We use Intune to manage devices and configurations on all platforms, including Windows, iOS, iPad, and Android. It also provides conditional access from the Azure portal. We have also used Intune to bifurcate data and data transfers. We have an Intune entry list that shows the device count and bandwidth of each, so we can manage the data flow from every device based on whether it's corporate or personal.
Consultant at a tech vendor with 10,001+ employees
We can deploy an application to several users with a single click
Pros and Cons
- "Intune is flexible. If you want to move a device that was previously on-prem, we can bring it to the cloud and apply all the policies. This is helpful for even those organizations that were on-prem and not on the cloud. They can also come and use these features, which are pretty cool and would be handy to protect the data and manage the devices as well."
- "The best part of Intune is application deployment. We can deploy an application to several users with a single click. We can use conditional access, granting access to users based on certain conditions, such as location, platform, etc."
- "The reporting causes problems because we're trying to gather data to present to the management, but we can't get the data they request. If a user has removed an application from his device, but it won't report it at exactly the right time. It takes time to sync from the device to the portal. Let's say we are preparing a list or deck for the number of compliant devices that meet all of the organization's requirements. In a real-time scenario, that device could be compliant, but it is showing as non-compliant on the portal. It sometimes hampers the overall decisions that we make on our end."
What is our primary use case?
How has it helped my organization?
Intune is flexible. If you want to move a device that was previously on-prem, we can bring it to the cloud and apply all the policies. This is helpful for even those organizations that were on-prem and not on the cloud. They can also come and use these features, which are pretty cool and would be handy to protect the data and manage the devices as well.
It's handy to manage all the hybrid devices that are on-prem and in the cloud. If a user accesses company resources on their work profile or their personal devices, they can register the device in Intune and access the company data. Intune is a crucial part of the overall structure because we can use it to analyze risks and threats coming into our organization and predict what will be vulnerable. It's necessary to analyze all those things from a security perspective.
Intune's advanced endpoint analytics require a separate license. We are keen to use that one because it comes with more features, flexibility, and control for admins over the devices. We haven't used it, but I've tested it on my tenant with a few devices
It is much easier for admins to use that cloud PKI infrastructure compared to when we had to set up all those things using our Skype profile from Intune. It's quite handy. It takes a little work on the admin side, but the whole structure is the same.
Intune drastically improved our productivity. Work that was previously completed in four hours could now be finished in one. It saved our IT admins many hours of work. Once we migrated from our on-prem servers to the cloud, the Cloud PKI saved us a lot of money. I don't know the numbers, but we are saving so much money because of this.
What is most valuable?
The best part of Intune is application deployment. We can deploy an application to several users with a single click. We can use conditional access, granting access to users based on certain conditions, such as location, platform, etc.
With the help of Microsoft Defender, we can bring each endpoint or node under Intune's umbrella and manage it through Defender. The most effective feature for managing mobile devices is the compliance policy, which mandates that any user on a particular device should be compliant. It should meet the requirements the company sets and be upgraded. The user should meet all these security criteria we have implemented.
Intune's app management can support our business operations. For example, if a user wants an Android app, we can deploy it through the Android store, but if we're talking about any MSI on a public-facing platform, we can convert it into Win32 and deploy it to the whole enrollment. Intune is quite flexible.
Compared to another Indian MDM tool I use, Intune provides more flexibility for security. The Microsoft name assures us that our data will be protected. Control over data is the main concern on the cloud.
What needs improvement?
The reporting causes problems because we're trying to gather data to present to the management, but we can't get the data they request. If a user has removed an application from his device, but it won't report it at exactly the right time. It takes time to sync from the device to the portal. Let's say we are preparing a list or deck for the number of compliant devices that meet all of the organization's requirements. In a real-time scenario, that device could be compliant, but it is showing as non-compliant on the portal. It sometimes hampers the overall decisions that we make on our end.
Buyer's Guide
Microsoft Intune
May 2025

Learn what your peers think about Microsoft Intune. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
856,873 professionals have used our research since 2012.
For how long have I used the solution?
I have used Intune for four and a half years.
How are customer service and support?
I rate Microsoft premium support nine out of 10. Their premium support is top-notch. They build a bridge to resolve the issues. Standard support varies, depending on the engineer you get. It could range from six to eight out of 10.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Previously we used SCCM. It's a Microsoft solution, but Intune's user experience is much better because it's cloud-based and it's more cost-effective.
