Microsoft Intune Reviews

We were using SCCM to build and manage our machines and to control the AV, and everybody left the offices for the pandemic. We did not have an external management point. Oh. And we realized we lacked a method of control. After hassling Microsoft over a question of semantics, we finally got our answer, and we quickly scrambled over two weeks to push out Defender while everybody was still in the office. The other part was to move toward Intune. 

We started testing that and went in both directions. We tried domain and nondomain. We eventually worked backward, redid it again, and took all of our workstations off the domain. Now, none of our workstations are running on the domain. We build everything from Intune. The company gets a list ahead of time from vendors like Dell or HP, so we can have a laptop sent directly to an individual without ever touching it. They sign in, and it simply asks for their password. 

The biggest benefits of Intune are the ability to push changes and the added security. When we moved forward with Defender, we onboarded all those machines automatically. That helps dramatically. For a while, we were left with machines that weren't protected. We could see where people had done things they shouldn't have done, and Defender saved our skins a few times. It didn't happen a lot, but it happened enough that it made us glad we made that decision. 

Intune has enabled us to manage our remote workers' devices, which has been especially helpful since the start of the pandemic. My guys spend less time troubleshooting. If they're going to spend more than about an hour on an issue, it's a little easier to just reset the machine and reinstall everything again. It saves a lot of time. 

We're a much smaller group, so it worked out better for us. We've been able to push out products that we hadn't planned on. We had to push out certificates because we decided to go with a Cloud RADIUS provider and moved to certificate-based authentication for wireless. We've leveraged that same certificate to turn on 802.1x in all our offices to secure the wired networks. And all of these things have made it possible to roll out DNS filtering. Once again, all through Intune. We could enable all these pieces that we would need to turn on one by one with Intune in place.  

The company needed something that could be agnostic, so it didn't matter where it was. Half our workforce doesn't work in the office. We've downsized our primary office, and leased over half of it to other companies with subleasing. We don't need as much space anymore. Our workers are still working, and they're not required to be in the office more than three days away. Intune ensures that everyone can work remotely and securely. You can't log into our Office 365 environment from a non-managed device. Almost everything is in Office 365. We use nearly every piece of it. We use Teams for communications and switched to Azure Virtual Desktop at the end of 2019. We were a Skype customer then, so it wasn't hard to switch. 

We continued to shrink our footprint as we adopted more and more SaaS offerings. Unfortunately, finance and some other use cases cannot be in the cloud. You still need on-premise Bloomberg terminals, and other companies require you to have circuits to run them. We have to redirect certain things, which is why we have the VDI in place for a handful of users who require those internal resources when they work remotely. Intune is what made all that easy and possible. I don't think we would ever change that. My guys like it. It has simplified things. 

At the end of the day, we do touch the machines, but we don't need to. And we know if we didn't have to. Previously, a machine got left in an office, and we just walked through somebody wiping it, where you assign it to them, and they log back into it. In the worst-case scenario, we can just pull something off a shelf like that.

We had to learn the hard way which machines work in our environment. It's nothing against the company, but we will no longer buy Dell because their business platforms only use Intel chips, and we can no longer afford to use Intel chips. It doesn't work for our needs. I can get AMD chipsets that are generally cheaper and perform better. They aren't throttled for some of our applications the way Intel chips do. People have been happier since we made that migration a little over a year ago. 

We replaced many machines and onboarded people after acquiring a couple of other companies, and they were shocked at the difference between the machines we gave them and what they were used to working with. They just had always put up with that, and so had we. With Intune, it didn't matter what we purchased because it already had Windows loaded on. It was simple and easy to move forward.

Intune has reduced our build time from four hours per build to an hour or an hour and a half on a slow day. That's getting the Office 365 stuff to download and install. The other apps are secondary. When somebody logs in to a machine, the apps start downloading. We could give somebody a machine they've never seen before, have them sign in, and they're ready to work in an hour and a half. That's a tremendous amount of time saved, and there's nothing left for us to do.  We just make sure everybody who's supposed to be in a group has the assigned apps that the group needs to have. They're installed automatically.

The biggest problem we ever have is when something goes out of date after 30 days when nobody has logged into it. We do have a problem trying to get those back online. We've been working with Microsoft to resolve that problem, but that's been the only issue that we've had in the last few years.

Out of the box, Intune works reasonably well. They will continue to think of new ways to improve. Some of the policies could use some work to align more with what people are used to, but it's getting there. It's coming along, and I'd like to see how Security Copilot comes into play. You could have Copilot build things based on what you request. It could help put policies in place and look at your current policies. 

Unfortunately, we've had stuff out there for four years, and it's not working properly. A tool like Copilot could assess my policies, find weaknesses, and tell me where to make changes. That would be a great benefit.

I've had a constant battle with the DLP component, and no they're not going to have a choice. If they want to go with Copilot, we will need to start classifying documentation whether we want it or not. There will be a big fight when I get back of it. There's a fight. If you want you want you say you want copilot when it comes out, but if we have a classified stuff, it's not gonna work the way you wanna too. I heard so. Yeah. That's a problem. I heard someone talking about

We started testing Intune at the start of the pandemic, and at the time, it didn't seem to be quite as ready as they claimed it was. It was still being pieced together when we adopted it. However, it worked out well. While everybody else was scrambling during the pandemic to get on Teams and Azure Virtual Desktop, we had done that in the previous December, so by pure luck, we were ready to walk out the door. 

