Microsoft Intune Reviews

We use Intune to deploy and manage applications to devices based on our client requirements and needs. We handle a lot of use cases, especially with regard to Microsoft Edge. Recently, we have deployed BitLocker and Docker encryption using Intune. We utilize Intune to patch and onboard Defender and Core Endpoint. We apply Intune to laptops, mobiles, and tablets, including iOS and Android.

Intune has automated the deployment of patches and applications, which is more efficient and easier. It allows us to deploy applications, packages, Windows updates, and security updates like BitLocker encryption more efficiently and easily.

The most valuable feature currently is the BitLocker encryption. Most clients in the Philippines are moving to BitLocker encryption via Intune, transitioning from any existing third-party encryption tools they may have.

The most significant challenge is reporting and monitoring. The reporting accuracy for deploying applications and all aspects of Intune needs to be improved. Intune is less admin-friendly than SCCM and WSUS systems. In WSUS and SCCM, you can classify the updates you want to deploy to the endpoints, whereas Intune only has quality updates, definition updates, etc. I rate the admin experience seven out of 10. It's not terrible, but there is room for improvement. 

We've used Microsoft Intune for nearly 10 years now.

I rate Intune eight out of 10 for scalability.

I rate Microsoft support eight out of 10. Microsoft's engineers provide varied approaches and knowledge about the product.

We are resellers, consultants, and they often refer to us as implementers. We handle the solution and technical support.

I can rate Microsoft Intune eight out of 10.

I am using Microsoft Intune at my site, where my company, we have 450 clients, and we manage their accounts using Microsoft Intune. I have credentials from the company, and I'm managing them using these credentials. Under my supervision, there are one hundred and fifty devices.

Using Microsoft Intune, it has streamlined the process from manual to automated for managing users, applications, and data. This simplification allows us to handle everything from a single interface, eliminating the need for manual, one-by-one handling. This change has been significantly beneficial.

I particularly appreciate the administration and security features, which can be deployed easily. 

They are user-friendly, easy to understand, and convenient for managing user accounts. Deploying company policies for users is very efficient, and we can easily administer tasks, which is a positive aspect of Microsoft Intune. 

It's quite convenient and easy to manage, allowing us to handle multiple users and their applications without putting in much effort. This has improved our user management by enabling us to do so from one point, reducing the need for previous multiple software.

The security aspect could be more effective. We are using other applications to manage network devices and groups, so if Microsoft Intune could improve in this area, especially on a network level, it would be a real advantage.

I have been using Microsoft Intune for two years.

I would rate the stability of Microsoft Intune around seven and a half out of ten. While generally reliable, there are instances like the global incident with Microsoft where some time was required to resolve the issue.

I would rate the scalability as eight out of ten. Microsoft Intune effectively handles scaling as required by our organization.

I would give an eight out of ten for customer service. Microsoft support is generally helpful, although there was a delay during a significant incident affecting many clients.

Positive

We were using six different applications to manage data, policies, and users. Microsoft Intune has consolidated these into one platform, which is more effective, saves time and cost, and requires less storage.

The initial setup was fairly straightforward. It required staff training and a transition period of about 45 days to move from previous applications to Microsoft Intune.

I cannot provide specific details on costs or pricing since I do not directly deal with that aspect, however, the organization is satisfied with the pricing.

I would recommend Microsoft Intune because it's an all-in-one solution that simplifies task management across organizations. 

For overall value, I would rate it eight out of ten.

We use Intune specifically for device management and patching, as well as with Autopilot for device configuration and deployment.

Intune has significantly benefited our organization by providing comprehensive visibility into our device ecosystem. This enhanced oversight has led to cost reductions, improved operational efficiency, and a deeper understanding of our IT environment.

Intune's most valuable features are its device management capabilities, particularly its centralized integration with other Microsoft stack components. 

Intune could be improved by expanding its third-party patching capabilities for a more comprehensive solution. Currently, we must utilize external resources to manage certain tasks across our environment. Furthermore, user functionality and feature sets could be enhanced, especially as we prepare to deploy Intune on Mac devices.  

I have been using Microsoft Intune for over a year.

