Microsoft Intune serves as a crucial tool to safeguard against unauthorized access and protect sensitive data. By implementing Intune, we can control and monitor device usage, acting as a gateway to enterprise services. Access to corporate resources, including email and sensitive information, is restricted to devices enrolled in Intune. It is a comprehensive security solution that not only controls access to enterprise resources but also tracks and prevents unauthorized access, ensuring the protection of sensitive data and preventing potential data loss scenarios.
CISO at a financial services firm with 201-500 employees
Streamlines endpoint management, enhances security and ensures seamless device integration, offering a user-friendly solution with robust support
Pros and Cons
- "It is a comprehensive security solution that not only controls access to enterprise resources but also tracks and prevents unauthorized access, ensuring the protection of sensitive data and preventing potential data loss scenarios."
- "There is room for improvement, particularly in terms of compatibility, extending beyond the well-known major brands."
What is our primary use case?
How has it helped my organization?
It acts as a central integration point for endpoint and security management tools, simplifying the connection process. However, considerations such as privacy laws may impact the integration of certain devices, like partner devices, emphasizing the flexibility of Intune in adapting to various organizational needs. Given that Microsoft Intune operates on a policy-driven model, connecting all staff devices becomes a matter of duty. This is because the platform excels in efficiently managing endpoints by enforcing policies that govern device security, access, and compliance.
When it comes to the user experience, integrating and onboarding with Microsoft Intune is a seamless process for the majority of devices, such as those from well-known brands like Android and iOS, where compatibility stands at a high success rate of around ninety-four percent. However, it's important to acknowledge that there might be challenges with certain lesser-known or non-mainstream brands, where compatibility may not reach a hundred percent.
The implementation of Intune hasn't significantly impacted IT productivity within our organization. Instead, its primary function is to enhance security for remote connections.
Intune has played a vital role in minimizing the risk of security breaches. Its effectiveness lies in restricting unauthorized access, particularly in scenarios such as conferences where secure connectivity is crucial. This reinforces the overall security posture, especially concerning mobile devices.
Implementing this product has resulted in cost savings for our organization. In the event of data loss, the expenses associated with investigations and remediation are significantly reduced. The product adds value by mitigating the financial impacts related to security incidents.
What is most valuable?
Intune plays a crucial role in ensuring the security of hybrid work environments and safeguarding data on both company-owned and BYO devices. While it functions seamlessly for mainstream devices, including Dimensional and others, there might be some challenges with certain brands of personal devices. However, overall, Intune provides a comprehensive platform where both corporate and partner devices can coexist securely.
The utilization of Microsoft security signals, coupled with the impact of Intune on our organization's security, is a pivotal aspect of our strategy. While there may be some limitations in the user interface when dealing with BYOD scenarios, the synergy with Microsoft Defender solutions is noteworthy. The seamless integration within the Microsoft suite ensures a cohesive security approach. Additionally, the incorporation of phishing information and tracking numbers further enhances our security posture, especially when dealing with partner devices atop the Microsoft Defender platform.
The integration of Intune suite capabilities with Microsoft 365 and Microsoft Security for both cloud and on-premises managed devices is highly valuable. The suitability depends on the specific requirements and the number of users in a given scenario.
What needs improvement?
There is room for improvement, particularly in terms of compatibility, extending beyond the well-known major brands.
Buyer's Guide
Microsoft Intune
November 2024
Learn what your peers think about Microsoft Intune. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
For how long have I used the solution?
I have been working with it for approximately a year.
What do I think about the stability of the solution?
It provides good stability.
What do I think about the scalability of the solution?
We never faced any issue with scalability.
How are customer service and support?
Thus far, we have not encountered any issues with the support provided, and their responsiveness has been satisfactory.
What about the implementation team?
The deployment process is straightforward; we simply configure the necessary settings within the server, initiate the enrollment, and push it out. This streamlined approach facilitates staff onboarding efficiently.
What's my experience with pricing, setup cost, and licensing?
When it comes to licensing, the decision to include Intune may vary based on the volume of users and the specific modules needed.
What other advice do I have?
