Intune

Intune
Geestferal · CC0 · source
Name	Intune
Developer	Microsoft
Released	2011
Latest release version	Microsoft 365 Intune (cloud service)
Operating system	Windows, macOS, iOS, Android, Linux (via agents)
Genre	Mobile device management, Mobile application management, Unified endpoint management
License	Proprietary

Intune Intune is a cloud-based endpoint management service from Microsoft, designed to manage devices, applications, and access for organizations. It operates within the Microsoft 365 ecosystem and integrates with services such as Azure Active Directory, Microsoft Endpoint Configuration Manager, and Microsoft Defender. Intune supports multiple platforms and enables administrators to enforce policies, deploy applications, and protect corporate data across enterprise environments.

Overview

Intune originated from offerings in enterprise mobility and management alongside products from Microsoft, evolving through integrations with Microsoft 365, Azure Active Directory, System Center Configuration Manager, Office 365, Enterprise Mobility + Security, and partnerships with vendors like VMware and Citrix Systems. The service aligns with regulatory frameworks referenced by agencies such as National Institute of Standards and Technology and standards bodies like ISO/IEC guidance, and competes with vendors including MobileIron, BlackBerry Limited, Google Workspace, Amazon Web Services, and IBM. Administrators commonly combine Intune with identity and access controls in Azure, endpoint protection from Microsoft Defender, and device provisioning tools influenced by programs from Apple Inc., Google, and Samsung Electronics.

Features and Components

Intune provides device management, application management, configuration policies, conditional access, and reporting. Key components include the Intune admin console, integration points with Azure Active Directory for identity, connectors for Exchange Server and Microsoft Exchange Online, and policy engines that interoperate with Windows Autopilot, Apple Business Manager, Google Zero-touch Enrollment, and Samsung Knox. Application management covers deployment of Microsoft Office apps, line-of-business apps, and third-party software from stores such as Microsoft Store, Apple App Store, and Google Play. Reporting features surface logs and telemetry that can feed into analytic platforms like Power BI and security incident systems such as Microsoft Sentinel and Splunk.

Management and Deployment

Administrators use the Intune portal and APIs to enroll devices, assign profiles, and deploy apps. Enrollment paths include manual enrollment, automated provisioning via Windows Autopilot, DEP via Apple Device Enrollment Program successors like Apple Business Manager, and enterprise enrollment supported by Android Enterprise and Samsung Knox. Configuration profiles apply settings for Wi‑Fi, VPN, certificates, and compliance; these often reference certificate authorities such as Entrust, DigiCert, and Let's Encrypt for authentication. Integration with Microsoft Endpoint Configuration Manager enables co-management scenarios and migration from on-premises management frameworks like System Center Configuration Manager.

Security and Compliance

Intune enforces conditional access and data protection by integrating with Azure Active Directory Conditional Access, Microsoft Defender for Endpoint, and identity providers such as Okta and Ping Identity. It supports policies for device encryption (BitLocker), threat detection, app protection policies (MAM), and compliance reporting aligned to standards cited by NIST, GDPR frameworks referenced by the European Commission, and controls frameworks like CIS Benchmarks and ISO/IEC 27001. Administrators can implement multifactor authentication workflows that leverage FIDO2 and Azure Multi-Factor Authentication, and route telemetry to security orchestration platforms including Microsoft Sentinel and IBM QRadar.

Licensing and Pricing

Licensing for Intune is available as a standalone SKU and as part of bundled suites such as Microsoft 365 E3, Microsoft 365 E5, and Enterprise Mobility + Security (EMS) E3/E5. Pricing tiers determine feature access, such as advanced threat protection available in higher tiers alongside Microsoft Defender capabilities. Organizations typically evaluate total cost against comparable services from VMware Workspace ONE, Citrix Endpoint Management, and cloud providers like Google Cloud and Amazon Web Services when performing procurement and vendor comparisons.

Integration and Ecosystem

Intune integrates across the Microsoft ecosystem—Azure, Microsoft 365, Exchange Online, SharePoint, and Teams—and with third-party providers including VMware, Citrix Systems, Okta, and MobileIron. Device manufacturer programs from Apple Inc., Samsung Electronics, and Google provide enrollment and management hooks. Reporting and automation use tools such as PowerShell, Microsoft Graph API, and Azure Logic Apps; monitoring and SIEM integration leverage Microsoft Sentinel, Splunk, and Elastic Stack. The broader ecosystem includes partners like Accenture, Deloitte, PwC, Capgemini, and KPMG for deployment, governance, and managed service offerings.

Category:Microsoft software