The stability of Microsoft Intune is good.

Microsoft Intune is scalable.

We don't rely on Microsoft for support because, as their top partner, our team possesses extensive Microsoft expertise. Generally, issues are minor and resolved efficiently in-house.

Positive

We currently use Ivanti for some patching and third-party solutions, and Jamf to manage Macs due to limitations in Intune. However, since Intune is included in our Microsoft 365 E5 package, we are motivated to consolidate our toolset.

We have seen a return on investment from the device deployment aspect, with less hands-on touch required when deploying devices.

I rate Microsoft Intune eight out of ten.

I would rate the Intune user experience an eight out of ten.

We plan to implement Intune's advanced endpoint analytics feature next year to gain deeper insights into our environment. This will enhance our understanding of its performance and health.

Our organization is currently deploying Intune's public key infrastructure for cloud applications.

Our customers primarily use Microsoft Intune for core management tasks, often in conjunction with System Center Configuration Manager, especially for Apache-related matters. Intune is also crucial for mobile device management, policy deployment, and ensuring robust security, particularly when activating and deploying security features like Defender to endpoints.

Some of our customers implemented Microsoft Intune because of integration issues and old legacy operating systems.

We use Intune in on-premises, cloud, and hybrid environments.

Intune brings all of the endpoint and security management tools into one place. They have also integrated it with non-Microsoft operating systems, which is a huge plus.

Consolidating endpoint and security management tools into a single platform offers significant benefits for our IT and security operations teams. With centralized visibility, they can gain better control over their systems, identify potential vulnerabilities, and take proactive measures to protect customer data. This enhanced oversight empowers them to address security gaps effectively and ensure a more secure environment.

From the user perspective, the Intune experience is exceptional for those familiar with it. However, for those still learning the technology, it suggests that Intune is user-friendly and straightforward to comprehend.

Intune offers administrators enhanced visibility, control, and ease of management. Patching and updating devices is streamlined, while end users benefit from simplified onboarding, intuitive usage, and robust security features like conditional access.

Intune is essential for safeguarding data on company and BYOD devices, especially in hybrid environments.

Intune significantly enhances IT productivity within our customers' organizations. Before Intune, administrators often struggled with visibility and management, particularly for mobile devices and laptops. They wasted time searching for assets and deploying numerous tools to achieve visibility and enforce management policies. Intune streamlines this process by eliminating the need for hundreds of agents. Simply implementing Intune provides the necessary visibility and management capabilities.

Intune offers significant cost savings. By comparing its licensing model to third-party solutions, we can easily see the return on investment in terms of reduced business expenses. Intune can help businesses save between 35 and 45 percent.

Intune simplifies vendor management by providing visibility into end-of-life dates for most hardware, especially laptops. This makes it easier for administrators to monitor the support status of both software and hardware. By tracking updates and end-of-life information from various vendors, administrators can easily view this data in a consolidated summary.

Before implementing Intune, their security posture was significantly lacking, with most organizations scoring below 20 percent. However, after Intune deployment, especially for banks, compliance became a crucial factor. Intune’s recommendations on improving security scores, particularly Secure Scores, have been instrumental in boosting their ratings to between 75 and 85 percent.

The consolidation has impacted licensing costs due to centralized oversight and dashboards. This raises questions about whether we should continue with the current approach or explore alternative options like Microsoft or a more standardized solution. There is a significant cost advantage to vendor consolidation and visibility.

The core management feature in Intune is invaluable to us, especially considering the challenges we often face with System Center when pushing external updates. Intune has proven to be a game-changer for me in this regard.

Intune's privilege management feature, while beneficial, is less intuitive than other Intune features, making it challenging to use. To improve this, more demonstrations and technical sessions would be helpful.

If Microsoft offered a standard license trial that allowed customers to experience its capabilities, customers would be more likely to purchase Intune.

The technical support has room for improvement.

I have been using Microsoft Intune for six years.

I've never encountered any performance problems with Intune. The largest deployment I've undertaken was for ten thousand devices, and even then, I experienced no issues with the Intune platform.

Microsoft Intune is highly scalable.