And I think it's scalable, honestly, but it's it's also about mentality, whether you believe it's you wanna spend the time to make sure that it's scalable. You know, I I I don't think I've been a big fan of getting away from domain services for the longest time. Think I don't see the point anymore. It's we use it very rarely. I so, you know, everything should be cloud based. It's a way to go. I mean, if you can run it that way,

We don't usually deal with Microsoft much. We have a CSP in place. However, sometimes we're dealing with a backend problem, and the CSP will take longer, so we'll go straight to Microsoft. When that occurs, Microsoft typically handles those issues reasonably quickly. When I contact Microsoft, I usually go through several engineers before I get to someone who can help. That's normal, but it doesn't drag out.  

Years ago, when we paid for enterprise support, I felt it dragged on forever because I went through the same process. I'd talk to a first-level engineer, and we had to escalate to tier three before we finally got somebody who understood what was going on. They would see the problem but not know how to fix it. They never had a resolution half the time.

The initial setup was easy, but we had lots of time during the pandemic. I had that all set up in my living room that first summer, working on it remotely. There were some pains because it wasn't all there yet. It wasn't until about July 2020 that most of the pieces were in place. It took another year before the rest was solid. However, to be fair, people adopting Intune now will get a mostly finished product.

Intune has a cost advantage if you get it with a bundled Microsoft license. If you have E3 licenses, you already have access to Intune, so you're not paying anything extra. That's a huge savings right there. Back in the day, people always wanted Office, but they didn't wanna pay for it, so you would use Open Office. That was my go-to 10 years ago. Now, I recommend the opposite. You need an Office 365 account. Don't think it is as paying for Office. That's not what you're buying.

For $7 dollars a month, you're getting a terabyte of storage in OneDrive and all the apps. You won't get that from Google. It's about cost, and it's even better if you get those bonuses with it. 

I rate Intune eight out of 10. I've never seen anything perfect, but it is an excellent fit for our environment. This is the smallest company I've ever worked for in my professional career, so it works well for us.

The primary use case for Intune is to enable user access to authorized data and applications like Outlook and Microsoft Teams, whether they are using corporate devices or their personal ones. By enrolling these devices in Microsoft Intune, users gain access to organization data, effectively turning their device into a mobile office laptop.

In our work, we have experienced the advantages of using Microsoft's services, particularly when it comes to handling certificates and inventories. Microsoft's capabilities in these areas have prompted many people to transition their operations to Microsoft.

One of the standout features of Intune is its seamless accessibility to work data, eliminating the need to be tied to an office or a desktop. Whether on iOS, Android, or other mobile devices like tablets, users can effortlessly access essential tools such as email, Microsoft Teams, and custom business applications, enhancing productivity. This capability became especially crucial during the COVID-19 pandemic, when remote work setups became the norm, making Intune a prominent solution for remote access to corporate resources.

Intune's areas for improvement, especially since its implementation in June, revolve around security and certificate management, primarily related to personal devices known as BYOD. While there are policies in place to prevent data transfer between corporate and personal apps, there is room for further enhancing security measures for devices that aren't corporate-owned but are enrolled to access organization data. Tightening security in this context is a key area in which Intune can continue to evolve.

I have been using Microsoft Intune for six years.

In terms of stability, it largely depends on how well security measures are implemented. Ensuring that devices are properly secured and monitored is crucial for stability, especially in situations like a lost device where sensitive data is at risk. Security awareness and access controls play a significant role in maintaining a stable environment. Multi-factor authentication and additional conditional access measures, such as fingerprint access, are used to verify the user's identity and protect data. I would rate the stability of the solution as a nine out of ten.

The scalability of Intune is highly rated by engineers for its flexibility. It is easy to scale, primarily due to the licensing options. You can start with a smaller scope, say, with 40-50,000 employees, who want to use corporate devices with Intune. As your organization grows, you can easily expand, going up to more than 100,000 users, and incrementally add licenses as needed, be it on a quarterly or monthly basis. This makes Intune a versatile solution for businesses of various sizes. At our company, for mobile devices and laptops, we have 30,000 users. I would rate the scalability of the solution as a ten out of ten.

The experience with Intune support has been generally positive, although there has been a learning curve for support staff. Initially, there were some challenges, with different teams involved, which sometimes resulted in less than optimal solutions. However, the situation has improved over time. On a scale of one to ten, I would give an eight out of ten rating for Intune support. It is a generally positive experience with room for further enhancement.

