Microsoft enables digital transformation for the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more. Microsoft is dedicated to advancing human and organizational achievement. Microsoft Security helps protect people and data against cyberthreats to give peace of mind.
Do You Manage Peer Insights at Microsoft?
Access Vendor Portal to update and manage your profile.
The feature we value most is Intune's deep integration with other M365 products: Azure AD Conditional Access (Entra ID), Microsoft Defender for Endpoint (EDR), Microsoft Purview, Microsoft Security, etc... This powerful combinaison allows us to enforce Zero Trust principles by ensuring that only Compliant, healthy devices can access sensitive company data.
For modern fleets that include distributed and remote users, MDM platforms such as Intune are all but necessary. It used to be that when you needed to control remote and traveling users, an always-on VPN back to the office was a must, and God help you if that stopped connecting, an OS update failed, or your remote desktop tool of choice wouldn't connect in. With Intune, especially for Windows devices, it really is so much easier to just take care of these problems remotely, at least so long as you're doing it the Microsoft approved way. Intune Autopilot enrolled devices are a breeze, you can ship a brand new, never touched device to a user - and as soon as they connect it to the internet, it'll force enrollment, apply your configuration, and start installing required software. When it works it feels like magic. Maintaining remote devices is also made easier, being able to push a new VPN client and ensuring software stays up to date with a dashboard to tell you what devices are or are not having issues just makes life easier. And having a single interface to manage not just company PCs, but company phones, BYOD, and work profiles for employee-owned devices has been fantastic. You can create a policy and with just a few clicks it can be applied to entirely different device types and groups.
I like the product the most because of Microsoft Intune's ability to centrally manage the devices and securing them. Intune has the ability to secure all devices through a cloud-based platform, and since Defender is integrated with Intune we have visibility in real time of security compliance. Intune also provides a device management solution for multiple operating systems like iOS, Linux and Windows. Intune is scalable for hybrid and remote work environments.
What we dislike most is the product's significant complexity and steep learning curve. Also, performance could probability get better, to deliver policies faster, and check compliance more often.
Transitioning from an AD managed environment, there are a number of incongruencies to work through to have the same policies and capabilities, a number of which now require paid licensing for features taken for granted in a purely AD environment. Many features, such as the ability to push scripts, have multiple ways to go about implementing them, usually with one or two included in the base package. If you're clever about it, there are usually ways to work around these limitations, but in a cost-challenged environment, Intune may not be the best option. The actual web interface is often slow, the placement of settings and views changes or has multiple ways to get to them, and it often just feels clunky to use. Pushing settings or apps to devices can also be inconsistent, with it sometimes taking hours or failing with little details to go off of for troubleshooting.
Intune has to improvise its complexity in troubleshooting methods, also there will be policy conflicts for resolution. When there is a failure in policy application it is hard to understand the reason. Few configurations will have to be navigated from multiple portals impacting the efficiency of the operations.