Microsoft Intune Reviews

We are rolling out the product to manage cloud-based devices. We heavily use it for iOS and Windows devices.

Microsoft Intune improves our organization’s response time. We are supporting an older population of users. It is a key advantage to be able to support users who lock devices quite frequently.

The product’s biggest advantage is its ability to unlock a large number of devices remotely. It supports end-users who tend to lock their devices quite frequently. Its conditional access policy helps us keep the users logged in to their devices.

Microsoft Intune fails a lot when it comes to device compliance. The devices fall out of compliance a little too easily. If the users don't check in within a certain amount of time, they become non-compliant, even after having up-to-date standard settings.

I have been using Microsoft Intune for three years, personally. Our organization was using it for one or two years before I joined.

I haven’t encountered any stability issues for the product.

Microsoft Intune supports over 10,000 devices for our customers, primarily using iOS and Windows. We have a large number of managed apps in the aerospace industry. We were able to transfer apps to our devices managing app licensing through Intune.  I rate the product’s scalability a nine out of ten.

The technical support services are pretty decent.

Positive

I can see a good return on investment in terms of the areas it can automate to summarize day-to-day tasks, making them less time-intensive.

Intune has helped us greatly by rolling out conditional access policies with the RBAC settings. It helps us create a security posture for devices.

The product is critical for our organization to keep devices safe. We have a large number of around 300-400 IT executives. It is crucial to be able to limit any one user or group of users within the IT field from a zero-trust standpoint.

In the time aspect, the product helps users get the right tools whenever required. It saves a couple of work hours per month by letting the right IT executives know how to access the devices.

We heavily use iOS space with iPads. I advise others to decide to buy the product depending on the operating systems their environment supports. They should make sure it is the right product for their devices. 

I rate Microsoft Intune an eight out of ten.

We use the solution for auto-enrollment with app EPP and application deployment with EPP.

We're currently testing the possibility of using the solution as a new MDM tool for mobile applications.

All regions and departments operate on the same model; we turn on the device, select if it's personal or corporate, and all the products and profiles are loaded onto it.

The solution hasn't improved our organization yet, as we're still in the testing phase and have yet to go into full production.

The ability to switch between Affinity and non-Affinity enrollment is great. 

The wiping features are very good. 

The capacity to create more profiles and switch between corporate and personal devices are beneficial features.

One of the main advantages of Intune is that it's a Microsoft product, so it integrates with the other MS products we use.

The solution needs to be better for managing laptops; many functions are still unavailable in this regard.

The scalability could be improved, and like most other MDM products, Intune is good but not 100% there yet.

We've been using the solution for a couple of years. 

The stability is good, and there has been a lot of progress since I last used the solution.

The solution is working well for the most part, but some improvements could be made to the scalability. 

I never had to contact technical support. 

I previously used MobileIron UEM and VMware Workspace ONE.

I wasn't involved in the initial deployment. Now that it's set up, deployment to devices requires turning the phone on, and the device will automatically pull up the profile if the client is linked to our Apple Business Manager tool. We currently have one staff member involved with the maintenance, but we're looking into distributing it to others on the same team.  

The pricing for Intune and the competitor products are all within the same range, there is no true advantage when it comes to cost. 

I evaluated MobileIron and VMware. 

I rate the solution seven out of ten. 

We have yet to reach a level where we can notice flaws or identify areas for improvement since we're still checking and have yet to run the solution through a capability list.

My advice to others evaluating Intune is that it's the best solution for mobile devices like Androids and iPhones. However, if you're rolling out physical laptops, I recommend using a second tool, as there are still many unavailable options on the Intune app for laptops.  

Generally, the top three uses are operating system deployments, software updates and patching, and software deployments to endpoints.

If you're a small shop, a two-person organization, yet you have many endpoints, five to 10,000, you can easily manage them. You can manage the masses with one person part-time and it's a good automation tool that takes away the need for multiple folks to do a lot of things in the environment like software deployments or patch management. It's very good at automating those functions.

The reporting aspect is very nice. It's got about 450 canned reports in it. They're easily customizable. You can get really good granular reports for inventory, patch management, status, and everything. It's very good at reporting.

It's not hard to set up. It's easy to manage.

Third-party patching and other solutions integrate with Endpoint Manager. From that perspective, there's no deficiency. 

The UI is good. You can filter things out so that you'll only see things that are pertinent to your function. 