How was the initial setup?
Deploying Intune is pretty simple for someone who is experienced with the program. The admin needs to know the basics. Otherwise, it's user-friendly. The time needed to deploy depends on the network, but if everything is perfect, it only takes five to 10 minutes to deploy an application on a Windows device. An Android device is in a similar range. In some weird scenarios, it may take 15 minutes. It doesn't require much maintenance after deployment because it's cloud-based, so we don't need to update anything.
What was our ROI?
Intune cuts the amount of time we spend on these tasks in half.
What's my experience with pricing, setup cost, and licensing?
Intune is a better value than SCCM or other management tools because we can integrate more with Intune.
What other advice do I have?
I rate Intune eight out of 10. I would recommend Intune to others. Microsoft offers many new handy features, such as the ledger and the ability to locally administer managed devices. It doesn't require much hassle to set up these things. It's worth the price.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner

Team Lead, Cybersecurity at a financial services firm with 1,001-5,000 employees
Improves productivity and is free with our license but it isn't very flexible
Pros and Cons
- "We work completely in a Microsoft environment. Its interface is similar to other Microsoft solutions that we are using such as Microsoft Defender. So far, for our administrators, it is easy to use."
- "At the moment, we need more flexibility. We have some offices migrating to Windows 11 remotely. Sometimes, it is difficult to manage image installation because we have to collect some information before starting image deployment. Currently, Intune cannot collect the information needed for deploying new images."
What is our primary use case?
We are using Intune for managing endpoint devices with zero-trust principles. The devices are not domain-connected because most people work from home. We do not trust these computers, so we use Intune to deploy and enforce policies related to updates, software installation, and management of admin users.
When we are using Microsoft products on mobile devices, we are using Intune to enforce policies on them.
Our usage is very simple. We are using Intune to manage devices that we do not trust. We are using Windows 365, and we install all applications only on these virtual PCs in the cloud. We do not have anything on endpoint devices. Not even a simple document can be downloaded there. We just have an access point to Windows 365 machines in the cloud. We are a financial company. There are not too many enterprise applications that we can use. We prefer to use zero trust. This means no there is no data on company devices at all. It is only on the cloud machines. It is easier to control one perimeter than 10,000 or 20,000 machines. We can reduce the attack surface in this way.
How has it helped my organization?
Intune increases the productivity of our IT team.
There is a reduced cost of ownership and management. We do not need a lot of additional training. Administrators can share roles because its interface is similar to other Microsoft solutions. With one or two days of training, administrators can start working with it. There are a lot of Windows specialists in the market.
What is most valuable?
We work completely in a Microsoft environment. Its interface is similar to other Microsoft solutions that we are using such as Microsoft Defender. So far, for our administrators, it is easy to use.
What needs improvement?
At the moment, we need more flexibility. We have some offices migrating to Windows 11 remotely. Sometimes, it is difficult to manage image installation because we have to collect some information before starting image deployment. Currently, Intune cannot collect the information needed for deploying new images.
For how long have I used the solution?
We have been using Microsoft Intune for three years. I also used it for two years in my previous work.
What do I think about the stability of the solution?
Intune is a stable product with no significant issues. We have standardized hardware. We do not have a wide variety of endpoints.
What do I think about the scalability of the solution?
Intune is quite scalable. We started with 3,000 machines, and we now manage 15,000 machines. Our endpoints will probably grow.
How are customer service and support?
I have not interacted with Microsoft technical support personally, but I was satisfied with their support in my previous company.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have not used any other solution in my current company.
How was the initial setup?
We are using the public cloud for access, but everything is closed. There is no public access to infrastructure. Access is only through the cloud. There is no VPN or any other way.
I was involved in the security assessment in the beginning. The initial setup was quite easy because we did not look for very complicated functions. We did face some issues with the multi-user mode but resolved them. It took us about a month.
It requires maintenance. You have to review regular policies and adjust policies when something changes in the environment or you deploy new applications. Its maintenance is mostly done in-house. Only in a very complicated situation, we involve a third-party consultant.
What about the implementation team?
We performed the deployment with the assistance of a third-party consulting company, not resellers. Three engineers from our team were involved.
What's my experience with pricing, setup cost, and licensing?