I would rate the complexity of the initial setup as a seven out of ten. However, if you have prior experience with MDM solutions or other MDM platforms like MobileIron, AirWatch, or IBM's MaaS360, the process may be more straightforward. Intune deployment typically takes a few weeks. The deployment involved a team of over 35 people to cater to a user base of around 30,000 in an automobile company based in Canada. The process began with testing and policy configuration over a month, focusing on aspects like data restrictions and copy limitations. After the pilot phase, Microsoft provided a pricing model, and a migration process took place over two to three months. This involved transitioning users from BlackBerry to iOS and Android and incorporating Windows Autopilot for Windows laptops, both new and existing. The onboarding process also extended to HP and other vendors.

I find the pricing for Microsoft Intune to be quite reasonable. It is available through various licensing options, including E5 Enterprise, E3 Enterprise, and as a standalone product. E5 Enterprise provides Intune as part of a bundled package, while E3 Enterprise offers it separately. Microsoft offers several licensing options, allowing organizations to choose the one that suits their specific needs. Before deploying, there is a free trial period of one month where you can test it with up to 50 devices. Once you have an understanding of your needs and Microsoft's pricing, you can choose the right model and device enrollment numbers. After the trial period, they offer a budget of around $120 for you to allocate according to your requirements. The pricing is then converted into a pro-rated monthly basis, depending on the volume of devices you need to manage, whether it is beyond fifty or a hundred. This flexible approach is advantageous for users. Overall, I would rate it as a seven out of ten in terms of costliness.

In comparison to earlier vendors like IBM, AirWatch, MobileIron, and SOTC, Microsoft Intune stands out as more flexible and user-friendly. These earlier systems were rigid and required IMEI numbers, making them less adaptable. Intune, on the other hand, is simple, similar to Azure, and excels in terms of scalability and versatility. Creating device-switching policies in Intune is straightforward and visually intuitive. It involves selecting the appropriate profile and specifying the device type (iOS, Android, or Windows). The options are readily accessible, making Intune an easy-to-use solution for managing mobile devices and endpoint management tasks.

I highly recommend using Microsoft Intune, especially in today's remote work scenario driven by the COVID-19 pandemic. It is a robust solution for managing corporate and BYOD devices, ensuring that they are properly configured and secure. Intune simplifies end-to-end device management, from pushing policies to implementing multifactor authentication, and it's the best option in the market right now. While VMware Workspace ONE and AirWatch are good, Microsoft Intune stands out, as evidenced by its popularity among clients, with more than 80% opting for it. It is definitely worth considering and conducting a proof of concept to see how it can benefit your organization. Overall, I would rate the solution as a nine out of ten.

It depends on the use case and what the client is looking for in terms of requirements. They will share the requirements with us, and we will check the feasibility of the solutions and then propose which MDM will be best suited for the client. If they only ask for managing their barcode devices or POS devices, we can go with SOTI.

When managing smartphones or applications, Microsoft Intune is a good solution.

We are combining Microsoft Intune with SOTI, Workspace ONE, and Microsoft Intune.

Microsoft Intune is a tool designed for enterprise customers to protect enterprise data from leakage or sharing.

The app protection policies and the application management part of Microsoft Intune are powerful.

The main benefits Microsoft Intune provides to users are access to their corporate world. They can access their emails, applications, and content through OneDrive. These are the core functionalities. They can publish line of business applications with Microsoft Intune. If they have developed their in-house application, they can publish it. They can use additional features such as tunnels and other capabilities from Microsoft Intune.

We use enterprise application management in Microsoft Intune. The security part of the application can be managed through enterprise application management. We can block cut, copy, paste, and sharing data from one app to any third-party application.

Using Microsoft Intune Suite Cloud makes the management process much easier.

A potential area of improvement for Microsoft Intune is that the content management part needs enhancement. We have OneDrive, and the OneDrive integration is present, but other tools such as Workspace ONE have better features available, such as publishing internal repositories.

Content management is one of the additional functions I would suggest Microsoft add to Microsoft Intune. The smart group feature would be beneficial because if you have only Microsoft Intune related access or Microsoft Intune admin access, you cannot create groups or users. Having functionality to create smart groups or virtual groups and adding users to those groups would be much better than the functionality available in Workspace ONE.

We have been working with Microsoft Intune for around six years.

The stability of Microsoft Intune rates around 8.

The ability of scaling or expanding the Microsoft Intune solution is very high. Being cloud-based, we can expand it at any moment.

The support from Microsoft was previously good, but now it is very poor. I would give a rating around four, not more than that.

The main issue with the support is the quality of work. They spend a week of time to resolve small issues, which is not acceptable.

Currently, when we discuss competitors, Workspace ONE is one of them and a good competitor for Microsoft Intune.

Setting up Microsoft Intune is easy, but if enterprise customers ask for additional functionality related to certificate publishing or line of business application publishing, then we need to deploy different connectors as well, which becomes more complex.

The choice of solution depends on client requirements. If they ask for an on-premise solution, then Microsoft Intune would not be suitable, and we would recommend another solution such as Workspace ONE or SOTI MobiControl. If the client is comfortable with a cloud solution, then we will recommend Microsoft Intune after understanding their requirements, management needs, and policy requirements.

Microsoft Intune is a cloud-based solution with no on-premise option, available only on Azure cloud.

We use Microsoft Intune Suite Cloud PKI as it is a cloud-based platform.