We encountered an issue once, but unfortunately, we had to seek support on our own. Therefore, Intune support is particularly challenging.

Neutral

We use VMware, Citrix, and various other third-party tools for MDM. These tools include Qualys, GFI, Managed Engines, and others, each offering different functionalities and service levels.

Intune offers a more straightforward licensing process than other vendors. Additionally, its integration capabilities, especially with Microsoft products, are generally smoother and less problematic than many third-party solutions. This allows for a more direct and measurable path to success, enabling users to assess their progress even in the early stages of implementation. 

I have been familiar with Microsoft products for some time, making the initial deployment of Intune relatively straightforward. We begin with a customer immersion session, where we sit with the client to conduct a workshop. This workshop ensures they fully understand the Intune solution's capabilities and limitations. We then establish clear objectives and goals for successful deployment. Our engineers work closely with the customer on-site, deploying the solution and training designated champions to assist user adoption. Following this, we provide comprehensive training and a transition period for the entire organization.

The number of users in an organization determines the number of people needed for a deployment. For organizations with fewer than 500 users, a team of five to six people would suffice. However, organizations with more than 1000 users may require a team of ten.

I would rate Microsoft Intune eight out of ten.

Intune's low maintenance requirements make it a valuable asset for our clients. Once implemented, Intune typically requires minimal ongoing maintenance, ensuring a smooth and efficient experience.

The integration of Intune's capabilities with Microsoft 365 and security for both cloud and co-managed devices is crucial as we transition to the cloud. Intune's visibility into devices provides significant value, and neglecting this integration would be a disadvantage for administrators as cloud-based management becomes the norm. Therefore, incorporating Intune into your cloud migration and strategy is essential for effective device and mobile phone management.

I highly recommend Intune to others. Its visibility feature is imposing. With visibility comes control, and a quick demo can showcase the potential benefits. By highlighting the need for more visibility in their current setup, it's easier to convince them of Intune's value. This also simplifies discussions and makes the decision-making process smoother.

We use Intune to manage devices and configurations on all platforms, including Windows, iOS, iPad, and Android. It also provides conditional access from the Azure portal. We have also used Intune to bifurcate data and data transfers. We have an Intune entry list that shows the device count and bandwidth of each, so we can manage the data flow from every device based on whether it's corporate or personal. 

Intune is flexible. If you want to move a device that was previously on-prem, we can bring it to the cloud and apply all the policies. This is helpful for even those organizations that were on-prem and not on the cloud. They can also come and use these features, which are pretty cool and would be handy to protect the data and manage the devices as well.

It's handy to manage all the hybrid devices that are on-prem and in the cloud. If a user accesses company resources on their work profile or their personal devices, they can register the device in Intune and access the company data. Intune is a crucial part of the overall structure because we can use it to analyze risks and threats coming into our organization and predict what will be vulnerable. It's necessary to analyze all those things from a security perspective.

Intune's advanced endpoint analytics require a separate license. We are keen to use that one because it comes with more features, flexibility, and control for admins over the devices. We haven't used it, but I've tested it on my tenant with a few devices

It is much easier for admins to use that cloud PKI infrastructure compared to when we had to set up all those things using our Skype profile from Intune. It's quite handy. It takes a little work on the admin side, but the whole structure is the same.

Intune drastically improved our productivity. Work that was previously completed in four hours could now be finished in one. It saved our IT admins many hours of work. Once we migrated from our on-prem servers to the cloud, the Cloud PKI saved us a lot of money. I don't know the numbers, but we are saving so much money because of this. 

The best part of Intune is application deployment. We can deploy an application to several users with a single click. We can use conditional access, granting access to users based on certain conditions, such as location, platform, etc. 

With the help of Microsoft Defender, we can bring each endpoint or node under  Intune's umbrella and manage it through Defender. The most effective feature for managing mobile devices is the compliance policy, which mandates that any user on a particular device should be compliant. It should meet the requirements the company sets and be upgraded. The user should meet all these security criteria we have implemented. 

Intune's app management can support our business operations. For example, if a user wants an Android app, we can deploy it through the Android store, but if we're talking about any MSI on a public-facing platform, we can convert it into Win32 and deploy it to the whole enrollment. Intune is quite flexible.