It's really matured and improved over the years by assimilating competing products. There are a lot of things that used to be better than Endpoint Manager or not available in Endpoint Manager that were absorbed or purchased and placed into this product. From a deficiency perspective, I can't recall coming across anything substantial. I'm trying to think of a weakness. I compared it to Ivanti. From a new user's perspective, it may be a little overwhelming because there are quite a few things to look at in the console, however, once you are sort of acclimated and are familiar with your core functions, it's fairly simple and straightforward.

You can modernize the UI a little bit, however, change for a sake of change isn't always a good thing.

I've been using the solution for 25 years. It used to be called SCCM.

The solution is very stable.

The scalability is great.

The largest user base I've ever supported, for example, was a headquarters and they had 220,000 endpoints. In contrast, small colleges and educations may only have 500 users, so they can get by with a single server hosting everything. SQL and everything can be one server.

For us, the solution is extensively used.

If you're looking forward to deficiency, I'd say that the Endpoint Manager support at the lower levels is poor. As you go higher and you get like a more engineering level, then you're fine, however, the early stages of support are not the best.

I've worked with Ivanti and LANdesk and other tools.

I've used Endpoint Manager every day. I'm currently using it. I've been using it for 25 years. However, there are other ones like BigFix, which I've rarely used. I've used LANdesk a few times. And people would try to use LANdesk to avoid the expensive Endpoint Manager, however, at the end of the day, it costs them more in time to use the LANdesk solution. Ivanti is a competitor, however, they're cobbled together with Shavlik, for patch management they've got Altiris. They bought Altiris and Altiris has been passed around like a cheap hoe from Symantec to Intel, to everybody.

Altiris was actually developed to support Endpoint Manager and provide asset management. At the time, Endpoint Manager didn't have good asset management, so they actually worked with Altiris, only to find out that Altiris was actively taking Microsoft customers. Microsoft booted them to the curb and they haven't done well since. That was back probably in the late nineties that they did that. Endpoint Manager has been around the longest, it's survived, it's matured and it's the top dog in general.

Complexity-wise, it's not hard to set up. It's just a lot of small steps, such as making sure the firewall ports are open and certain things are in place, and all the perquisites are taken care of, as the wizard, the installation wizard for Endpoint Manager, is pretty straightforward. As long as you have SQL and some other features turned on to support the different functions of Endpoint Manager, you're fine. You'll need WSS or you'll need WSS for patching and you'll need SQL reporting services for the reporting portion of it. All those small things. The more lights you turn on, the more configuration you have to do.

The deployment itself took me four hours end to end, to put all the prerequisites in, however, understanding, of course, may take a while for someone new. I've done this now for over 25 years. For me, it's pretty straightforward and I have, a lot of these things PowerShell scripted so it works very well. You can create a PowerShell script and set the whole thing up from Powershell, which is what I've done.

Maintenance requirements are low. Since it lives on SQL, if you put a SQL maintenance plan in place, it's pretty much, it's very healthy, it's very stable.

We've seen an ROI. It enables you to pair down the resources necessary for configuration management. You don't need a large shop to maintain your environment. If you want to develop it, if you want to create new images all the time and that sort of thing, then you're going to need to staff yourself accordingly, however, not necessarily to support Endpoint Manager, just to develop those and payloads that it delivers.

I'm a partner. I'm using the most up-to-date version of the solution.

While the solution was on-prem initially, now it's converted to more of a hybrid. They have co-management so you can manage on-prem and cloud together.

I'd rate the solution nine out of ten.

We use it for the rollout of Windows and Apple devices to our users.

Its direct integration with all the other products that we have from Microsoft is valuable. We're using the E5 license, and we have a whole wealth of different products available. It just makes it easier to have everything from one provider. 

One big problem with Microsoft is that they're changing the names of the products quite often, or they're quite consistently doing so. Intune is now Endpoint administration. Constantly switching the user interface or the administrative interface makes it quite hard to keep pace. If you are on a two-week holiday and you come back and look at the same screen you have looked at for the last couple of months, it looks different, which is annoying. Changing things around all the time doesn't make it easy.

There are some elements where the integration isn't finalized. So, for some of the things, you use the user interface, meaning the administrative website, and for some of the things, you have to use PowerShell to make changes, and it's not quite clear why you have to do things at one point this way and at the other point that way. If they could improve that a little bit more, it would be a good thing.

Other than that, functionality-wise, it, more or less, serves our purpose. I'm not really sure what I would wish more at the moment.

I have been using this solution for over a year.

It is stable 99% of the time. There are some problems with Microsoft in terms of outages, but overall, the solution is very stable.

It is very easy to scale. It is basically adding additional licenses. It requires adding additional domain names and things like that and maybe adjusting a couple of security groups, but other than that, it's really easy to scale up or down.