Cost is not my department, but the product is included in the E5 license that we already pay for every user, so no additional cost is incurred.
Which other solutions did I evaluate?
We have not evaluated other options because Microsoft Intune is included in our E5 licensing. I would prefer to use the VMware solution, but that is not possible because Intune is included with our existing license. Buying any other solution will result in additional costs.
What other advice do I have?
I recommend doing thorough homework and testing everything in a test environment. After ensuring that everything works fine, proceed with the final deployment.
It is not the best solution. It requires a bit more effort in management, but it works. It is not so flexible, but considering it is free for us, it is okay.
We are doing experiments with Copilot to see how we can use it. For some users, it is deployed, and we will be testing it actively. We are mainly using it to make emails, presentations, and documents better for the end users who will read them. We are an international company, and English is not the primary language for 99% of people. Copilot makes the documents more readable. We have not yet tested Copilot in Intune for security functions. We have SIEM and other security tools for insights. At the moment, we do not have a big need to start experimenting with Copilot in Intune. After we finish with the end-user use cases, we can switch focus on daily operations for IT teams.
Intune has not helped us consolidate vendors because we do the installation on the cloud. On endpoints, we have nothing.
I would rate Intune a seven out of ten because it is not so flexible.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer:
Last updated: Oct 30, 2024
Flag as inappropriateBuyer's Guide
Microsoft Intune
May 2025

Learn what your peers think about Microsoft Intune. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
856,873 professionals have used our research since 2012.
Works
Consolidates security features and provides comprehensive device monitoring
Pros and Cons
- "These capabilities have made a significant impact in my work, providing a comprehensive view of all devices and features in a single platform."
- "The user interface should be more user-friendly, as it can sometimes be challenging to navigate. Microsoft often relocates features, making it difficult to consistently find what I need."
What is our primary use case?
I primarily use Microsoft Intune for device monitoring, security, and cybersecurity. My role involves working with devices, monitoring, and enforcing security measures using Microsoft Defender, and synchronizing different security aspects. Microsoft Intune is utilized for tracking device locations, which is crucial for understanding where users are connecting from.
What is most valuable?
The most valuable features in Microsoft Intune for me are the security features, including Microsoft Defender. I use the device location tracking feature often to determine where users are connecting from. It is greatly beneficial to be able to look for devices, enroll them into groups, and apply management policies. The advanced endpoint analytics feature is effective in detecting potential threats and anomalies, allowing me to share graphical information for better communication and understanding. These capabilities have made a significant impact in my work, providing a comprehensive view of all devices and features in a single platform.
What needs improvement?
The user interface should be more user-friendly, as it can sometimes be challenging to navigate. Microsoft often relocates features, making it difficult to consistently find what I need. Stability could also be improved, as features tend to move, requiring additional effort to locate them again.
For how long have I used the solution?
I've been using Microsoft Intune for six years.
What was my experience with deployment of the solution?
I did not encounter any significant deployment issues. The process is straightforward and takes only a few hours.
What do I think about the stability of the solution?
Microsoft Intune is relatively stable, but I rate it a seven out of ten because features sometimes move, creating additional challenges.
What do I think about the scalability of the solution?
Microsoft Intune is quite scalable, and I rate the scalability aspect eight to nine out of ten, with no major problems encountered.
How are customer service and support?
Customer service and technical support are generally good, with an eight out of ten rating. Occasionally, it takes a while to receive responses from Microsoft, which could be improved.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I used VMware's cloud solution before Microsoft Intune, but it lacked many features. It was not user-friendly and prone to mistakes, leading me to switch.
How was the initial setup?
The initial setup was easy, earning a nine out of ten for ease.
What about the implementation team?
We occasionally partnered with integrators from countries like Latvia for implementation.
What was our ROI?
Using Microsoft Intune helps save on management and security costs.
What's my experience with pricing, setup cost, and licensing?
Microsoft Intune is not particularly expensive, especially considering the security features. It costs approximately forty euros per user per month.
Which other solutions did I evaluate?
I previously evaluated VMware.
What other advice do I have?
I recommend Microsoft Intune because it consolidates many features into one place, making it an efficient solution. I rate the overall solution ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Apr 10, 2025
Flag as inappropriateEnables seamless integration across multiple platforms for comprehensive device management
Pros and Cons
- "Overall, the stability is good."
- "When comparing Microsoft Intune to Jamf, Microsoft Intune is superior."