Compared to another Indian MDM tool I use, Intune provides more flexibility for security. The Microsoft name assures us that our data will be protected. Control over data is the main concern on the cloud.

The reporting causes problems because we're trying to gather data to present to the management, but we can't get the data they request. If a user has removed an application from his device, but it won't report it at exactly the right time. It takes time to sync from the device to the portal. Let's say we are preparing a list or deck for the number of compliant devices that meet all of the organization's requirements. In a real-time scenario, that device could be compliant, but it is showing as non-compliant on the portal. It sometimes hampers the overall decisions that we make on our end.

I have used Intune for four and a half years.

I rate Microsoft premium support nine out of 10. Their premium support is top-notch. They build a bridge to resolve the issues. Standard support varies, depending on the engineer you get. It could range from six to eight out of 10. 

Positive

Previously we used SCCM. It's a Microsoft solution, but Intune's user experience is much better because it's cloud-based and it's more cost-effective. 

Deploying Intune is pretty simple for someone who is experienced with the program. The admin needs to know the basics. Otherwise, it's user-friendly. The time needed to deploy depends on the network, but if everything is perfect, it only takes five to 10 minutes to deploy an application on a Windows device. An Android device is in a similar range. In some weird scenarios, it may take 15 minutes. It doesn't require much maintenance after deployment because it's cloud-based, so we don't need to update anything.

Intune cuts the amount of time we spend on these tasks in half.

Intune is a better value than SCCM or other management tools because we can integrate more with Intune. 

I rate Intune eight out of 10. I would recommend Intune to others. Microsoft offers many new handy features, such as the ledger and the ability to locally administer managed devices. It doesn't require much hassle to set up these things. It's worth the price.

Its price is reasonable. It is a part of our M365 suite.

I have not been satisfied with it, and I am planning to change it soon. There are a lot of updates coming from Microsoft that suddenly affect our security policies. With each update, a new feature is introduced. However, there's often no clear advice regarding these changes. If we encounter a problem, we have to rely on the Microsoft Community to discover that a new feature has impacted our security policy, at which point we need to make adjustments. That's why I plan to position our operations around an agnostic tool.

Overall, Intune is quite complex, especially if you have conditional access associated.

They can cover Apple iOS in the future to enhance its functionality.

I have been working with Microsoft Intune for more than 5 years.

The kind of issues I face include a lot of updates coming from Microsoft that all of a sudden affect our security policies.

Technical support by Microsoft is okay.

Neutral

We are not using Microsoft Intune for patch management. We are looking into Kaseya. I am satisfied with Kaseya, which is why I would like to further evaluate standardizing Kaseya across the organization. I don't want to utilize Microsoft Intune because I prefer an agnostic solution rather than one that is heavily reliant on a specific brand.

Its deployment was neither easy nor difficult.

I don't have any problem as far as cost is concerned. It is bundled with our license. 

I would rate Microsoft Intune a seven out of ten.

With Microsoft Intune, I can leverage all platforms including Mac, Linux, Android, and Windows, especially Windows and Android. Our organization uses the Windows environment and Android applications on Android operating systems, so Microsoft Intune is ideal for us.

I have experience with Jamf Pro and Microsoft Intune. Both Jamf and Microsoft Intune are separate products. When comparing Microsoft Intune to Jamf, Microsoft Intune is superior. Jamf is only for the Mac environment, however, with Microsoft Intune, I can leverage all platforms including Mac, Linux, Android, and Windows.

Sometimes as per our expectations as an IT person and decision-maker, I want to implement certain policies and spread them to all devices enrolled in Microsoft Intune. However, implementing some policies is not possible. For example, with BYOD enrollment, I install the Microsoft Intune application and enroll the machine. Once completed, I attempt to implement the BitLocker policy. Currently, BitLocker does not support BYOD enrollment, which is a product limitation.

We face multiple scenarios where IT decision-makers request specific policy implementations, however, due to product limitations, we cannot fulfill these requests. The limitation primarily affects BYOD enrollment and personally owned devices. While it works well with corporate devices, we cannot enforce multiple policies on BYOD and personal devices.