We have only 120 users in 44 companies. A few of them have financial, accounting, or legal backgrounds. We are not an engineering company; we are a service company. We are a shared service center catering to the needs of more than 44 other companies. That's our business. We are a managed service provider to all these companies.

Its documentation is quite okay, and if not, if you Google things, you would find almost everything. 

We had four, five issues over the last year, and we had to contact them. They were actually quite swift at solving problems. So, overall, we are happy.

It was easier than expected. We did the full deployment for 44 companies and about 120 users in about three months.

ROI is very high at the end. We were using a full data center before with three racks built up with about 30 host systems and 220 virtual servers that we operate in, and by just switching to Microsoft 365, we could get rid of all of them. It made our life easier in terms of support and maintenance. We have saved the costs for all the hardware that we had and all the hassle that we had when parts were broken.

If you ask the accountant or the finance department, they'll tell you that it is way too expensive, but when I look at the cost and compare it with the value you actually get, it's more than fair.

We looked at the Sophos solution as well. We are a Sophos partner, but it was easier to deal directly with the Microsoft solution primarily because of the rules management and the Microsoft groups and the security groups that we use. We use rule-based access, and we have access packages so that users can elevate their rights with an approval process in the back.

I would rate it an eight out of 10.

We are using it for software deployment. I am able to push any software within minutes. For example, if I want to install Google Chrome for all the users, I can push Google Chrome through Microsoft Intune. Within five to ten minutes, all the users will have Google Chrome. 

We also use it for device management. We can easily register a device. It is very easy. It is helpful for BYOD.

I am happy with Microsoft Intune because Windows updates are easy. There is no need for SCCM. You can push an update, and wherever a system is available, it gets updated. Windows updates are very easy with Microsoft Intune. For Windows systems, endpoint management is very easy with Microsoft Intune as compared to other technologies.

It is user-friendly, and the performance is also good. It is a convenient product.

Sometimes, updating a client policy is very difficult. This needs to be improved.

Their support also needs improvement.

I have been using Microsoft Intune for about three years.

It is very difficult to get support from Microsoft. They are not able to troubleshoot some of the issues. They have support, but it is very difficult to get support.

We were using the SCCM server. It is a Microsoft product.

It is easy. It is not difficult.

It is cheap, but as compared to Google, it is costly. Google is cheaper, but quality-wise, Microsoft Intune is better.

I would recommend Microsoft Intune. It is a good product. 

I would rate Microsoft Intune a seven out of ten.

It is good data protection - protecting your endpoints, information on those endpoints, and information stored centrally in Office 365. It focuses on endpoint protection, configuration, and visibility. 

You need to know what you have and where it is before you can consider protection. As an MDM umbrella covering all mobile devices, we can instantly see across all of them and centrally manage policies.

The most obvious example of improvement is full hard drive encryption. You want all your endpoints encrypted, and if a device is lost or stolen, you want to be able to wipe it remotely or disable it remotely. MDM allows all of these features. 

We can ensure all devices are encrypted, check instantly and get reports, reset them, wipe them, or block them remotely at any time from anywhere in the world. These are powerful and crucial tools for incident management and data and information governance. You need to be able to protect what you need to protect.

It's very powerful for onboarding employees. It's also powerful for integrating other software applications or pushing out solutions. For example, we use Intune, or sometimes MDM, to ensure all our computers have CrowdStrike installed. MDM automates the installation process, and we get reports confirming its success.

We can also use it to push out other important security software and see any unauthorized software present on the machines. Although we primarily use CrowdStrike for that purpose. CrowdStrike can scan every computer, identify potential threats, and prevent the installation of unauthorized software in the first place. 

So, MDM is great for integration in terms of onboarding new staff remotely and securely. It confirms the computer matches all our policies and flags any non-compliance issues. Based on compliance, we can even stop non-compliant devices from connecting to our network through conditional access policies. It's all very automated within Office 365. It integrates everything together, by design.

It's excellent. Top-class product. 

Fundamentally, MDM is the ability to centrally manage all of our endpoints in terms of the policies applied to them, along with all the actions we can perform on the devices themselves. 

We need to harmonize policies across all machines, update them in real time, and get reports. So, all endpoints constantly communicate with Intune, allowing us to view, disable, restart, and push new policies at any moment. It's this centralized control over a distributed network of endpoints that's crucial.

Because our endpoints were remote-first, not centrally located, how else would you manage a large network of computers scattered across individual homes? An MDM solution is the only way. That's why it's so valuable. 

We can manage and standardize security across your environment, identify problems, receive alerts, and so on. That's its purpose, and that's also why it's so good.