- "We face multiple scenarios where IT decision-makers request specific policy implementations, however, due to product limitations, we cannot fulfill these requests."
- "Currently, BitLocker does not support BYOD enrollment, which is a product limitation."
What is our primary use case?
With Microsoft Intune, I can leverage all platforms including Mac, Linux, Android, and Windows, especially Windows and Android. Our organization uses the Windows environment and Android applications on Android operating systems, so Microsoft Intune is ideal for us.
What is most valuable?
I have experience with Jamf Pro and Microsoft Intune. Both Jamf and Microsoft Intune are separate products. When comparing Microsoft Intune to Jamf, Microsoft Intune is superior. Jamf is only for the Mac environment, however, with Microsoft Intune, I can leverage all platforms including Mac, Linux, Android, and Windows.
What needs improvement?
Sometimes as per our expectations as an IT person and decision-maker, I want to implement certain policies and spread them to all devices enrolled in Microsoft Intune. However, implementing some policies is not possible. For example, with BYOD enrollment, I install the Microsoft Intune application and enroll the machine. Once completed, I attempt to implement the BitLocker policy. Currently, BitLocker does not support BYOD enrollment, which is a product limitation.
We face multiple scenarios where IT decision-makers request specific policy implementations, however, due to product limitations, we cannot fulfill these requests. The limitation primarily affects BYOD enrollment and personally owned devices. While it works well with corporate devices, we cannot enforce multiple policies on BYOD and personal devices.
As per the customer perspective, some changes are needed as product limitations can be restrictive.
For example, with Teams, I am currently using the application in my company for communication. One of my clients in Europe uses Google Workspace, not Teams. When sending meeting links between platforms, synchronization issues occur. If they use Google Workspace and G-meet, they cannot open Teams meeting links directly. They need to open it in a separate browser or install additional software. Better integration between these platforms would be beneficial.
For how long have I used the solution?
I have been using Microsoft Intune for the last two years.
What do I think about the stability of the solution?
Overall, the stability is good, although I occasionally face challenges. During those times, I raise a concern ticket with a Microsoft representative, and someone from the team helps resolve the issue.
How are customer service and support?
Support overall is good.
Sometimes we want extra features and capabilities. When I raise a ticket regarding these requests, someone from the team informs me that it is a product limitation and we must wait for potential backend changes to enable such functionality.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I am already working with both Jamf Pro and Microsoft Intune. In Microsoft Intune, both Jamf and Intune are separate products. When comparing Microsoft Intune to Jamf, Microsoft Intune is superior. Jamf is only for the Mac environment.
How was the initial setup?
The setup is straightforward. From the portal itself, if I purchase the licenses from the partner, I will inform my partner who will raise it for me. If I purchase from Microsoft directly via credit or debit card, I can raise the ticket from the Microsoft Intune portal.
What's my experience with pricing, setup cost, and licensing?
The pricing is more costly compared to existing players in the market.
What other advice do I have?
I would rate Microsoft Intune an eight out of ten.
I have concerns regarding Microsoft Intune. It needs to reshape features. In Office 365, I also have concerns that need to be addressed.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 31, 2025
Flag as inappropriateManager at a energy/utilities company with 1,001-5,000 employees
Makes remote updates easy and runs smoothly in the background
Pros and Cons
- "The most valuable features of Microsoft Intune include remote updates. The update runs in the background, so there's no need in most cases to go on-site to do it."
- "The user experience of Microsoft Intune is quite good because there's not much disturbance in the background; it's just running in the background."
- "For additional functionality, I suggest that Microsoft could expand on asset management. Since the platform is there, they could develop it into a full-fledged asset management system."
- "One thing that could be better in Microsoft Intune is the file size, as it is quite large at times."
What is our primary use case?
Our main use case for Microsoft Intune is patching. We use Microsoft Intune for patching, specifically Windows patching.
How has it helped my organization?
The user experience of Microsoft Intune is quite good because there's not much disturbance in the background; it's just running in the background.
What is most valuable?
The most valuable features of Microsoft Intune include remote updates. The update runs in the background, so there's no need in most cases to go on-site to do it.
What needs improvement?
Based on my experience and my team's feedback, one thing that could be better in Microsoft Intune is the file size, as it is quite large at times. Sometimes the file size is too large. The space taken on some hard disks may be too large for the patches that run on them, as we're limiting all these local storage to encourage our users to store on OneDrive rather than on local drives.