We have Copilot integrated with Microsoft Intune, though I am not an SME for Copilot as there are different teams. I take care of Microsoft Intune and MDM related tasks.

I am not using analytics in Microsoft Intune currently. I am using the Graph APIs for fetching data from the backend of Microsoft Intune.

On a scale of 1-10, I rate Microsoft Intune a nine.

Microsoft Intune is a very good product from Microsoft, and it has been used to manage endpoint devices and their security. You can do everything in Microsoft Intune except third-party app patching, which Ivanti gives you the liberty to do. Normal Windows updates and everything can be done by Microsoft Intune. On Microsoft Intune, you have very limited options, but it is very dynamic. When discussing the packaging part, for example, if you want to deploy Chrome in your environment with settings that prevent users from opening incognito mode, you can do it through Ivanti by writing a couple of scripts. You can also do it with Microsoft Intune, but you have to change the package from EXE or MSI to .intunewin. That is a crucial part. Without changing it, you cannot deploy it, so that's a limitation from the Microsoft Intune side. It also gives us an opportunity to learn something extra, making it a good product.

The best part of Microsoft Intune is the speed of deployment. If you deploy an app on the Company Portal or by silent install, you will get the app on the client endpoint in no time. Ivanti takes time because it relies on policy sync. Microsoft Intune brings all endpoint and security management tools into one place. For app discovery, deployment, and automatic updating, it's reliable. I have not had extensive hands-on experience as of now because there are senior engineers inside the organization who handle that, but I have seen the feature and it's reliable.

Microsoft Intune should give us the feature to update third-party apps through the tool. When deploying applications such as Google Chrome, VLC, or other applications, we should be able to update them from the same platform.

I have been using Microsoft Intune for probably five years now.

My impressions of Microsoft Intune's stability are very positive. It's very stable because it provides the functionality to connect everything in one place for all Microsoft products.

Microsoft Intune is very scalable, and I'm satisfied with the features.

My teammates have reached out to support. From their experience, the support has been good.

Microsoft Intune has helped our organization save costs. For endpoint management and license management, Microsoft Intune provides alerts at the right time, allowing us to save costs. However, it's not making a significant impact on cost savings due to the business models of products being launched in the market.

Microsoft Intune is super easy to use and somewhat expensive, but users will learn a lot because every third organization in the world is using Microsoft Intune to manage their products. It's very much in demand in the market, while Ivanti is rare. On a scale of one to ten, I rate Microsoft Intune an eight out of ten.

I use it for a lot of devices. We have a company app store and it helps.

I've never had issues with Intune. 

It helps us manage user certificates. 

It's well integrated so far.

We have not yet rolled out Co-Pilot for Intune in all areas. I did have access briefly, and it was good in multiple areas. 

It could offer more attributes for authentication. Sometimes, authentication can be challenging.

I've been using the solution for a while. We started with 365 a few years back and then, after that, we adopted Intune.

I would assess the stability and reliability as good.

I would assess the scalability as good.

I haven't contacted support myself, however, I know they helped with our deployment. 

On a scale of one to ten, I would rate the support an eight.

Positive

We had a different solution, and it was challenging to use. 

I did not deploy the solution myself. We did a staged roll-out over multiple quarters. 

I have seen a return on investment from Microsoft Intune. Once it is well integrated with the rest of the environment, it makes everything easy.

I don't really remember my experience with the pricing, setup costs, and licensing.

On a scale of one to ten, I would rate the product eight out of ten. 

We use endpoint management, both SCCM and Intune, so it is a hybrid model that we use in order to manage applications, patching, updates, and operating system deployment with Intune. We also use Autopilot for deployment.

Intune has been effective in managing various mobile devices. It would be Apple Business Manager for Apple devices, the iOS tray. It's easier to manage from Intune compared to Android. I've recently heard that Android devices will no longer be managed from Intune. The MDM part is moving away.

Intune's app management feature for supporting business operations is very easy and seamless for an admin to package applications on Intune. It's also very easy to track logs on the end-user device to understand deployment or push failures. Application management works really seamlessly with Intune.

Moreover, Intune has made it very easy to package and deploy LOB apps like MSI and MSI X applications available on the Microsoft Store. This is very helpful.

Intune brings all of the endpoint and security management tools into one place. Microsoft has integrated all its cloud platforms, like Defender for Endpoint and Intune for endpoint management. We can easily manage the Defender part from the Defender portal for endpoints, and it's very easy to track vulnerabilities on the Defender portal as well. 

It's just a matter of installing the Defender client on a device, and we can easily see all the scan results from that device on the portal. So it's very easy and simple, and the security information is all on the dashboard, ready to be presented to the client.

Automatic updating can be challenging for apps not available on the Microsoft Store. We need to package and download those apps, and it's not just pushing them; we need to create scripts to uninstall previous versions. That's a caveat compared to SCCM, where we can integrate third-party tools to manage third-party applications. I hope they will soon integrate something like Patch My PC. Apart from that, it's good.

We don't use the advanced endpoint analytics but, we use the basic features available on the dashboard. We have various data sources and get a lot of reports from there.