Overall, I would rate it eight out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Manager Information Technology Infrastructure at a financial services firm with 11-50 employees
Easy to deploy and allows us to work form anywhere
Pros and Cons
- "Autopilot is the most valuable feature of Microsoft Intune."
- "Integrating certain group policies can be challenging and may necessitate using on-premises systems to integrate them with Microsoft Intune."
What is our primary use case?
I use Microsoft Intune for my Active Directory and my end-point and zero-day protection.
How has it helped my organization?
Microsoft Intune has allowed us to work from anywhere.
What is most valuable?
Autopilot is the most valuable feature of Microsoft Intune.
What needs improvement?
Integrating certain group policies can be challenging and may necessitate using on-premises systems to integrate them with Microsoft Intune.
I am encountering challenges integrating with multiple domains outside of my own due to unsupported Active Directory extensions.
For how long have I used the solution?
I have been using Microsoft Intune for four years.
What do I think about the stability of the solution?
Microsoft Intune is stable.
What do I think about the scalability of the solution?
Microsoft Intune is scaled to support more than 39,000 users without any issues. The initial setup process for the on-premises to Active Directory hybrid integration can be quite technical. We have 100 users.
How are customer service and support?
Microsoft Intune's technical support is good.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is straightforward. I am an architect and completed the deployment on my own within two months.
What about the implementation team?
The implementation was completed in-house.
What was our ROI?
Using a hybrid setup instead of relying on a third-party product can provide a better return on investment with Microsoft Intune.
What's my experience with pricing, setup cost, and licensing?
Microsoft Intune is included in our Office 365 suite license. The E5 license is expensive.
What other advice do I have?
I give Microsoft Intune an eight out of ten.
Microsoft Intune doesn't require any maintenance from our end.
I recommend Microsoft Intune because it can be easily integrated with other Microsoft products into a single suite, making it a plug-and-play solution that can be set up with ease.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Microsoft Intune
November 2024
Learn what your peers think about Microsoft Intune. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
IT Systems Admin at a government with 10,001+ employees
A cost-effective solid solution that helps to manage devices
Pros and Cons
- "The tool's most valuable feature is Autopilot."
- "I have a lot of Apple products in my environment. It would be nice to have an improved integration of Apple products with Microsoft Intune without Jam."
What is our primary use case?
We are replacing AirWatch MDM with the product so that we can manage our devices. Eventually, we plan to migrate from SCCM, Windows, and Mac to the Microsoft Intune environment. It will help different departments to manage devices from one place.
How has it helped my organization?
Microsoft Intune helps us lock and open iPads easily.
What is most valuable?
The tool's most valuable feature is Autopilot.
What needs improvement?
I have a lot of Apple products in my environment. It would be nice to have an improved integration of Apple products with Microsoft Intune without Jam.
For how long have I used the solution?
I have been working with the product for a year.
What do I think about the stability of the solution?
Microsoft Intune's stability and uptime are good.
How are customer service and support?
Microsoft Intune has a lot of documentation. Its support is also good.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We used AirWatch before Microsoft Intune. We switched because of cost and customer care issues. We are currently in an SCCM environment.
How was the initial setup?
The solution's deployment is both complex and intuitive.
What's my experience with pricing, setup cost, and licensing?
Microsoft Intune's pricing is reasonable.
Which other solutions did I evaluate?
We chose the product because it was cost-effective and easy to integrate with our system.
What other advice do I have?
We are working with a Microsoft partner to improve our environment's security. It helps us condense our profile into one instead of three.
We expect time and money savings in the long run since it is a cost-effective solution. We are Microsoft partners. It integrates everything into one platform, which helps us save time since we don't have to jump from one platform to another.
I rate the product a seven. It is a good product with good capabilities. It is a solid solution that is easy to work with.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Technology\Cloud Architect | IT Infrastructure Security & Compliance at IDFC FIRST Bank
Allows us to ensure that all devices are authenticated , but is limited on Mac devices
Pros and Cons
- "Autopilot is the most valuable feature."
- "Microsoft Intune's support for Mac devices is lacking and could be improved."
What is our primary use case?
We use the solution for information and protection. The solution identifies anything that can be exploited.
How has it helped my organization?
Microsoft Intune allows us to ensure that all devices are authenticated and that they use policies to prevent people from logging in and accessing unauthorized resources.