As per the customer perspective, some changes are needed as product limitations can be restrictive.

For example, with Teams, I am currently using the application in my company for communication. One of my clients in Europe uses Google Workspace, not Teams. When sending meeting links between platforms, synchronization issues occur. If they use Google Workspace and G-meet, they cannot open Teams meeting links directly. They need to open it in a separate browser or install additional software. Better integration between these platforms would be beneficial.

I have been using Microsoft Intune for the last two years.

Overall, the stability is good, although I occasionally face challenges. During those times, I raise a concern ticket with a Microsoft representative, and someone from the team helps resolve the issue.

Support overall is good. 

Sometimes we want extra features and capabilities. When I raise a ticket regarding these requests, someone from the team informs me that it is a product limitation and we must wait for potential backend changes to enable such functionality.

Positive

I am already working with both Jamf Pro and Microsoft Intune. In Microsoft Intune, both Jamf and Intune are separate products. When comparing Microsoft Intune to Jamf, Microsoft Intune is superior. Jamf is only for the Mac environment.

The setup is straightforward. From the portal itself, if I purchase the licenses from the partner, I will inform my partner who will raise it for me. If I purchase from Microsoft directly via credit or debit card, I can raise the ticket from the Microsoft Intune portal.

The pricing is more costly compared to existing players in the market.

I would rate Microsoft Intune an eight out of ten. 

I have concerns regarding Microsoft Intune. It needs to reshape features. In Office 365, I also have concerns that need to be addressed. 

Our main use case for Microsoft Intune is patching. We use Microsoft Intune for patching, specifically Windows patching.

The user experience of Microsoft Intune is quite good because there's not much disturbance in the background; it's just running in the background.

The most valuable features of Microsoft Intune include remote updates. The update runs in the background, so there's no need in most cases to go on-site to do it.

Based on my experience and my team's feedback, one thing that could be better in Microsoft Intune is the file size, as it is quite large at times. Sometimes the file size is too large. The space taken on some hard disks may be too large for the patches that run on them, as we're limiting all these local storage to encourage our users to store on OneDrive rather than on local drives.

For additional functionality, I suggest that Microsoft could expand on asset management. Since the platform is there, they could develop it into a full-fledged asset management system.

I've been working with Microsoft Intune for around a year.

It's stable. I would rate the stability of Microsoft Intune a nine out of ten.

Technical support from Microsoft is quite good, especially because we subscribe to the premium services.

We are currently working with a hybrid deployment model. It's a hybrid because our Active Directory is still on-premises, but other services are online.

As for advanced Endpoint Analytics in the Microsoft Intune Suite, we are still working on it. We only completed the implementation for the basic functions at the end of last year. We are moving in stages.

I'm not sure about the pricing of Microsoft Intune because I didn't buy it. My team members bundled it together with their Microsoft solutions, including Microsoft 365 and related products.

I haven't used different solutions similar to Microsoft Intune or made any comparisons with other products at the moment. In the past, the nearest solution would be BigFix, but you cannot compare it to Microsoft Intune because BigFix was an older system, and you needed more technical knowledge to run it. You needed to know how to do scripting and related tasks.

If they could also make Microsoft Intune a full-fledged asset management system, it would be the best.

I would rate Microsoft Intune an eight out of ten.

We are a Microsoft vendor, not an Intune user. I have deployed Intune for several customers who use this product for business. Our clients use Intune for device management and data security, which gives them control over end-user devices.

Previously, we used a device manager and had a local Active Directory. However, most of our SME customers do not have a local Active Directory set up in their organization that allows them to control their devices. Intune does not require any local AD. It's a cloud application. We can directly join the user devices to the cloud, and the organization manages them. We have enterprise customers and also SMBs, but most of our clients have less than 100 users. 

One of my Indian clients previously had all their devices at the workplace. None of the devices were joined to an Active Directory, so they had to install applications on each device individually. With the help of Intune, we could push the applications to all the portal users simultaneously. 

We have to create a group, assign an application to it, and automatically install it on the user's devices. We also apply the company logo and desktop wallpaper via Intune, which a tech user can change. We can also find the exact location of the devices where the user is sitting.