We also don't use Intune PKI as of now because we manage PKI from our on-prem environment. But we have seen that BYO CA (Bring Your Own CA) is now available on Intune. We can bring our own CA to reduce the load on the on-prem infrastructure. That's one of the features we need to test.

Overall, Intune provides a more secure and easily monitored environment, with live and native support, unlike other tools. For example, we might get data that is seven days old with other tools, but with Intune, we get data that's only eight hours old. This helps us understand what applications run on a particular machine and which operating system is installed. Intune has saved us time and provides valuable features.

The best features are application and update management. In the context of updates, it's very easy to manage device updates through Intune because they pull updates directly from the internet. We don't have to select and push updates as we do with SCCM. 

For application management, we have many options for packaging applications. 

The overall user experience of Microsoft Intune a ten out of ten. There are certain limitations, but I would still rate it ten out of ten compared to Jamf, Tanium, and BigFix. I find Intune far better and easier to use.

I also tested the enterprise application management feature. The way we are packaging using Windows 32 apps and LOB apps. These are pretty simple to manage.

We recently introduced Copilot on Microsoft 365 portal to help draft emails. We were highly dependent on Grammarly before, but Copilot has replaced it and saved us the licensing cost. That's one way we use Copilot.

Copilot won't protect our environment. It's just an AI tool. Defender is responsible for protecting our environment. Copilot can answer our questions quickly, without needing to browse through Google or a browser. It's integrated into almost every application. We can click on it and ask our questions.

Copilot has reduced the load of typing. We can just give it a brief instruction, like "draft an email to my manager regarding a new joiner," and it generates a draft. This saves us time and typing effort. We just need to proofread it.

We've only seen Copilot so far. We haven't tested any other AI tools in Intune yet. Copilot is very useful, and it's a Microsoft product.

The challenge we experience is with Mac management. We find Intune not capable enough to handle Mac devices, configurations, or operating system deployments. However, it's easy to manage Windows devices. Mac itself has a lot of restrictions. Linux and Mac operating system compatibility need improvement. Also, they need to work on making GPO (Group Policy Objects) compatible.

Microsoft needs to work on Autopilot and make it simpler at the end-user level.

We also face challenges managing group policy. Many group policy objects that we can manage from on-prem Active Directory can't be managed through Intune. That's something Microsoft needs to work on, and I'm sure they will.

I have been using it for more than four years. 

It is a stable solution. I would rate it a nine out of ten.

Everyone in our organization uses this solution. But, for the project I am involved in, just 15 people use it. 

We have medium to enterprise businesses as our clients. 

I would rate the scalability an eight out of ten.

The customer service and support are average. Sometimes I feel they don't even know about their product. 

Neutral

I can compare it to Tanium. When I was doing a POC in place of Intune, we needed to compare other tools as well. Tanium is a good tool, but I can't find any other tool that can replace Intune with so many features.

I like the user-friendliness of Intune's GUI and the fact that we get so many features under one roof has attracted our attention.

The deployment of Intune depends on the environment in which it is being deployed. In our case, it was pretty simple because we didn't have much insight. However, depending on the requirements of a different environment, it can become complex.

The deployment takes a couple of months would be a good estimate. You need to plan everything and then execute, and migration is involved.

Intune works seamlessly with Microsoft Defender. With other security solutions, we see a lot of challenges. It depends on the complexity and scale of the environment. But it's really compatible with Defender and Intune integrates well with other security solutions.

Intune requires maintenance. It requires internet access because we need to manage certificates, check on the DMF file, and clean up stale devices.

It has helped admins immensely in order to manage those endpoint devices. With other tools, the device needs to be on the office network or VPN. Intune removes this dependency. 

We can manage devices through the internet, and we won't miss any devices that are offline.

It has saved 60% of our time. I can't put an estimate on cost savings, but it has saved a huge cost because we don't have to manage infrastructure anymore.

It's a little expensive, but it's worth having.

Compared to other tools in the market, Intune is a good tool to go with. It's a little expensive, but it's really good because we have almost everything under the same umbrella. The features that Microsoft offers are not available in BigFix, Tanium, or Canvas. But it also depends on your budget.

I would definitely recommend it. We get promoted features, and it's easy to use. The ease of use is really attractive for admins, especially compared to other tools.

Overall, I would rate it a nine out of ten. 

We use Intune to deploy and control applications on mobile devices and to remote patch and wipe endpoints. We also use it for various other endpoint- related operations.

Intune provides centralized access to the complete environment. It has helped us secure hybrid work and secure company data on hybrid devices. 

It has improved the productivity of our infrastructure and application teams as well as our end users. Intune has helped us quite a bit. I havent' calculated the ROI, so I'm not sure how much it has saved us, but it has streamlined our application process and improved application availability. 

Our main use is Intune's management of mobile devices, like Android or iPhone devices. The application performs quite well for both types. We successfully managed almost 3,000 endpoints. 

From a security perspective, we apply various password patches in application control, but we use a different product. Intune meets our expectations and requirements for device and application control, but it might not fulfill your needs for other purposes, such as security. 

