Capabilities and deliverables
- Device enrollment with Microsoft Intune, and Windows Autopilot where supported
- Standard configuration and security policies for Windows, macOS, iOS, and Android
- Disk encryption, screen lock, and sign-in requirements
- Application deployment and updates
- Compliance reporting that shows which devices meet your policies
- Remote lock and wipe for lost or stolen devices
- Policies that protect company data on personal phones without managing the whole phone
- A device inventory you can rely on
What Microsoft Intune management includes
Device enrollment
Windows Autopilot and automatic enrollment through Microsoft Entra join for Windows, Apple Business Manager for company Macs and iPhones, and Android Enterprise for Android devices.
Configuration profiles
Wi-Fi, VPN, encryption, Windows Update rings, and security settings are delivered as policies rather than configured by hand.
Compliance policies
Rules such as required encryption, minimum operating system version, and a screen lock. Compliance status can be used by Conditional Access to control access to company data.
Application deployment
Microsoft 365 apps, line-of-business software, and required tools install automatically and stay updated.
Windows Autopilot
New Windows computers configure themselves when an employee signs in, without anyone preparing the device by hand.
Endpoint security
Antivirus, firewall, and attack surface reduction settings are managed centrally through Intune's endpoint security policies.
Lifecycle management
Inventory, reassignment, remote lock, and wipe or retirement when a device is lost, replaced, or returned.