-date is crucial for optimal performance.

Microsoft Intune is a good tool, and to simplify operations, I recommend a full cloud environment over a hybrid environment.

We use Intune for security or endpoint inside the company and especially for many customers we have.

Microsoft Intune has helped us by improving our security posture, leading to fewer security problems, and helping us understand where we have issues. 

Intune's compliance features are valuable because they allow for immediate visibility into ongoing situations. The solution is very easy to use. We haven't implemented Microsoft Copilot but will adopt it next year. It will be interesting to use natural language to interact with Intune.

It would be interesting to integrate the server side of Intune. Some group policy updates we have on the Windows Server side and possibly some on the client side could also be included.

I have been using Microsoft Intune for about two years.

Microsoft Intune is very stable.

The scalability of Microsoft Intune is good. We don't have large customers, so we haven't seen any issues with scalability.

I rate Microsoft support nine out of 10. Customer service and technical support are good. The technical support from Microsoft and Infineon Technologies is also good. The quality and professionalism of the people are really good, although sometimes we need to escalate to get the right content and answers.

Positive

We previously used a solution from an older competitor that is now defunct.

We did not use an integrator, reseller, or consultant for the deployment because we are an integrator.

Our customers have seen a significant return on investment because they now understand and see where the problems are on the endpoints without needing to search the entire company.

We know the pricing is good because customers are not complaining about it.

We directly switched to Microsoft Intune after receiving good feedback from customers.

I would rate Intune eight out of 10. Some features could be added, but it is a rock-solid solution.

We use Microsoft Intune to manage our customers' end-user workstations. Specifically, we use it for mobile application management, managing personal phone devices for iOS and Android without enrollment, and configuring app VPN through the Intune tunnel server. We also manage Microsoft Teams for mobile application management and use it extensively for Windows devices.

Microsoft Intune has helped by making additional access based on corporate owned devices or managed devices, which prevents our IT admins from accessing specific organizational resources unless using these secure devices.

Intune enables us to deploy applications to devices remotely without touching or interacting with the end user. We can also configure some profiles, like Wi-Fi profiles, for specific branches without additional configuration from the end user. It's easy for end-users to adopt changes or merge branches. Also, you can predefine the applications so they automatically download when the user joins that branch.

Microsoft Intune offers features such as mobile application management and always-on VPN for Windows, which are valuable for managing customer devices and ensuring efficiency. It also aids in application deployment and configuration without requiring direct user interaction, simplifying the integration of new devices and systems.

We use endpoint analytics to analyze the user performance on their machines or  app crashes. We can also evaluate Windows startups to detect if there are some user problems or if it's their workstation performance. We can be more proactive about improving our user's work infrastructure. 

We use enterprise application management for app patching, but it needs to include more applications. Some important applications are not part of the enterprise app management, but we hope they will be added soon. We appreciate the automatic updates and discovery of installed applications and older devices. Automatic patching will help us keep the devices and applications up to date to detect newly discovered vulnerabilities. Copilot helps us generate reports about compliant devices and software installed on specific devices. We can also track the device's compliance state. 

Improvements are needed in Microsoft Intune's enterprise app management, including support for more applications in app patching, boot batching, and discovery. I also hope the cost of Remote Help will decrease because it's a much-needed Intune function. Our customers need that capability, or they will buy it from a third party at a premium. 

We have used Microsoft Intune for around three years.

Microsoft Intune is very stable due to its cloud-based infrastructure and its reliability in performance.

Microsoft Intune's cloud-based nature ensures it is highly scalable, supporting a large number of devices without performance issues.

We do not often rely on Microsoft Support. Sometimes response times can be long, but generally, they are helpful in resolving issues.

Neutral

Previously, we used solutions like ManageEngine and Endpoint Central. We switched to Microsoft Intune to better support enterprise customers needing fully managed devices like iPads for secure environments.

The initial setup of Microsoft Intune was straightforward, thanks to its various enrollment methods.

We are a consulting partner, providing implementation services for Microsoft Intune.

We've seen a return on investment through enhanced security, as Intune allows access to critical systems only through corporate-owned devices, integrating well with Microsoft’s ecosystem to protect company assets.

The default capabilities of Microsoft Intune are reasonably priced, but the Intune suite and add-ons, such as batch management and remote help, are costly, leading customers to consider third-party options.

Before switching to Microsoft Intune, we considered ManagerEngine. Eventually, the decision focused on Intune specifically to meet enterprise requirements.

I rate Microsoft Intune eight out of 10. I deduct a couple of points because key features like application patching and Remote Help need to be purchased separately.