It's quite a thorough solution that gives you a complete inventory of everything you have on your laptop or mobile device. It offers extensive visibility.

Intune could add more features that are relevant to the core application control functions. For example, it would be helpful if it had more control over the on-prem environment from the cloud platform. Greater Teams availability in the Saudi market would also be helpful. 

I have worked with Intune for three years.

I rate Intune nine out of 10 for stability. 

I rate Intune nine out of 10 for scalability.

I rate Microsoft support five out of 10. Unlike some other vendors, Microsoft support is not that efficient, but if you have implemented the solution correctly from the start, then you won't need support that much.

Neutral

Intune isn't an easy deployment.

We used a small Middle Eastern firm as a system integrator.

We evaluated Ivanti, but we decided to use Intune because it was available as a SaaS.ker 0

I rate Microsoft Intune eight out of 10. If you need endpoint management and control, Intune will be right for you, but I don't think It can meet your expectations if you need something else. For new users, I suggest having Intune implemented by a security or application architect. Otherwise, you may face problems later that you cannot troubleshoot.

Microsoft Intune has improved our organization a lot. Previously, we had concerns about device security and compliance. We now do not have those concerns, and we also have productivity and efficiency. It enables remote work.

It is very easy for us to pull the applications for security updates. Everything is done at the backend. It is very easy for us to configure for all the users because we are currently using Microsoft E5 and E3 licenses for all the users. We have created separate groups for all the users. We have more than 7,000 users across more than 60 countries. We have created separate groups for all the countries. After the onboarding is over, we add a user to a particular group and Intune. Once we enroll a user's PC, all the applications, security updates, and other things are pulled from the back end.

It helps with security enhancement. We can remotely manage the devices. It helps with productivity. We can have reports. We can download all monthly reports and enable compliance policies. Its cost efficiency is also good.

It is integrated with Microsoft 365. Everything is integrated in terms of security and endpoint solutions. Every feature is in one space or license, which is Microsoft 365. We only need to be concerned about the license because, under Microsoft 365, they have a lot of licenses. That is the only thing we need to focus on.

It is very easy for me to monitor and configure everything. It is a one-time process. Once I have done all the work at the back end, it is very easy for me to configure everything. At times, requirements come from IT managers from some countries where they need to add some applications, policies, or VPN networks, and I take care of that from time to time. They usually come in the middle of every month.

Nowadays, more and more companies are implementing Intune for their users. I see a lot of companies moving to endpoint management. It is a good move to integrate all the systems and bring them under one roof. You do not need to look for other solutions or third-party applications. Once you have the Microsoft enterprise license, it is a one-time process. You do not need to go to all the users to install everything and do the updates. It is not necessary. It requires only a one-time configuration. It is very useful for all companies. It is very user-friendly, and it is very easy to pull the data and reports on updates and applications. Everything is possible in Intune nowadays.

Microsoft Intune is very useful for us because we do not need any extra people. It reduces the manpower required. Previously, for every country, we had to recruit more IT technicians for things like installation and user support. Nowadays, in a single window, I can do all the work in the back end. For example, in the case of a laptop theft, I can wipe the laptop remotely. It is a very useful tool.

Microsoft Intune is a cloud platform. It is integrated with Azure. It protects and checks the identity at the backend. We can also configure some extra layers of protection, such as MFA or passwordless sign-ins. We can enforce all this for all the users. Our devices are more secure.

Microsoft Intune is already integrated with all the things. We have created some alerts for all the users in the case of any unusual activity or travel activity. If they click on a malicious link, it is automatically detected. We have already configured all this in Office 365. The tickets are automatically generated in Jira. We have to verify with the IT managers of the representative countries whether these user activities are valid or not. According to that, we are taking some precautions and remediation such as blocking some users. Security-wise, it is very useful for us.

It is a one-time configuration. It is very easy for me to configure all the things. Once I create policies and applications in Intune, it is very easy for us to enroll users. It is a one-time process. We do not need to spend a lot of time because all the setup is done in the initial phases. Its interface is a little bit complicated, but I know where to configure all the things in the portal. It is very easy for me. Before the user enrollment, I have a call with the IT managers of the respective countries and collect the requirements from their end. I configure all the groups accordingly. For example, we have some inbuilt applications that we need to allow for all the users. We also have some in-house applications. For every country, the policies are different. I can take care of all that.

We are facing issues with Apple products. With macOS and iOS, there are some difficulties with the updates because we cannot get full control of Apple products. In the case of Windows, it is fine, but in the case of Apple, we have some difficulties. We cannot control everything through Intune.

It can be improved in terms of UI, user productivity, ease of use, performance, customization, and flexibility. It has all of these capabilities, but they can be better. Reporting, analytics, and integration with third-party solutions can also be better.

I have been using Microsoft Intune since 2022.

It is a stable solution, but when a lot of users are facing the same issue, it can take us some time to find a solution. I would rate it a seven out of ten for stability.

It is scalable. I would rate it a seven out of ten for scalability.