We also have the option to enroll hybrid devices with Intune. We can enroll users'  devices and separate work and personal data. The devices on the local Active Directory can be joined to Intune. 

Privilege identity management helps. Let's say someone is a company administrator for five to ten days. We can create a dual administrator role for that user for seven days. I can create a PIM role and assign it to the user for seven days, after which the role will be deleted automatically. 

Intune provides routine management of user devices. Once the device is not enrolled in any domain or Active Directory, the IT person must delete every user device to change anything. Intune can work on all those things. That device can be updated and marked as non-compliant. If someone is using Windows 7 or a version of Windows that has been deprecated, we can restrict Windows 7's user ability to log in to the work environment. We can control all this over the admin panel.

If we scale 10 to 50 percent, where new customers manage all their devices. After enrolling all the devices, this work can be done with only one or two people, saving the organization money.

The best part of Intune is device control. If we need to block a user from opening something in their organization's system, we can do it from Intune. If we want to restrict the movement of an organization's data to prevent users from copying the data into Outlook, WhatsApp, or their personal Gmail, we can limit that via Intune. It secures all corporate data.

If they share the data with someone outside the organization, that external person cannot see it until an analyst provides them with access or creates a policy. 

The user experience is good. Users are happy that Intune is managing their work devices. In addition to Windows devices, we can control iOS and other mobile devices. There are good features for managing mobile devices. Work data is stored in different containers, making it easier for users to find their work data. 

In the case of application deployment, we have more services like application updates and patches that can be implemented from the Intune portal. We do not need to outsource these tasks to the device user.

We are currently unable to control aspects of group policy from Teams like we can for GPO. They are still not part of Intune. Microsoft is adding this, but it's currently in preview, and few GPO features have been added to the product. 

I have worked on Intune for the last two years. 

Intune is a stable solution with a lot of capabilities. Most customers who are moving to Intune are also exploring the capabilities of the cloud. 

I rate Intune seven out of 10 for scalability.

I rate Microsoft support eight out of 10. Microsoft is good, but Intune support is delayed compared to other products. If I make a support ticket on the Intune portal, I get a reply after one or two days. For Exchange or SharePoint, I get a response after an hour, but Intune takes a minimum of a day. 

Positive

One product we can compare Intune with is Jamf Pro. Intune has limitations when managing Mac devices. You can enforce fewer policies because Apple has its own hardware and software. There are lots of limitations of control. Most of my clients use Intune for Windows and Android devices, but Jamf Pro if they have Mac devices.

Deploying Intune is a little complex but not too complicated. At the time of deployment, there is much work to do to join a device to Intune. We have to create a new Windows profile and make users log into the enabled Windows profile. We need to configure all the Office applications and copy users from one to another. It takes 30 to 40 minutes on a single device. 

Intune requires some maintenance, but the customer performs the maintenance once we implement it. We support the customers with issues while they are enrolling the device.

I rate Intune five out of 10 for pricing. It's expensive. 

I rate Intune 10 out of 10. I recommend Intune to every organization that wants to secure user data and control endpoint devices. It can manage other platforms on the market. Google has device management software, but it doesn't have the same scope as Intune. 

It's cost-efficient and cheaper than the other device management and third-party applications available. Intune can control most things, especially Windows devices. Intune has the best compatibility with Microsoft Windows.

The main use cases for Microsoft Intune are to manage all types of devices, especially Windows.

The selling points for Microsoft Intune are very good. You don't have to enroll the devices, however, you can still push an app through some policy and with a few restrictions. If you want to push one single app to end-user devices, once you push it, you can also push it along with the security that they cannot copy your data or misuse it. This is one of the key benefits.

Microsoft Intune can be used with co-management. There are clients who don't fully want to go with Microsoft Intune as they are already spending with SCCM or other platforms. They want to partially transition into Microsoft Intune, then later fully transition into it. That's when the co-management works, and that feature is available in Microsoft Intune.

The user experience of Microsoft Intune is good. It's a very old tool, and many engineers are available in the market. There are multiple knowledge articles and videos about this tool. The user experience is good since users understand their path and how to proceed. If users understand that, it's easy for them. In that way, it deserves ten out of ten as users know how to work on this tool.