What is most valuable?
Autopilot is the most valuable feature.
What needs improvement?
Unlike VMware Workspace ONE, which provides system configuration and endpoint management, Microsoft Intune is not a standalone application. This is a limitation of Microsoft Intune because it does not provide all the information we need or the application details of the devices connected.
Microsoft Intune's support for Mac devices is lacking and could be improved.
For how long have I used the solution?
I have been using Microsoft Intune for seven years.
What do I think about the stability of the solution?
With our number of users, Microsoft Intune is stable.
What do I think about the scalability of the solution?
Microsoft Intune is currently able to meet our requirements, but as we expand in the future, we may need to consider other options. 20 percent of our employees are using Microsoft Intune.
How are customer service and support?
The technical support is slow at responding.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup was somewhat complex. We encountered some issues with the security group, which prevented us from enrolling some of the devices. Our strategy was to onboard all the new users first. The deployment involved around eight people.
What about the implementation team?
The implementation was completed in-house.
What's my experience with pricing, setup cost, and licensing?
Microsoft Intune is included in the E5 license at no additional cost.
Which other solutions did I evaluate?
We evaluated VMware Workspace ONE but ultimately decided to use Microsoft Intune because we already had a Microsoft E5 license.
What other advice do I have?
I give Microsoft Intune a seven out of ten.
We have not required any maintenance as of now.
I recommend Microsoft Intune.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Information Technology System Engineer at a tech consulting company with 201-500 employees
The solution's ability to set conditional access polices significantly reduce your risk from unpatched software
Pros and Cons
- "The most valuable feature is probably mobile device management. Small businesses are coming under greater scrutiny and requirements for compliance as time goes on. We don't have to worry about a VPN because we can manage these devices, control company data, and lock users out. If needed, we can remotely wipe devices and deadman-switch them."
- "Intune's third-party patch management could be better. It should be easier for the average system admin to keep non-Microsoft applications updated."
What is our primary use case?
We use Intune to manage mobile devices and applications. I'm not solely using Intune for the agents installed on each machine. I use the Microsoft Endpoint Manager solution primarily for device configuration, device compliance, and mobile application management.
I have 80 different clients, and their environments vary. We have people that work in offices across multiple foreign countries and domestically. Most have a strictly cloud-based deployment, but a few have a private cloud that we host ourselves. Some have their own data centers. I've got a couple of clients with hybrid environments. None of them are entirely on-prem. Everybody is using a hybrid cloud or completely on the cloud.
How has it helped my organization?
Intune helps us from a compliance standpoint by making it easier for system admins to configure devices and ensure they conform to business policies. It gives us more visibility into where the devices are and their postures.
I try to use conditional access policies for every client I can. It's essential for a zero-trust security posture. Conditional access policies make it possible. This dramatically reduces the risk of unpatched devices connecting to our corporate network.
The conditional access policies, compliance, and updates affect employees positively. Once the value is explained to them, they don't complain much about MFA.
You can use Endpoint Manager to see whether or not a device is compliant and apply conditional access policies in Entra to only allow connections to your environment from compliant devices. That significantly reduces your risk from unpatched software because that device cannot connect to your machine or environment. Using those two features together definitely helps protect us.
It saves some time. Either way, you will have to manage an Active Directory environment, but Intune allows you to manage devices over the internet. You don't need to worry if the machines are connected to a VPN or on-site.
What is most valuable?
The most valuable feature is probably mobile device management. Small businesses are coming under greater scrutiny and requirements for compliance as time goes on. We don't have to worry about a VPN because we can manage these devices, control company data, and lock users out. If needed, we can remotely wipe devices and switch them.
It's a big deal to be able to assure an insurance company or auditor that our endpoint devices are effectively managed. Intune is a solid solution if you use Microsoft and Microsoft 365 products.
What needs improvement?
Intune's third-party patch management could be better. It should be easier for an average system admin to keep non-Microsoft applications updated.
For how long have I used the solution?
I have used Intune for about six years now.
What do I think about the stability of the solution?
Intune is highly stable.
What do I think about the scalability of the solution?
