Microsoft Intune

Microsoft Intune
Name	Microsoft Intune
Developer	Microsoft
Released	2011
Operating system	Cloud-based
Genre	Enterprise mobility management, Mobile device management, Unified endpoint management
License	Subscription
Website	https://www.microsoft.com/en-us/security/business/microsoft-intune

Microsoft Intune. It is a cloud-based service within the Microsoft Entra identity and access management suite, focusing on Unified endpoint management (UEM). The platform enables organizations to manage and secure employees' devices, applications, and data from a centralized console. As a core component of Microsoft 365, it integrates deeply with other Microsoft security and productivity services.

Overview

Launched in 2011, the service evolved from a basic Mobile device management (MDM) tool into a comprehensive UEM platform. It operates as a Software as a service (SaaS) offering, managed through the Microsoft Intune admin center. The platform supports management across diverse operating systems, including Microsoft Windows, Apple's iOS and macOS, Google's Android, and even Linux. Its primary purpose is to enable a modern, secure workforce by supporting Bring your own device (BYOD) and corporate-owned device scenarios under policies defined by an organization's IT department.

Features and capabilities

Core functionalities include robust Mobile application management (MAM) to control data within applications like Microsoft Office without requiring full device enrollment. It provides extensive policy configuration for device compliance, BitLocker encryption enforcement on Windows 10 devices, and conditional access integration with Microsoft Entra ID. The service also manages application deployment through public App Store links or line-of-business apps. Advanced features support Windows Autopilot for streamlined device provisioning and Endpoint analytics for monitoring device performance and user experience, feeding data into Microsoft Defender for Endpoint.

Deployment and management

Administration is performed via the web-based Microsoft Intune admin center, which is part of the broader Microsoft 365 admin center. Deployment typically involves configuring Microsoft Entra ID groups for user and device targeting, establishing compliance policies, and defining app protection policies. The service uses lightweight client apps, such as the Company Portal app on user devices, for interaction and policy enforcement. Integration with Microsoft Configuration Manager (formerly System Center Configuration Manager) enables co-management scenarios, allowing organizations to transition from traditional on-premises management to the cloud at their own pace.

Security and compliance

Security is enforced through a combination of compliance policies and conditional access rules tied to Microsoft Entra ID. Devices that do not meet defined policies—such as lacking required Antivirus software or being jailbroken—can be blocked from accessing corporate resources in SharePoint Online or Microsoft Exchange Online. The platform supports Data Loss Prevention (DLP) through app protection policies that prevent copying corporate data to personal apps. It also facilitates adherence to regulatory standards like the Health Insurance Portability and Accountability Act (HIPAA) and General Data Protection Regulation (GDPR) by providing detailed reporting and audit logs.

Integration with Microsoft ecosystem

The service is deeply integrated with the broader Microsoft 365 and Microsoft Security portfolios. It is a foundational pillar for Microsoft's Zero Trust security model, connecting signals to Microsoft Entra ID for access decisions. It shares data with Microsoft Defender for Endpoint for comprehensive threat analysis and with Microsoft Purview for information protection and governance. Management policies can be seamlessly applied to applications within the Microsoft Office suite, and it is a required component for enabling premium features in Windows 365 and Azure Virtual Desktop.

Licensing and editions

Access is included in various Microsoft subscription plans, most notably Microsoft 365 E3 and Microsoft 365 E5, as well as the standalone Enterprise Mobility + Security (EMS) E3 and E5 suites. It is also available as a separate Microsoft Intune subscription. Different licensing tiers unlock varying levels of functionality; for example, Microsoft 365 E5 includes advanced security features that integrate with Microsoft Defender XDR. Licensing is typically handled through the Microsoft Volume Licensing Service Center or Cloud Solution Provider (CSP) programs.

Category:Microsoft software Category:Cloud computing Category:Enterprise software Category:Mobile device management