For additional functionality, I suggest that Microsoft could expand on asset management. Since the platform is there, they could develop it into a full-fledged asset management system.
For how long have I used the solution?
I've been working with Microsoft Intune for around a year.
What do I think about the stability of the solution?
It's stable. I would rate the stability of Microsoft Intune a nine out of ten.
How are customer service and support?
Technical support from Microsoft is quite good, especially because we subscribe to the premium services.
How was the initial setup?
We are currently working with a hybrid deployment model. It's a hybrid because our Active Directory is still on-premises, but other services are online.
As for advanced Endpoint Analytics in the Microsoft Intune Suite, we are still working on it. We only completed the implementation for the basic functions at the end of last year. We are moving in stages.
What's my experience with pricing, setup cost, and licensing?
I'm not sure about the pricing of Microsoft Intune because I didn't buy it. My team members bundled it together with their Microsoft solutions, including Microsoft 365 and related products.
Which other solutions did I evaluate?
I haven't used different solutions similar to Microsoft Intune or made any comparisons with other products at the moment. In the past, the nearest solution would be BigFix, but you cannot compare it to Microsoft Intune because BigFix was an older system, and you needed more technical knowledge to run it. You needed to know how to do scripting and related tasks.
What other advice do I have?
If they could also make Microsoft Intune a full-fledged asset management system, it would be the best.
I would rate Microsoft Intune an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Apr 14, 2025
Flag as inappropriateCloud Engineer at a tech services company with 51-200 employees
It's cost-efficient and has the best capability for managing Windows-based devices and application
Pros and Cons
- "The best part of Intune is device control. If we need to block a user from opening something in their organization's system, we can do it from Intune. If we want to restrict the movement of an organization's data to prevent users from copying the data into Outlook, WhatsApp, or their personal Gmail, we can limit that via Intune. It secures all corporate data."
- "We are currently unable to control aspects of group policy from Teams like we can for GPO. They are still not part of Intune. Microsoft is adding this, but it's currently in preview, and few GPO features have been added to the product."
What is our primary use case?
We are a Microsoft vendor, not an Intune user. I have deployed Intune for several customers who use this product for business. Our clients use Intune for device management and data security, which gives them control over end-user devices.
Previously, we used a device manager and had a local Active Directory. However, most of our SME customers do not have a local Active Directory set up in their organization that allows them to control their devices. Intune does not require any local AD. It's a cloud application. We can directly join the user devices to the cloud, and the organization manages them. We have enterprise customers and also SMBs, but most of our clients have less than 100 users.
How has it helped my organization?
One of my Indian clients previously had all their devices at the workplace. None of the devices were joined to an Active Directory, so they had to install applications on each device individually. With the help of Intune, we could push the applications to all the portal users simultaneously.
We have to create a group, assign an application to it, and automatically install it on the user's devices. We also apply the company logo and desktop wallpaper via Intune, which a tech user can change. We can also find the exact location of the devices where the user is sitting.
We also have the option to enroll hybrid devices with Intune. We can enroll users' devices and separate work and personal data. The devices on the local Active Directory can be joined to Intune.
Privilege identity management helps. Let's say someone is a company administrator for five to ten days. We can create a dual administrator role for that user for seven days. I can create a PIM role and assign it to the user for seven days, after which the role will be deleted automatically.
Intune provides routine management of user devices. Once the device is not enrolled in any domain or Active Directory, the IT person must delete every user device to change anything. Intune can work on all those things. That device can be updated and marked as non-compliant. If someone is using Windows 7 or a version of Windows that has been deprecated, we can restrict Windows 7's user ability to log in to the work environment. We can control all this over the admin panel.
If we scale 10 to 50 percent, where new customers manage all their devices. After enrolling all the devices, this work can be done with only one or two people, saving the organization money.
What is most valuable?
The best part of Intune is device control. If we need to block a user from opening something in their organization's system, we can do it from Intune. If we want to restrict the movement of an organization's data to prevent users from copying the data into Outlook, WhatsApp, or their personal Gmail, we can limit that via Intune. It secures all corporate data.
If they share the data with someone outside the organization, that external person cannot see it until an analyst provides them with access or creates a policy.