Intune is highly scalable. Thus far, I haven't had to expand it to a thousand users, but the scalability appears to be readily available.
How are customer service and support?
I rate Microsoft support a nine out of ten. I enjoy working with them, and I'm often surprised at how good they are.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I've used Rocky MDM and Google MDM. Microsoft is the primary platform on which we do business. Intune works better with the Windows operating system, desktop applications, and SharePoint. It also reduces vendor complexity. I don't require multiple vendors, which reduces my costs because many features are baked into it.
I log into fewer systems daily. Microsoft's virtual monopoly on productivity applications in your average small business makes them the right choice in most situations.
How was the initial setup?
Deploying Intune is pretty straightforward. It doesn't matter whether you use autopilot or manual deployment. Each machine is enrolled in Intune automatically if it's connected to Azure AD with the correct user licensing. It's a relatively painless enrollment process.
Intune involves some maintenance, like any solution. You must ensure it's still working correctly and helping you achieve your business goals for compliance and configuration of your endpoints.
Which other solutions did I evaluate?
Meraki and Google are relatively common in small businesses. Many small businesses use Meraki for wireless and networking solutions, so that is one MDM option. Also, small businesses often start with Google and transfer to Microsoft 365 once they mature. Google is already in the environment. I don't sell anything as an IT guy, so I don't care what solution my clients use. I choose what's best for them in that particular instance.
I have tried Okta, but I haven't used it seriously as an MDM solution. I've only used Okta as an SSO provider. I didn't realize they did MDM solutions. I don't understand the point of Okta. If you have Azure AD and Entra, I can't fathom why you would bother with Okta. It seems redundant to me.
What other advice do I have?
I rate Microsoft Intune a nine out of ten. Don't underestimate the solution, and spend time learning about it. Intune has some powerful capabilities. Often, small businesses acquire systems but never fully utilize them because nobody has the time to dive deeply into them. It's a big solution with a lot of features.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Infrastructure Engineer at SpiritUK
Integrates well with Microsoft products and helps with security and compliance
Pros and Cons
- "For our clients, the conditional access feature along with different compliance policies that they can set is valuable."
- "The mobile management is good for iPhone and iPad, but the Apple Mac management needs improvement. That is probably because Microsoft does not have low-level access to Apple Mac hardware. If you are doing basic things, it is okay, but if you want to image Apple Macs and do things like that, then Jamf is much better."
What is our primary use case?
It is being used for device management. We have a couple of clients using it at the moment. They have Windows, Android, and iPhone devices that are managed by it. We have another client with only three devices, but they are Windows SE devices with the cut-down version of Windows.
They are using the latest version because it is always kept up to date online.
How has it helped my organization?
Microsoft Intune pretty much brings all of our endpoint and security management tools into one place. I cannot think of the ones where it does not do what we need. Apple Mac management could be better. It makes IT and security operations much easier and much more convenient.
We use the Enterprise Application Management features of Intune Suite. That is what the data manager is set to. These features are good. So far, we have had no problems with that.
Implementing applications is easier than MaaS360. There are definitely time savings. It is a lot smoother and a lot more well-integrated with Azure AD, etc.
The integration with Microsoft 365 and Microsoft Security for both cloud and co-managed devices is very important. That is the key thing for us. Almost all of the clients have Microsoft Office 365. We have only two clients who use Google G Suite, so this whole integration is very important.
It has helped us consolidate vendors.
Its benefits can be realized within a couple of weeks. It is very good because it works. Conditional access and compliance work from anywhere, so it is very good.
What is most valuable?
For our clients, the conditional access feature along with different compliance policies that they can set is valuable.
All the remote tools you can use on the mobile are also valuable. Features such as passcode reset for the device lock are helpful, so you can set a code and get people back into the device.
What needs improvement?
The Apple Mac management is a bit basic. The mobile management is good for iPhone and iPad, but the Apple Mac management needs improvement. That is probably because Microsoft does not have low-level access to Apple Mac hardware. If you are doing basic things, it is okay, but if you want to image Apple Macs and do things like that, then Jamf is much better.
Their support needs to be improved.
For how long have I used the solution?
I have been using this solution for about eight years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is definitely scalable.
How are customer service and support?