The reporting is excellent. You can draw what information you want in the reports. So, that's also excellent. I would rate the rating capabilities a ten out of ten as well.

It's hard to point to an area of improvement because, like most Microsoft cloud services, they're constantly evolving and adapting. Keeping up with the changes can be more challenging than finding features that are missing.

The only thing to consider is complexity. Think about Excel. It can do everything imaginable, but it's not necessarily the easiest software to use. You need to know how to use it.

Similarly, while Intune might have all the functions you need, finding or configuring them can be difficult, especially for new users. The key is user experience, making essential features easier to find. It's easy to get lost in the complexity.

However, I've never found a crucial function missing in Intune. It just can be challenging to navigate sometimes. They're always working on making it more user-friendly, but it's a difficult task for something so complex. So, improving user experience would be my suggestion for improvement.

In future releases, I would like to see better integration with Apple products. While they integrate reasonably well already, it's never quite as seamless or up-to-date as it is with Windows. That would be helpful because many companies have a mix of devices. So, better integration with macOS.

 I have been working with this product since the beginning, forever.

When I joined the company, everything was already in Office 365. No physical network, and no domain controller. All devices are connected by the internet, not a physical office network.

I've never had any issues with stability. I'd rate it a nine out of ten because I rarely give anything a perfect ten. But it's very stable. I haven't experienced any stability issues.

It's perfectly scalable. I'd rate the scalability a ten out of ten.

There are around 200 end users using it in my company. 

The customer service and support are excellent. 

Positive

We use a family of products. We don't want to put all our eggs in one basket. For example, we use software from other providers for security awareness training, phishing protection, and so on. 

However, as a Microsoft Gold Partner, we're heavily integrated with Office 365, Microsoft Defender for Security Center, and everything that goes along with Azure and Office. We essentially have a suite of different tools depending on the specific need.

For our Endpoint Detection and Response (EDR) or physical endpoint security on laptops, we also use CrowdStrike. Our approach involves leveraging different options depending on their strengths.

Some vendors like CrowdStrike claim they can do everything, but we prefer specialization. We want different providers to handle different aspects of our security.

We have Microsoft Defender, which provides access to threat intelligence and also offers endpoint protection. While Defender is a competitor to CrowdStrike, we avoid using its endpoint protection functionality to maintain our distributed security approach. However, we utilize Microsoft Intune for Mobile Device Management (MDM).

And through Intune, we can push out policies that enforce specific security standards on all our computers, such as encryption.

We leverage it for managing device security policies. Additionally, all our devices access Office 365.

We use Microsoft security features within Office 365, SharePoint, and OneDrive. 

As with everything in IT, once you reach a certain level of complexity, which Intune does, the rule is: everything is easy when you know how, and everything is difficult when you don't.

Especially with something as complex as MDM, if you don't know everything, it can be very difficult. But if you do, it can be easy. So, it depends. There are very few people who know absolutely everything.

So, there is a difficulty there, but once you know how to do it, it's easy. Like user experience is not necessarily intuitive.

The pricing is not cheap, especially with inflation. They've had to increase their prices. It's not excessive, but alright. So, it's reasonable, but it would be better if it were lower.

In my experience, it would be difficult to find a competitor. It's kind of the gold standard because it's Microsoft dealing with Windows. They have an inherent advantage.

If a third-party vendor tries to offer a competing MDM solution, they're always a bit behind the curve. They don't have first access to all updates or the roadmap for future developments. There's always an element of catching up. 

On the other hand, Microsoft can bake these changes into the product as they make them. So, on that basis, it's quite simply the best.

Overall, I would rate the solution a nine out of ten. 

I use Intune to control and protect my laptop. It keeps things secure, manages apps, and ensures everything follows the rules. Overall, I am quite satisfied with it.

Intune has positively impacted IT productivity in our organization. It centralizes device information and software installations, allowing us to quickly identify and address vulnerabilities. For example, we can easily find all vulnerable devices and take prompt actions to secure them by patching vulnerabilities in software.

Intune has contributed to reducing the risk of security breaches in our organization. When we identify vulnerabilities, Intune allows us to quickly quarantine and patch them, minimizing the potential for security threats.

The most valuable feature of Intune is the central dashboard for compliance and policy management. It is also handy for asset management and it covers all the basics we need right now.

There is room for improvement, particularly on the Apple side. Enhancements for managing MacOS more comprehensively would be beneficial. While it is good, there are still features missing compared to the management capabilities we have for other operating systems.

I have been using Microsoft Intune for three years.

Overall, the product has been stable.

I would rate the scalability of Intune as a nine out of ten. I'm sure that with better Mac OS support, it could be a perfect ten. In our company, three admins manage around 1,000 devices using Intune.