We have premium support. If I am not able to find a solution for an issue at my end, I raise a ticket with them. I get a response or callback according to the priority level. They try to resolve the issue as soon as possible. I have faced some challenges on Saturdays and Sundays and at night time. 

Their support is not always very fast. Sometimes, they take a day or two and they can also take one or two weeks. In a few cases, they took one month. If level 1 support is not able to resolve the issue, the ticket is moved to the next level. If level 2 is also not able to resolve the issue, they move to level 3. Their support needs some improvements.

Neutral

We were not using any similar solution previously. We had some software for remote access and admin control.

I have some experience with Meraki MDM. I am not very familiar with it. I worked with it only for a year. When I joined the organization, all the systems were in domains. It was very difficult to manage everything because one of the engineers had to go to the user systems and install whatever the users wanted. All the systems were protected with the administrator accounts. Nowadays, it is very easy for me to pull all the applications.

For all the updates, we are using a separate third-party tool from Qualys. It is integrated with Azure. Every month, we initiate software updates. It is mandatory for all the users, and it is automatically done. Once I pull the updates, they automatically run in the backend on every user system.

We are using a third-party solution for our servers. We have about 150 servers for application development, UAT, and production. We cannot use Intune for the servers. It is not effective for servers. That is why we are using a third-party application for servers.

For the initial setup, we needed some help from the Microsoft team. As a new organization, we had to know all the features. We had different requirements for different countries in terms of applications and compliance.

We had a session with Microsoft, and they explained all the processes in Intune and showed us how to configure and implement everything. We had done some PoCs. We started with a few users, and after everything worked fine, we started with small groups and implemented it for them.

Its setup is easy, but we had requirements from IT managers regarding excluding some devices from the administrator level and allowing some users to directly install some applications. In such cases, we had to create separate groups for them.

It was a long process. It took me around one month for each country. I had to set up a meeting with IT managers, discuss the license part, and tell them the main advantages and disadvantages. Convincing them was a bit difficult because their systems were connected with domains. Different users required different permissions. We cannot give global admin permissions to all IT managers. 

We are a team of 20 people. We are the ones dealing with the global admin access. We take care of many things. For example, for application configuration or policy configuration, people need to raise a ticket with us. We schedule a meeting and take the requirements from them. We accordingly make the changes.

We also have an operations and infrastructure team. Our company is a logistics and shipping company. Here in Dubai, I am working in the global hub. It is the group IT hub. We are developing all the on-premises applications here. We have more than 20 in-house applications.

In terms of maintenance, I have not got any feedback. It is working very smoothly so far. I have not faced any challenges.

We have saved resources and time. We do not need that much manpower and time. It is a very effective solution.

It is expensive. The cost depends on the license that we choose.

The enterprise license is expensive. It is recommended only if the organization has the budget. It is not recommended for all companies because of the licensing part.

We ensure that the selected solution integrates smoothly within our IT infrastructure, including Active Directory, Azure AD, cloud platforms, and network equipment. Compatibility and integration are the key factors in achieving seamless deployment and operational efficiency. We also need to consider the security and compliance requirements and plan for scalability and future growth.

We just started using Microsoft Copilot in Intune. We have some testing going on. We assigned the license to some of our help desk IDs. We are using it for some meetings and documentation purposes. It will automatically capture the key points when we are in the meeting. We have tested only a few features in Copilot. We need to explore it more.

I would recommend Microsoft Intune. It is a very useful product. It is very helpful to monitor the devices and implement compliance policies. You can also get monthly reports and alerts about user activities. Security-wise and configuration-wise, it is a very useful product.

I would rate Microsoft Intune an eight out of ten.

We use Microsoft Intune to deploy applications, check Autopilot status, and deploy Autopilot applications. We also use it to manage user profiles, assess compliance, and define compliance and configuration profiles, among other Intune configurations.

We implemented Intune to improve our compliance.

Intune consolidates all our endpoint and security management tools into a single platform. Intune allows us to securely manage Windows, macOS, iOS, Linux, and Android devices, both corporate-owned and personally owned, in one centralized location.

The user-friendly enterprise application management system allows easy app discovery, deployment, and automatic updates without IT assistance.

Microsoft Intune Suite is a great tool for MDM.

We use Copilot whenever we encounter difficulties or receive error messages while working on a solution.

Copilot is beneficial for environmental protection as it assists in finding solutions by providing necessary information.

Copilot helped simplify our IT and security operations overall.

Microsoft Intune has significantly improved how we manage our devices, applications, and security regulations.

Intune enables us to easily manage and secure hybrid work environments, safeguarding company and personal device data.

Intune's endpoint privilege management improves user productivity because we can create temporary privileged accounts.

Endpoint privilege management, through its implementation of least privileged access, helps to reduce our organization's attack surface by limiting potential vulnerabilities related to security and authentication.

Intune has improved our IT productivity. Auto patching has freed up their time because it requires no administrative support.

Microsoft Intune has helped save us costs by consolidating multiple tools into Intune.

Microsoft Intune Suite's integration with Microsoft 365 and Microsoft Security is great for both cloud and co-managed devices because we can use it to form a single dashboard for enabling and managing licenses and creating accounts. 