Their support is absolutely useless. They used to be good, but now, there are separate departments. We had an issue with conditional access where the client did not like the fact that single sign-on was working and automatically logging them into everything. They found it to be a security issue. It was not a good thing. We were trying to disable that, but then conditional access would not work. Their support could not figure it out. They would say that it is Entra and then they would say that it is Intune. I found out what it was. It was a token that was coming from a single sign-on.
How would you rate customer service and support?
Negative
Which solution did I use previously and why did I switch?
We use Jamf. We are still using IBM MaaS360 for some of the clients, but it is getting phased out for Intune.
MaaS360 does not integrate with all Microsoft products as well as Intune for obvious reasons. A lot of our clients want Intune for data protection, conditional access, etc. It is more about protecting their data and making sure that the devices are compliant and meeting certain policies.
The user experience of Intune is good. It is a lot less clunkier than MaaS360. We do most of the setup, so the users are not really affected by it.
Jamf is mainly for Apple Mac management. Intune is mainly for Windows management and mobile management. Intune does not have the same level of integration with Apple Mac, so you cannot image them properly. It supports very basic imaging. Jamf is a much better tool for managing Apple Mac.
How was the initial setup?
You have to use Azure because it is a part of the Microsoft environment.
I am the lead engineer involved in setting it up and configuring all the policies. It is straightforward.
From a maintenance point of view, there is no maintenance you have to do because Microsoft does it all in the cloud. You might need to tweak a few things on an app after you send it out, but those are general tweaks to make things run better. You do not have to put updates on or do things like that.
What about the implementation team?
We do not use any external help. We just use Microsoft documentation.
What's my experience with pricing, setup cost, and licensing?
We work in the charity sector, so a lot of our clients get Microsoft Premium licenses or Business Premium for free. They get ten licenses free, and a lot of our clients do not have more than ten staff members. They are getting the tool for free, so its cost is not an issue.
Which other solutions did I evaluate?
We did not evaluate other solutions.
What other advice do I have?
It is good. If your clients want to protect their data and they are using Microsoft tools, then Microsoft Intune is definitely the one that they should be using.
We are not using it to its fullest. There is a lot more we could do. I work for an MSP, so we are bound by what the client wants to do. If the client does not want to advance anything, we will not advance it.
In terms of IT productivity, it does not benefit us directly because we are an MSP, but it is a lot easier to use than MaaS360 and other ones we have tried. Similarly, it does not save us costs because we are an MSP. We charge people to implement a solution, and that is it. If we are paid to manage it, we obviously try to manage it, but it does not save us any money.
It does not affect our security because we do not use it ourselves. We just install it for other people.
Overall, I would rate Microsoft Intune an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer:
Last updated: Sep 29, 2024
Flag as inappropriateConsultant at IT Consulting Dariusz Szymkun
A modern, cloud-based solution for centralized management
Pros and Cons
- "It is helpful for managing devices anytime and any place without requiring dependency on the local networks."
- "There is still a gap between SCCM and Intune, especially in the reporting, inventory, and software deployment areas."
What is our primary use case?
I was using Intune with a customer. I had a long-term contract with a mining company, and then I moved to another organization. I am now in a different company. They all are large organizations. They are moving to the cloud, and Intune is one of the tools they are going to utilize.
In my previous job, Intune was being used for the cloud environment. We migrated fully from on-premises SCCM to cloud-only managed. We were utilizing all the benefits of Intune for cloud management, such as Windows updates, encryption, configuration, replacement of GPOs, etc. Moving away from the SCCM to Intune was a part of my previous job.
How has it helped my organization?
It is a modern tool. It is a cloud-based or software-as-a-service tool that gives you centralized management at one location. You have good dashboards. You have pretty much everything at a single location. You can manage different settings in one place. It is about manageability. It also gives you access from any place. It is a cloud solution, so as long as you have connectivity, you can do pretty much everything.
Intune brings all of the endpoint and security management tools into one place, but it is a lengthy process because I have been working for large organizations. They have been heavily dependent on on-premise services for years or decades, so the transition always takes time, but it is pretty successful. It is a good tool, but in security, there are dependencies, so it takes time for the transition to be successful. We have been using different security baselines and CIS or NAS methodology. It is a difficult process. Especially when you do GPO migration, not all settings are yet directly supported in Intune. Sometimes, you have to do a bit of workaround, power shell settings, and registry settings. It is tricky, but it is a key area for a successful transition.