The user experience is good. Users are happy that Intune is managing their work devices. In addition to Windows devices, we can control iOS and other mobile devices. There are good features for managing mobile devices. Work data is stored in different containers, making it easier for users to find their work data.
In the case of application deployment, we have more services like application updates and patches that can be implemented from the Intune portal. We do not need to outsource these tasks to the device user.
What needs improvement?
We are currently unable to control aspects of group policy from Teams like we can for GPO. They are still not part of Intune. Microsoft is adding this, but it's currently in preview, and few GPO features have been added to the product.
For how long have I used the solution?
I have worked on Intune for the last two years.
What do I think about the stability of the solution?
Intune is a stable solution with a lot of capabilities. Most customers who are moving to Intune are also exploring the capabilities of the cloud.
What do I think about the scalability of the solution?
I rate Intune seven out of 10 for scalability.
How are customer service and support?
I rate Microsoft support eight out of 10. Microsoft is good, but Intune support is delayed compared to other products. If I make a support ticket on the Intune portal, I get a reply after one or two days. For Exchange or SharePoint, I get a response after an hour, but Intune takes a minimum of a day.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
One product we can compare Intune with is Jamf Pro. Intune has limitations when managing Mac devices. You can enforce fewer policies because Apple has its own hardware and software. There are lots of limitations of control. Most of my clients use Intune for Windows and Android devices, but Jamf Pro if they have Mac devices.
How was the initial setup?
Deploying Intune is a little complex but not too complicated. At the time of deployment, there is much work to do to join a device to Intune. We have to create a new Windows profile and make users log into the enabled Windows profile. We need to configure all the Office applications and copy users from one to another. It takes 30 to 40 minutes on a single device.
Intune requires some maintenance, but the customer performs the maintenance once we implement it. We support the customers with issues while they are enrolling the device.
What's my experience with pricing, setup cost, and licensing?
I rate Intune five out of 10 for pricing. It's expensive.
What other advice do I have?
I rate Intune 10 out of 10. I recommend Intune to every organization that wants to secure user data and control endpoint devices. It can manage other platforms on the market. Google has device management software, but it doesn't have the same scope as Intune.
It's cost-efficient and cheaper than the other device management and third-party applications available. Intune can control most things, especially Windows devices. Intune has the best compatibility with Microsoft Windows.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer: MSP
CISO at a computer software company with 201-500 employees
Streamlines operations and reduces administrative overhead and attack surface
Pros and Cons
- "Microsoft Intune is easy to use, and it is able to enforce policies towards multiple devices. It is able to bring multiple classes of devices into the same security posture. I found that very useful."
- "The interoperability or communication with a different platform can be better. It is a two-way street. It is not only about Microsoft. The other platforms also have to be willing to share some information, but that absolutely can be improved."
What is our primary use case?
We use it for pretty much everything related to endpoint management. We use it for bring-your-own-devices and corporate-related devices such as laptops and tablets. We have various operating systems such as Windows, iOS, and Android.
How has it helped my organization?
Microsoft Intune is helping to streamline operations and minimize administrative overhead.
We are using the Enterprise Application Management features of Intune Suite. It is very well designed and very well suited for Microsoft-related applications. Third-party applications can require some workaround. They do not always organically fit into the solution, but, overall, it is a great option to have visibility into what the users are using and be able to set up some policies based on that. We can allow applications or deny applications. We can manage what users can onboard. Overall, it is a great solution. We can definitely simplify and streamline some security operations.
Microsoft Intune is great for securing hybrid work and protecting data on company and BYO devices. What is more important is that it is not a static product. It is not that the product is very well established and not moving anywhere. It is constantly evolving. Microsoft seems to be spending lots of resources trying to improve and bring new features. That is great.
We are starting with Intune's Endpoint Privilege Management feature. It definitely impacts productivity. It is great and definitely helps a lot. It helps minimize the attack surface because you do not have elevated privileges accounts available all the time. It helps mitigate or shrink the potential impact or potential entry points into the network.
Microsoft Intune has helped us to manage the accounts with elevated privileges. We are a managed service provider. We sometimes have big turnarounds on the help desk. By their job definition, many of them are supposed to have access to different clients and different sensitive areas. It helps us to mitigate and manage these accounts, and, as a result, to be more secure. We can make sure that those accounts are not being distributed very freely. We have control over their actions. We have control over what they are doing. We have full visibility and accountability.