We don't rely on technical support extensively, but when needed, Microsoft provides satisfactory assistance. I would rate their support at an eight out of ten. Improvements could be made in response speed and overall competence, but as long as they maintain good technology support, it is sufficient for our needs.

Positive

We work with various Microsoft products, including Office 365 Enterprise licenses, Azure, and numerous other licenses and services. Our setup involves multiple tenants and subscriptions, covering a wide range of Microsoft offerings.

I was involved in some areas of the deployment, and it was quite straightforward, especially on the client side where we handled it internally. Rolling it out to nearly 1,0000 computers took some time, just under a year. We managed it with a team of three people.

The pricing for Intune is competitive.

Intune does a good job handling Microsoft tools, but not everything is in one place. We have used Microsoft products for ten years, and while Intune does its job well, it doesn't bring all our endpoint and security tools together. It is part of the picture, but not the whole thing.

Intune provides complete visibility and control across various device platforms, which is crucial for me, as it ensures effective IT management. Intune significantly helps our IT operations by giving a clear view of the overall status of the laptops and endpoints we currently use. The user experience of Intune is good.

Intune plays a role in securing hybrid work, but it is more about configuration. Microsoft Defender handles the security aspects, and while Intune shows the steps, it doesn't secure the environment on its own.

The cost savings from Intune in our organization are significant, potentially in the tens of thousands, depending on the severity of security incidents.

Using Intune has allowed us to consolidate vendors as we no longer require third-party MDM software, enabling us to stick with the same vendor.

The consolidation of vendors, primarily through using Intune, has positively impacted our security posture. It allows us to view the overall status in one centralized place. The consolidation didn't affect licensing costs; there was no change.

Intune has become increasingly important in our cloud journey. Integrating Intune capabilities with Microsoft 365 for both cloud and on-premises-managed devices is valuable. We use it regularly, and while it is hard to quantify its exact impact, it plays a significant role in our operations.

Overall, I would rate Microsoft Intune as a nine out of ten.

We primarily use Intune for compliance monitoring and managing mobile devices. Once we fully integrate the entire Asian region, the solution will cover between 500 and 800 users in our company. 

Intune provides full visibility into all active mobile device users. If their devices are noncompliant with our security policies, I have the flexibility to update them remotely. 

The most valuable feature is Intune's ability to lock and remotely wipe devices when a user loses them. We can prevent any unauthorized access.

It would help if administrators could pinpoint the exact location of a stolen device to help law enforcement retrieve it and apprehend the suspect.

We haven't started using Intune yet, but I've been evaluating the solution for the last three months. We're still waiting for our primary tenant to be provisioned.

I rate Microsoft Intune's stability a nine out of ten. The Microsoft platform has been mostly stable aside from a global Outlook outage during our test period. 

I rate Microsoft Intune's scalability a ten out of ten.

We used the MDM included with Google Workspace, but we transitioned to Microsoft because we were unhappy with the platform. Managing files and data wasn't intuitive, so it didn't meet the needs of our growing company. Most of my users complained about losing data while using Google Workspace. Unlike SharePoint, Google Workspace doesn't sync automatically so that you can work remotely offline.

SharePoint saves all your work locally and updates it when you connect. It's easier to use and a better platform overall. Google Workspace is a good platform, but it can't keep up with our growth.

I rate Intune a nine out of ten for ease of setup. I have a lot of experience with Microsoft, so it was straightforward. We have a hybrid environment with an on-prem 2019 Windows Server and Google Workspace. We're slowly transitioning from Google Workspace to Microsoft 365 and shifting from an on-prem Windows Server to a hybrid environment on Azure.

Our deployment is still in progress, but it's expected to take six months. The deployment includes not only our Philippines office but also branch locations throughout Asia. 

We started by evaluating the solution to see how user-friendly and compatible it was with our organization. Next, we created a training program with the help of the partner and vendor to introduce our users to the Microsoft platform. From there, we are face-to-face training in each country. The deployment team consists of eight people from our company and three from the vendor. 

I rate Intune an eight out of ten for affordability. It's bundled with the 365 licensing, which is competitive overall. 

I rate Microsoft Intune a nine out of ten. I give high marks to Intune for scalability, ease of use, and simplicity of management. The transition from Google to Microsoft has been seamless. There is room for improvement. For example, I would like it to be more adaptable to non-Microsoft operating systems, such as Android and iOS. I would give it a 10 out of 10 if it offered the same functionality on iOS and Android that Windows users have. 

My advice to potential users is to evaluate the platform while trying to understand your company's needs and how it fits into the larger picture.