Intune does not yet provide full endpoint visibility and IT control across device platforms. There is still a significant gap between all the systems we used on-premise and Intune. It is probably going to take time for Microsoft to fill the gap. Sometimes, you have to use third-party products, and sometimes, you have to use workarounds. It is a tricky one, but Microsoft is moving in the right direction, slowly but surely.
In terms of user experience, users do not use Intune. From the user perspective, it is about the performance and the impact, and there are some analytical tools to measure performance, reliability, etc. The built-in reporting is pretty good.
Intune affects IT productivity. From the IT operations perspective, things are much more simplified. The transition also enforces some cleanups, optimization, etc. It is definitely a great improvement for the IT organization.
Intune itself has probably not reduced the risk of security breaches, but there are many add-ons. There are many security products from Microsoft that integrate with Intune and Azure. Its reporting is great. By having the right knowledge and the right understanding, you can utilize this. There are some security baselines that you can utilize in Intune, which are coming out of the box. Microsoft is providing its own products for security, and this is probably an area we should explore.
Intune helps to save costs. As a part of the transition from on-premises to Intune, you can decommission your legacy infrastructure such as SCCM and domain controllers.
Intune has helped to consolidate vendors. It is one product, and Microsoft is trying to fill all the gaps with the add-ons. Microsoft is constantly adding functionality pretty much on a monthly basis. Utilizing a single vendor or single tool set is always good. This consolidation affects the licensing costs. When you have a single vendor, you have more options for contract negotiation, license discounts, etc.
It is very important that the capabilities of the Intune Suite are integrated with Microsoft 365 and Microsoft Security for both cloud and co-managed devices. You have a single pane and the same toolset. It is always good to utilize a single product.
What is most valuable?
It is a modern desktop management tool. It is a replacement for SCCM and GPOs. When organizations are moving away from the AD to Azure AD, especially for devices, it is very useful. It is helpful for managing devices anytime and any place without requiring dependency on the local networks.
What needs improvement?
There is still a gap between SCCM and Intune, especially in the reporting, inventory, and software deployment areas. For people using SCCM, Intune seems to be very simple. It is a good thing, but sometimes, it is a bad thing. There is a significant gap, especially for large organizations in terms of functionality. Microsoft still has a lot to do.
For how long have I used the solution?
I have been working with Intune for about 5 years. I am an endpoint management specialist. I am using it pretty much daily.
What do I think about the stability of the solution?
I would rate it an 8 out of 10 for stability. It is still under development, so there are issues. Sometimes, settings are not consistently applied everywhere, so they give unexpected results. It is probably because of the learning curve and also the ongoing development. Sometimes, there are bugs or some mistakes. It is a cloud environment, and sometimes, some settings are not applied. It is a matter of time. It will get fixed.
What do I think about the scalability of the solution?
It is very scalable. It is practically unlimited.
I have been working with companies with different numbers of users and devices. In one company, there were 40,000 devices, and in another one, there were 300,000. The number of users is more than the number of devices because the companies I have been working with have different shifts, so they are sharing devices. That is why there are more users than devices. The average is 35,000.
How are customer service and support?
The first and the second lines of support are quite poor. They redirect end users to publicly available documentation, which is not very useful because usually, the first thing you do is to check what is available publicly before you raise the ticket. Their support is not very good. I would rate their support a 6 out of 10.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I have been mostly using SCCM. The move to Intune was a part of the cloud transition. Most companies are moving not only the MDM solution but all kinds of services to the cloud. Intune is just one of them. It covers one of the areas.
How was the initial setup?
Its deployment and maintenance are easy. I would rate it a 9 out of 10 for both. It is generally deployed on a public cloud.
The number of people required for maintenance depends on the size of the organization. One person is never good enough because you need to consider various time zones, people going on leave, etc.
What's my experience with pricing, setup cost, and licensing?
