Microsoft Intune (which is part of Microsoft Endpoint Manager) is a Software-as-a-Service (SaaS) solution for the management and security of Windows mobiles and computers.

Indeed, the solution allows you to connect to many Microsoft and third-party services (Azure Active Directory, Microsoft Defender for Endpoint, Office 365, Google Play Store, Apple Business Manager etc.) in order to manage, control and secure all mobile fleets.

MDM or MAM?

Intune allows both to manage mobiles (so Mobile Device Management or MDM) but also to deploy, control and secure applications (Word, Excel, Adobe Reader etc.) as well as the data that resides in these same business applications (Mobile Application Management or MAM).

Which type of devices can be managed by Intune?

Intune allows you to manage android mobiles (with the Android Enterprise management service) or Apple. To facilitate the integration experience of corporate mobiles, it is also possible to integrate the Microsoft mobile management service with Apple Business Manager but also, for Android, with Google Zero Touch or Samsung Knox Mobile Enrollment.

It is also possible to manage Windows computers (whether physical or windows 365 hosted computers).

Finally, the Windows Autopilot service also makes it easier for users to register and experience when registering their computers with the company (via Intune).

Intune licenses

Intune can be obtained as a single license or otherwise with a flat-rate license (including other Microsoft services) but also, there is a license assigned to devices only (so not attached to a specific user).

​Note:

Licenses assigned to a device have some limitations, the following features are not applicable:Conditional accessApplication protection rulesUser-based configurations

The next Microsoft license bundles are including the Intune service.

In the next part, we'll look at the different things you need to configure in the Intune service to start registering devices in an enterprise environment.