The most valuable feature of Intune is the user-friendly portal for end users.

One drawback of Intune is that we cannot find devices based on a user's region or location. As a global organization, having this ability would be helpful.

I have been using Microsoft Intune for four years.

Intune is stable. We have not encountered any downtime.

Intune scales to our needs.

The prolonged response time from technical support for Intune is unacceptable, as this tool is critical to our organization's operations.

Neutral

We previously utilized Microsoft System Center Configuration Manager but transitioned to Intune due to its advanced capabilities and cloud-based architecture, enabling centralized management and accessibility.

Intune reduces the need for administrators, resulting in time and cost savings by eliminating the on-premises hardware and personnel.

I would rate Microsoft Intune eight out of ten.

We manage over 5,000 devices using Intune, which requires a team of two to three people for maintenance.

Microsoft Intune is a good tool for large organizations. I recommend using the trial version and conducting a POC.

I am working with a bank to configure backups for auto-billing devices. We have Samsung tablets used in branches with only customer accounts, where customers open accounts using these dedicated devices. We create custom policies for these devices using Microsoft Intune across multiple domains. Some devices are auto-pilot, some are dedicated tablets, and others are hybrid Azure AD joined devices managed by Configuration Manager. We are using Microsoft Intune in three domains to manage those devices.

Microsoft Intune consolidates our endpoint and security management tools into a single platform. We employ specific policies for autopilot devices tailored for global and US requirements, focusing on banking and government security. To address these concerns, we've implemented policies within the bank that restrict USB and Bluetooth access through the attack surface detection feature. This restricted app concept has been applied to autopilot laptops to enhance their security posture by blocking USB devices and preventing unauthorized research build-up.

User experience is generally good when using open internet devices like 3G, 4G, or 5G, as banks often use restricted internet connections.

Intune offers rapid benefits. Any policy, deployment, or change we implement is reflected within two to three minutes for all users. This is especially valuable for managing laptops. We can quickly implement a cleanup policy if user laptops are compromised or accessed without authorization. In the worst-case scenario of a computer being stolen, we can swiftly deploy a policy to secure the device's data within a minute.

It offers rapid policy, deployment, and change implementation, with effects visible to users within minutes. Devices managed by SCCM can also benefit from Intune workloads and policies, providing a unified management approach. Intune and SCCM work together to address security concerns for hybrid Azure AD joined devices. Attack surface reduction policies can be implemented through either platform to protect devices from threats. Intune manages SCCM-enrolled and Intune-managed devices, offering comprehensive security and management capabilities.

Intune has enhanced the productivity of our IT department. We can now establish Active Directory-related policies for public auto-enrollment devices in remote areas like Karachi and Islamabad. Not confined to specific cities, these devices can be managed through autopilot with AD-related policies created on Microsoft Intune. However, these devices are not always on-demand, so we track them using autopilot policies and create eighty policy replicas for each device. This approach is highly effective for managing our large-scale operations, as users often face challenges like requiring USB access while working remotely. We specifically tailor policies for our hundred audit users, who move frequently between locations.

Our bank's most valuable Intune features are centered around the dedicated device concept. We've implemented policies for tabs used by branch employees during account openings and deployed custom policies and applications on these devices using our Rapid Account Opening application. This dedicated device approach and tailored Intune features have yielded excellent results.

Microsoft Intune needs to improve its security policies. I want more secure, reliable, and efficient security policies.

I have been using Microsoft Intune for five years.

We have Microsoft Premium, which entitles us to Microsoft engineer support specifically for Intune. They respond very quickly. When we open a case on Microsoft and select a severity level, we always choose 'A' because we have a production environment. The engineers connect with us within 15 minutes and are highly capable.

We have upgraded support with Microsoft engineers and direct connections with some of them. When we encounter issues related to Microsoft Intune, we directly contact these highly skilled engineers for immediate assistance. They collaborate with us to resolve problems and always require ticket creation to meet our KPIs. We open and close these tickets accordingly. While we manage a significant volume of tickets, our direct relationship with Microsoft engineers ensures efficient issue resolution and support.

Positive

In my previous role, I used IBM MaaS360. Microsoft Intune surpasses MaaS360 with its broader feature set, increased flexibility, and seamless integration with other Microsoft products like Entra for XDR and QRadar. Additionally, Intune offers a more user-friendly experience.

The deployment time for Intune depends on the number of users. For example, an organization with 15 users can take 15 days to deploy. Organizations also using Active Directory and Office 365 Premium require additional deployments so that the total deployment time can reach 25 days.

Intune deployment is straightforward and has a stable internet connection. Given our appropriate EMS E3 and F3 licenses, we anticipate no significant challenges as long as our internet connection remains reliable.

I would rate Microsoft Intune nine out of ten.

After the deployment, Intune requires no maintenance. As long as the internet connection is stable, Intune can ensure all policies work as intended.

Microsoft Intune is the future. Using Intune, we can access other Microsoft tools like XDR through one portal. Pre-COVID users working remotely had to manage laptops not connected by a domain, and now all the devices and policies are managed through Intune.