Intune comes with the licensing that is common for large organizations. However, Microsoft has recently released many add-ons that are very expensive, especially for large organizations or corporations. They are not very happy. They are not willing to buy them. That is the problem. Microsoft should probably work on the strategy for pricing for the add-ons.
Which other solutions did I evaluate?
They probably did not evaluate other options. A lot of organizations are trying to use one vendor, and they have been using Microsoft for a long time. Intune seems to be the most complete as compared to others. I have been doing some research recently for a company, and I have been going through some Gartner reports. Intune is clearly number one in this area.
What other advice do I have?
To those evaluating this solution, I would advise to be aware of the fact that this is a product that is still being developed. There are many features that are not available yet, especially as compared to a product like SCCM which has been on the market for many years. Do not expect everything to be available straight away.
I have not used Intune much for BYO devices. The companies I have been working with do not allow that. They either provide their own hardware, such as laptops or desktops, or virtual desktops such as cloud PCs. They either have Azure virtual desktop or Windows 365, so I do not have much experience with BYO devices.
I have also not used Intune's Endpoint Privilege Management feature. It is probably a new functionality that is not free. For large organizations, it is a significant cost, so they are reluctant to go in this direction. They might use it in the future.
Because of its scalability and future-proofing, I would rate Intune a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Last updated: Apr 24, 2024
Flag as inappropriateInformation Technology System Administrator II at a government with 51-200 employees
Cloud-based and helpful for compliance and endpoint deployment
Pros and Cons
- "Intune provides full endpoint visibility and IT control across device platforms. You can individualize it for your company with the Intune Company Portal app."
- "I know that their AI pieces are at the infancy stage, but allowing users to do more tagging for information would be an interesting thing because Intune also directly integrates with Azure. Because a lot of the devices are hosted with that, you also get a lot of tagging of user data and other things like that."
What is our primary use case?
We are using it for the endpoint deployment piece.
By implementing Intune, we are trying to get everything off on-prem.
How has it helped my organization?
Because of the FedRAMP space and some of the pieces we are doing, such as the new policies for CMMC 2.0, we have more worries when we have anything physical. It just made sense to go for a cloud solution. Because we were already using Microsoft products and we were previously partially using Intune, it just made sense to use Intune.
Once you start getting things hosted in the cloud, rather than having to host the domain pieces yourself, they can be generally managed by Intune. One of the issues that we had when we had the hybrid or on-prem deployment set was that users would have to use a VPN to be able to change their user email or their password sets. Having to manage on-prem exchange was an issue as well. There were other things like that. As we are moving the pieces over, we are noticing a lot more availability and easier configuration of pieces for users.
Intune has helped us with compliance. We are using it for CMMC 2.0 compliance.
Intune provides full endpoint visibility and IT control across device platforms. You can individualize it for your company with the Intune Company Portal app. You can make applications and other things and have them deployed via scripts.
The user experience of Intune has been nice for other individuals from what I have seen.
A lot of security is achieved via Intune policy deployment cases. There is a baseline security set, and then a part of it was configured with some of the other things that we needed for CMMC 2.0 compliance. It is containerizing for cell phones in particular and not allowing specific connection sets. We have more cells than anything else. A lot of the users do not even need to touch a lot of the system sets that we use. We have not had any issues with user availability.
One of the things that you can do with Intune is that you can have approved app sets. As a corporation, you know that a user needs to use an application, so you can have it added to Intune Company Portal apps. You can have it pre-downloaded for the users without the need for an admin's intervention. For the apps that users could need or do need, you can either force installation or set it up for the user if they need it.
Intune certainly affects our organization's attack surface. We are utilizing DLP, domain policies, and things like that via Intune. It is nice to be able to make sure that the users can have their laptops, and there is also no need to have a VPN service for a lot of those. It makes it easier for each user's things to be isolated.
We started utilizing the app proxy service. If you have local applications that use a web URL, you can use the app proxy and have Microsoft handle the VPN connection set rather than needing a VPN yourself.
Intune has helped to reduce the risk of security breaches in our organization. Intune has saved us costs. It has helped us reduce our workloads. When doing the hybrid deployment, we have to manage our on-prem environment and have additional security for it. By moving into the cloud, we have reduced the electrical cost of the office. There is also a price difference. Hosting our own VM sets versus having them host in Azure are two different things. Doing cloud integrations with pieces is easier in Intune than on-prem. It has been a nice thing that we have been dealing with recently.