Everything has remained the same in terms of Enterprise Application Management in Microsoft Intune. App discovery still requires user initiation for installation, whereas auto-installations occur silently and remain on the device screen.

The PKI tool is cloud-based, and they are doing excellent work. In terms of complexity, they reduce the task. You cannot keep giving certificates to all the devices one by one, and the PKI tool handles that. They provide the certificate and stamp on it for the device seamlessly, so you never know the device is secured with this type of certificate.

The granular support for other device types in Microsoft Intune could be improved. Microsoft Intune works well with Windows, however, we are not as well-suited for Mac devices. If you're looking to support Mac, consider other products such as AirWatch or Jamf. MobileIron is not that effective. That said, Jamf is good for Mac. Microsoft Intune offers numerous features for Windows, allowing for substantial customization; however, for Mac, it lacks this capability.

In the next releases of Microsoft Intune, a feature to renew the certificate automatically would be beneficial. Currently, for Wi-Fi certificates, we need to do it manually, which can cause most devices to disconnect and reconnect, resulting in big issues for clients facing connectivity problems. The renewal should happen automatically, and that is something they need to work on.

I have been working with Microsoft Intune for approximately five to six years.

Microsoft Tech Support is good, providing solid support. That said, it often depends on the representative. There are levels of support; level two and level three offer great assistance, while level one primarily collects data and doesn't provide as great of support.

The deployment is okay. It depends, from client to client. It's not like every console needs some time for deployment. So for example, if you're already on the on-prem margin of Intune, then we have a certified vendor who would deploy in the initial phase. I'm talking about initial deployment, where you configure Intune, you log in to a new Intune, and then you add users, and then you add the devices and things like that. So the initial deployment for that, we have certified vendors. Even our company is a certified company that does this deployment. We have certain tools for direct migration. However, if you're trying to deploy from a different console, like AirWatch or a mobile app or things like that, it may take maybe three months, for example. We need to be ready with all the profiles. We need to be ready with all the products. We need to be ready with all the app deployments. We need to be ready with multiple things. That way, once the device is enrolled, it gets what it needs. It gets the certificate. It gets the apps, and the user experience is seamless. 

Obviously, it needs some time. We have worked on two clients and it takes three months minimum.

The cost-effectiveness of Microsoft Intune is about 90%. Most clients, specifically with Windows devices, adopt it, so it's effective. The licensing model has advantages, as they bundle services such as Azure AD with Office 365, which many clients find valuable, leading to Microsoft Intune's dominance in the industry.

The pricing for Microsoft Intune has different types of packages. Currently, if you go with all the packages, the mid-variant of the top-level package such as E3 or E5 offers benefits such as AD and Azure AD. If you require all these tools, it could be cheaper, however, if you do not need certain tools and still want Microsoft Intune, it is not that cheap. It can be quite expensive. 

Additionally, if you are already on one cloud-based platform and moving to Microsoft Intune, the transaction will also involve some costs since deployment is necessary. 

Cost-wise, it varies from project to project. If the client wants to move, they may need to go for the E5 license; the difference between E3 and E5 is not significant. If your organization has a large number of Windows devices, Microsoft Intune is a valuable tool. But for Mac users, Jamf would be recommended.

If you're looking to support Mac, you need to look at other products such as AirWatch or Jamf. MobileIron is not that effective; however, Jamf is good for Mac.

Copilot in Microsoft Intune is a new tool used for answering questions, similar to ChatGPT or Gemini. There are two types of Copilot; even in Workspace ONE, there are similar tools. The licensed version is not used as it comes with a price, and our client doesn't want to go with that. The basic level of Copilot is given, which can answer a few questions, however, it is still under the learning phase. If I ask a question, it sometimes gives an exact answer, yet at other times, it suggests going somewhere else to find it, and there is no button available there. In the paid version, it can perform simple tasks such as pushing or adding devices to a group, however, it wouldn't truly help with the current level of AI. We may need more complex AI for this type of console.

On a scale of one to ten, I rate Microsoft Intune a nine.