I am the Technology Support Manager for a large educational organization.
We already own Intune as we are a Microsoft house but we are looking to purchase Chromebooks in large quantities, so we want to utilize Intune to manage the devices. We were wondering what would be the pros and cons for either solution. At the moment I am swayed to use Intune as it would be a cost-savi...
What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
I have demoed these solutions together. There are as well other alternatives that integrate with SaaS services.
Thank you for your help.
Sr. Solutions Sales Executive - Commercial/Charity/Healthcare/SMB Individual Contributor at Hypertec Direct
Feb 15, 2023
I believe it is a good first step, and I would say even a requirement, but in no way is it a comprehensive security solution, even for endpoints.
There are many things that need to be addressed for security. In addition to this, there is XDR, MDR, more comprehensive AV for endpoints & Servers that stop attacks, Threat Hunting, Mitigation, PEN Testing, Security Training for end users, Multi-Factor Authentication (Microsoft's MFA is good but only for Microsoft products), Patch Management for Endpoints, Servers and Cloud Workloads, Network Access Control, Firewalls for On-Premise and Cloud server workloads, Network Segmentation, Password Management, Data Backups (3-2-1-1 Rule) with Immutable Backups, Power Backups, Physical Security, Monitoring, NOC/SOC services, and working towards a Zero Trust architecture...
But there are no single-point solutions that will make you secure, so don't get complacent. And you can outspend your profits if you do everything. Just remember it's best to have a layered approach that works together and looks at everything from a security perspective and how it integrates with your overall security plans and objectives to help identify holes and possible mitigations.
Healthcare must do Risk Assessments by law, but I recommend that all companies of all sizes do at least annual risk assessments since there is so such thing as being too small or inconspicuous to be hit with malware or have a cyber security attack since much of the delivery is automated and not just by the script-kiddies of years gone by... Nation States are actively engaging in cyber warfare daily, along with terrorists, and opportunists looking to make big money from you...
Senior Associate Specialist at a financial services firm with 1,001-5,000 employees
Feb 16, 2023
It depends on your company's infrastructure. Check with your cyber team whether you can sync your endpoints to Cloud using Azure AD as Azure Registered/ Azure Hybrid AD join/ Azure AD join, etc.
1. So, if the ask is only to enroll them in Intune to leverage defender/BitLocker services - go directly to Azure AD's join approach.
2. If you still want to manage patch management/mcm BitLocker but Defender via cloud, the approach should be Azure Hybrid AD join.
3. You can still use autopilot using both of these approaches.
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes it easy to control security and manage the usage of mobile apps when you have a distributed workforce. It gives me peace of mind that I can manage how my staff accesses and shares our company data.
I especially like the autopilot feature, which is a great time-saver. The centralized dashboard and customization provide a great user experience. It is a good alternative for UEM (Unified EndPoint Management) solutions if you don’t need an entirely new workspace, with the advantage of having strong security features, like analyzing risks.
The setup, however, is disappointingly difficult, considering it should integrate seamlessly with other Microsoft 365 products. I would like to see more interactive reporting and more proactive (rather than reactive) security controls.
VMware Workspace One is a digital workspace platform that integrates access control and application management across environments, devices, and platforms. Although it includes remote mobile management, I find VMware Workspace is a more complete solution.
The solution lets you control the remote devices by implementing security policies. I like that it is versatile and integrates with multiple operating systems.
It is really easy to use and because it is centrally managed, you just deliver all the applications you need for the devices from the central console. This is very helpful when you need to onboard or make changes to multiple phones or tablets.
The installation is quite difficult and can be confusing to a non-skilled user. It would be helpful if you could select and customize the console so you could check the security by type of product.
Microsoft Intune is more focused on security and access control, so it would be a better solution for companies under strict regulations. However, it has problems integrating with other operating systems like Mac. I find VMware easier to use and it integrates very well across systems.