What is most valuable?
We are using it for its DM Hosting, user hosting, and end-to-end deployment as well. It is all very nice.
What needs improvement?
I would like them to stop making changes and not tell people they have already made the changes.
I know that their AI pieces are at the infancy stage, but allowing users to do more tagging for information would be an interesting thing because Intune also directly integrates with Azure. Because a lot of the devices are hosted with that, you also get a lot of tagging of user data and other things like that. Tagging is still at more of an infancy set. You get a lot of false flags.
There can also be a more simplified use case for app deployment. They leverage MSIs and WIN32. I am having a more washed-out EXE process. Rather than having to build the script sets yourself, having them autogenerated script based on you uploading in a default location would be nice.
For how long have I used the solution?
We are still in phases. It is not simple to just do a hard cutover for a lot of it.
How are customer service and support?
Even though it is a Microsoft product, Microsoft does not sell or support the product directly, so you have to talk to a third-party set that is considered their partner to be able to access support. Our partner is JourneyTEAM. After utilizing billable hours with them and other pieces like that, we have been getting a lot of nice support via them. I would rate JourneyTEAM a 10 out of 10. I really enjoy working with those individuals.
Which solution did I use previously and why did I switch?
We were using Symantec, and we ended up using Intune. Symantec is a nice security piece, and it does some device management. There is a domain-joined service for laptops. Intune has a similar service set. You do what is called the hardware hash join into the Microsoft Intune to have the laptop cleaned by an organization rather than turning on a VPN and connecting to a domain service for a domain controller that an organization has. A lot of that is cloudly or natively handled by Intune. Especially if you go further with the Intune hardware hash joining process, there are some script sets that were put out. You can even do hardware hash harvesting from where you are purchasing, so you can have the OEMs give you the hardware hashes to be able to input that into your cloud environment. You then know that anyone cannot just walk away with the laptop because it is still joined to your Intune base.
In terms of differences between these two solutions, there is the domain service set. Intune manages the whole domain set, and then it also integrates into the other application sets. Intune is more of a product suite set. It also does the policy and detection pieces for devices, whereas Symantec is more strictly the policy sets and security.
What other advice do I have?
Intune can bring all of your endpoint and security management tools into one place. For the use case that we are doing, we are leveraging additional security software as well, so there is a little bit of everything.
We are not using it for corporate assets. We are utilizing the M365 VM license set, which is a semi-part of Intune. That is how the users are reaching some of the remote corporate resources.
I would rate Intune a 9 out of 10. It is definitely a nice product, but there are nuances to it. Especially with them coming out with and changing name schemes for a lot of the features, you have to do digging to find the whole use case, but with all the options and different use cases, there is a lot to be gained.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Last updated: Apr 16, 2024
Flag as inappropriateBuyer's Guide
Download our free Microsoft Intune Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Product Categories
Unified Endpoint Management (UEM) Configuration Management Remote Access Enterprise Mobility Management (EMM) Microsoft Security SuitePopular Comparisons
Workspace ONE UEM
ManageEngine Endpoint Central
NinjaOne
IBM MaaS360
Ivanti Neurons for MDM
Sophos Mobile
Citrix Endpoint Management
Faronics Deep Freeze
Ivanti Endpoint Manager
Scalefusion
Hexnode UEM
Matrix42 Unified Endpoint Management
Tanium XEM
Adaptiva
Buyer's Guide
Download our free Microsoft Intune Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What is lacking in comparison with AirWatch?
- What are the benefits of Microsoft Intune for IT Admin?
- What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
- What are the main differences between Jamf Pro and Microsoft Intune for Mac management?
- Which solution is better for an educational organization: Google Workspace or Microsoft Intune?
- What are the differences between MobileIron UEM and Microsoft Intune?
- What are the pros and cons of Microsoft Intune?
- How does Microsoft Intune compare with ManageEngine Desktop Central?
- Is it worth migrating from WS1 to Intune if we have Microsoft 365 E3 available?
- How does Microsoft Intune compare with VMware Workspace One?