What is Microsoft Intune?
Microsoft Intune is Microsoft's cloud service for managing company laptops, desktops and phones. It sets devices up, keeps them encrypted and tells Microsoft 365 whether each one meets the company's rules.
Talk to an engineer Knowledge base
What it is
Intune is a mobile device management (MDM) service run by Microsoft. Windows, macOS, iOS, iPadOS and Android devices enroll in it and then take their settings from it over the internet. Windows PCs need the Pro edition or higher, which our Windows licensing guide explains.
What it does
- Configuration policies: Wi-Fi, VPN, update schedules, screen lock and other settings, applied to groups of devices.
- Compliance policies: rules a device must meet, such as encryption on, a passcode set and a supported operating system version.
- Apps: Microsoft 365 apps and other software are installed remotely.
- Encryption: BitLocker on Windows and FileVault on Macs are switched on, and the recovery keys are stored with the device record.
- Windows Autopilot: a new PC registered with Autopilot can go straight to the employee. They sign in with their work account and it sets itself up.
- Remote wipe: a lost or stolen device can be erased, or retired so only company data is removed.
Compliance and conditional access
Intune reports each device's compliance to Microsoft Entra ID, the identity provider behind Microsoft 365. A conditional access rule can then allow email and files only from compliant devices, on top of multi-factor sign-in.
Company devices and personal phones
MDM enrollment manages the whole device, which suits equipment the company owns. On a personal phone, app protection policies (MAM) manage only the work apps such as Outlook and Teams, so company data can be wiped from them without touching the owner's photos or settings.
Licensing and Apple devices
Intune Plan 1 is included in Microsoft 365 Business Premium, as our Microsoft 365 licensing guide shows. Company iPhones, iPads and Macs enroll automatically when Intune is connected to Apple Business Manager. Intune manages policy and compliance. Monitoring and scripting usually run through an RMM tool alongside it.
How KawaConnect works with Intune
We supply business PCs with Windows Pro and enroll them in Intune, with encryption, compliance and conditional access set up in the client's tenant. That work is part of our Microsoft 365 and endpoint security services. Apple devices can be brought into the same tenant.
Related services
Microsoft 365
Entra ID, Intune and conditional access in your tenant.
Endpoint security
Managed EDR, disk encryption and patching.
Microsoft reseller
Business Premium licenses on one invoice with your support.
Learn more
- Microsoft Intune documentationMicrosoft's official documentation for enrolling devices and writing policies.
- Windows Autopilot overviewHow Autopilot registers a new PC and sets it up at first sign-in.
- Mobile device management on WikipediaA neutral overview of what MDM software does across vendors.
Laptops nobody manages
Tell us which devices your staff use for work. We will tell you which can be enrolled in Intune and what licenses it needs.
Start a conversation