What is most valuable?
Microsoft Intune is easy to use, and it is able to enforce policies towards multiple devices. It is able to bring multiple classes of devices into the same security posture. I found that very useful.
What needs improvement?
The interoperability or communication with a different platform can be better. It is a two-way street. It is not only about Microsoft. The other platforms also have to be willing to share some information, but that absolutely can be improved.
For how long have I used the solution?
I have been using Microsoft Intune for five to six years.
How are customer service and support?
It depends on the level of access you have. We are a managed service provider, so we do have access to Microsoft. Generally, it is okay if you are able to find the right parties to talk to. It can definitely be improved.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We did not use any other solution previously.
What was our ROI?
First of all, we do not have to deploy any third-party privileged account management solution. That is one tangible benefit. An indirect benefit is that by protecting your environment and making it more secure, you are potentially avoiding any downtime. It is hard to quantify what that downtime cost could be.
If an account with elevated privileges is compromised, you need to perform a lot of work. You need to change the password, disable the account, and recreate another account, so 10% to 15% of the downtime definitely could have been avoided.
What's my experience with pricing, setup cost, and licensing?
We use Defender ATP and E5 licenses.
Which other solutions did I evaluate?
Intune was an organic choice because we are a Microsoft shop. We use everything that Microsoft can offer.
What other advice do I have?
Microsoft Intune is a great solution. If you have a Microsoft environment, it is definitely the way to go. It can help you to streamline operations and simplify a lot of things. If you go into a multi-cloud environment where you have AWS, GCP, or any other cloud workloads, it may be a little bit more complicated. If you are a Microsoft shop, it is the way to go.
In terms of user experience, for the end users, it is pretty much seamless. It is more on the administrative side. If you properly configure it, it is a relatively seamless experience.
We have just started working with Microsoft Copilot in Intune. It is a very fresh solution. It has just been released, so we are setting up use cases and working with Copilot. We have a Copilot for Teams. We have a Copilot for Microsoft Office that we are utilizing. We have started playing with Copilot for some security operations. It is yet to be determined how much value it can bring. Generally, it can help you analyze and optimize some workloads and events more efficiently, effectively, and quickly. There is great potential, but we will see how it is in real life.
I would rate Microsoft Intune an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Infrastructure Engineer at SpiritUK
Integrates well with Microsoft products and helps with security and compliance
Pros and Cons
- "For our clients, the conditional access feature along with different compliance policies that they can set is valuable."
- "The mobile management is good for iPhone and iPad, but the Apple Mac management needs improvement. That is probably because Microsoft does not have low-level access to Apple Mac hardware. If you are doing basic things, it is okay, but if you want to image Apple Macs and do things like that, then Jamf is much better."
What is our primary use case?
It is being used for device management. We have a couple of clients using it at the moment. They have Windows, Android, and iPhone devices that are managed by it. We have another client with only three devices, but they are Windows SE devices with the cut-down version of Windows.
They are using the latest version because it is always kept up to date online.
How has it helped my organization?
Microsoft Intune pretty much brings all of our endpoint and security management tools into one place. I cannot think of the ones where it does not do what we need. Apple Mac management could be better. It makes IT and security operations much easier and much more convenient.
We use the Enterprise Application Management features of Intune Suite. That is what the data manager is set to. These features are good. So far, we have had no problems with that.
Implementing applications is easier than MaaS360. There are definitely time savings. It is a lot smoother and a lot more well-integrated with Azure AD, etc.
The integration with Microsoft 365 and Microsoft Security for both cloud and co-managed devices is very important. That is the key thing for us. Almost all of the clients have Microsoft Office 365. We have only two clients who use Google G Suite, so this whole integration is very important.
It has helped us consolidate vendors.
Its benefits can be realized within a couple of weeks. It is very good because it works. Conditional access and compliance work from anywhere, so it is very good.
What is most valuable?
For our clients, the conditional access feature along with different compliance policies that they can set is valuable.
All the remote tools you can use on the mobile are also valuable. Features such as passcode reset for the device lock are helpful, so you can set a code and get people back into the device.
What needs improvement?
The Apple Mac management is a bit basic. The mobile management is good for iPhone and iPad, but the Apple Mac management needs improvement. That is probably because Microsoft does not have low-level access to Apple Mac hardware. If you are doing basic things, it is okay, but if you want to image Apple Macs and do things like that, then Jamf is much better.
Their support needs to be improved.
For how long have I used the solution?
I have been using this solution for about eight years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is definitely scalable.
How are customer service and support?
Their support is absolutely useless. They used to be good, but now, there are separate departments. We had an issue with conditional access where the client did not like the fact that single sign-on was working and automatically logging them into everything. They found it to be a security issue. It was not a good thing. We were trying to disable that, but then conditional access would not work. Their support could not figure it out. They would say that it is Entra and then they would say that it is Intune. I found out what it was. It was a token that was coming from a single sign-on.
How would you rate customer service and support?
Negative
Which solution did I use previously and why did I switch?
We use Jamf. We are still using IBM MaaS360 for some of the clients, but it is getting phased out for Intune.
MaaS360 does not integrate with all Microsoft products as well as Intune for obvious reasons. A lot of our clients want Intune for data protection, conditional access, etc. It is more about protecting their data and making sure that the devices are compliant and meeting certain policies.
The user experience of Intune is good. It is a lot less clunkier than MaaS360. We do most of the setup, so the users are not really affected by it.
Jamf is mainly for Apple Mac management. Intune is mainly for Windows management and mobile management. Intune does not have the same level of integration with Apple Mac, so you cannot image them properly. It supports very basic imaging. Jamf is a much better tool for managing Apple Mac.
How was the initial setup?
You have to use Azure because it is a part of the Microsoft environment.
I am the lead engineer involved in setting it up and configuring all the policies. It is straightforward.
From a maintenance point of view, there is no maintenance you have to do because Microsoft does it all in the cloud. You might need to tweak a few things on an app after you send it out, but those are general tweaks to make things run better. You do not have to put updates on or do things like that.
What about the implementation team?
We do not use any external help. We just use Microsoft documentation.
What's my experience with pricing, setup cost, and licensing?
We work in the charity sector, so a lot of our clients get Microsoft Premium licenses or Business Premium for free. They get ten licenses free, and a lot of our clients do not have more than ten staff members. They are getting the tool for free, so its cost is not an issue.
Which other solutions did I evaluate?
We did not evaluate other solutions.
What other advice do I have?
It is good. If your clients want to protect their data and they are using Microsoft tools, then Microsoft Intune is definitely the one that they should be using.
We are not using it to its fullest. There is a lot more we could do. I work for an MSP, so we are bound by what the client wants to do. If the client does not want to advance anything, we will not advance it.
In terms of IT productivity, it does not benefit us directly because we are an MSP, but it is a lot easier to use than MaaS360 and other ones we have tried. Similarly, it does not save us costs because we are an MSP. We charge people to implement a solution, and that is it. If we are paid to manage it, we obviously try to manage it, but it does not save us any money.
It does not affect our security because we do not use it ourselves. We just install it for other people.
Overall, I would rate Microsoft Intune an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer:
Last updated: Sep 29, 2024
Flag as inappropriate
Buyer's Guide
Download our free Microsoft Intune Report and get advice and tips from experienced pros
sharing their opinions.
Updated: May 2025
Product Categories
Unified Endpoint Management (UEM) Configuration Management Remote Access Enterprise Mobility Management (EMM) Microsoft Security SuitePopular Comparisons
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Microsoft Sentinel
Microsoft Entra ID
Microsoft Defender for Cloud
Microsoft Defender XDR
Microsoft Purview Data Governance
Azure Key Vault
Microsoft Configuration Manager
Workspace ONE UEM
Red Hat Ansible Automation Platform
Azure Firewall
Microsoft Remote Desktop Services
Microsoft Defender for Cloud Apps
Jamf Pro
Buyer's Guide
Download our free Microsoft Intune Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Microsoft Intune and VMware AirWatch; Which do you recommend?
- What is lacking in comparison with AirWatch?
- What are the benefits of Microsoft Intune for IT Admin?
- What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
- What are the main differences between Jamf Pro and Microsoft Intune for Mac management?
- Which solution is better for an educational organization: Google Workspace or Microsoft Intune?
- What are the differences between MobileIron UEM and Microsoft Intune?
- What are the pros and cons of Microsoft Intune?
- How does Microsoft Intune compare with ManageEngine Desktop Central?
- Is it worth migrating from WS1 to Intune if we have Microsoft 365 E3 available?