We use Intune to manage more than 5,000 endpoints. It has many powerful tools that enable an organization to manage its devices and applications securely. The main capability is mobile device management (MDM), which allows you to manage hardware and mobile applications. I'm also working with application management. That lets you manage deployments, protections, renewals, identities, and device integration.
System Administrator at Tech Mahindra Limited
I like the solution's ability to install software to a device remotely and push policy through the Azure portal
Pros and Cons
- "I like Intune's ability to install software to a device remotely and push policy through the Azure portal."
- "One issue that Inutune can improve is password integration with the BitLocker key option. Another issue is assigning licenses. We can assign the licenses for some users on the BPM side, and our BPS users work on Outlook 365 but cannot access it there. A BPS person can go to the company portal and download Outlook 2016. They could improve the NDIS part to assign a license directly to the BPS person that allows them to install the Intune device manager directly on our system."
What is our primary use case?
How has it helped my organization?
Before implementing Intune, we had to manage devices, access, admin, and planning directly. Intune improves user productivity while reducing IT support costs. It enables IT to optimize the user experience by streamlining configuration changes. By avoiding password issues, we can secure hybrid work. It creates a profile for each user who is issued an Intune-managed device. The solution increases IT productivity at our organization. Intune has saved us money.
What is most valuable?
I like Intune's ability to install software to a device remotely and push policy through the Azure portal. Intune is good for Windows-based devices. It's also integrated with Windows security tools like endpoint protection, DLP, etc.
You have the option of automatically updating and syncing an Intune device. You can click the sync button, and then your device is configured for automatic installation in Intune. The analytics feature can enhance the end-user experience by checking your device for things like battery health.
Advanced features are included in the Microsoft Intune Suite for an additional license cost. One of these is centralized access management. Let's say a project requires a device not to have WiFi access. We can go into that device and disable the WiFi option.
What needs improvement?
One issue that Inutune can improve is password integration with the BitLocker key option. Another issue is assigning licenses. We can assign the licenses for some users on the BPM side, and our BPS users work on Outlook 365 but cannot access it there. A BPS person can go to the company portal and download Outlook 2016. They could improve the NDIS part to assign a license directly to the BPS person that allows them to install the Intune device manager directly on our system.
Buyer's Guide
Microsoft Intune
April 2026
Learn what your peers think about Microsoft Intune. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,244 professionals have used our research since 2012.
What do I think about the stability of the solution?
Intune has been stable recently. One issue is that you cannot push the device's front image directly on the back end. If your WiFi is injected, the image isn't visible directly. The script can do through it slowly, but this is a problem.
How was the initial setup?
It's a cloud-based solution, so you can log in to your Intune device.
What other advice do I have?
I rate Microsoft Intune 10 out of 10.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor. The reviewer's company has a business relationship with this vendor other than being a customer: MSP
Infrastructure Support Analyst at a insurance company with 1,001-5,000 employees
Integrating user accounts is easy, and it has helped save costs, but Intune's role structure is overly complex
Pros and Cons
- "I would rate the stability of Microsoft Intune nine out of ten."
- "While the ability to deploy applications at startup is reliable, the policy-based application deployment method has not reached the same level of consistency."
What is our primary use case?
I use Microsoft Intune to configure policies and manage devices.
We implemented Intune to manage devices for specific users and departments, including device ownership and access control.
How has it helped my organization?
I would rate the Intune user experience eight out of ten. About two years ago, I was a team leader with an apprentice. Before the apprentice arrived, we hired another employee who, on his first day, asked what Intune was. I was surprised he didn't know but was comfortable with it within a few days. In the last few years, Intune has been user-friendly.
Intune Suite provides robust security at the operating system level.
The enterprise application management feature is functioning well in its current state.
By leveraging cloud infrastructure instead of private systems, Intune has offered increased remote security and greater ease of access. While I still appreciate SCCM's capabilities, I am satisfied with Intune's performance.
I would rate Intune's ability to secure hybrid work and data on company devices as nine out of ten.
Due to the infrastructure being used, Intune has helped save a minimum of 30 percent of our cost.
It is important that Intune is integrated with Microsoft 365 and Microsoft Security for cloud and co-managed devices because integrating user accounts is easy.
What needs improvement?
Intune consolidates endpoint and security management tools into a single platform, but its exclusive focus on Microsoft devices necessitates supplementary solutions for Android and iOS. While Intune simplifies numerous tasks, it doesn't provide a comprehensive, all-in-one solution, requiring access to platforms like Azure or AD for specific functions. Although valuable, Intune's primary challenge in a corporate environment is the complexity arising from overlapping rights and processes across departments due to its extensive management capabilities. As a global admin, I would implement changes to address these complexities and streamline the management process.
Intune's role structure is overly complex, with too many layers creating unnecessary access hierarchies. While users can mitigate this by limiting active roles, I suggest streamlining the menu structure to improve usability. For instance, combining device lists for Autopilot and Intune would be beneficial, as these functions are closely related but currently separated. Redefining categories and consolidating menu paths would enhance navigation and make finding features easier. Essentially, I propose simplifying Intune's interface by better organizing its components.
I would like to see more tooltips, such as those brief descriptions that appear when you hover your mouse over something. For example, when you move your mouse over the "delete" button, a small box could pop up explaining that the object will be deleted but can be restored. This is especially important for grayed-out options. Users should be informed why they cannot perform certain actions, such as requiring a different role, object unavailability, or access through a different part of the system. Tooltips would significantly reduce the time I spend explaining these limitations to others.
Intune Suite's remote command functions could be improved for security. Internet connectivity is required for remote resets, and other actions are limited. I propose a potential solution involving automatic device lock after a specific period without check-in, allowing access only upon reconnecting to the internet. This would enable remote management functions without a constant internet connection. Additionally, the current unreliability of remote command execution, often requiring multiple attempts or restarts, is frustrating and needs addressing.
While the ability to deploy applications at startup is reliable, the policy-based application deployment method has not reached the same level of consistency. This inconsistency between the two methods is a key area for improvement, as reliable startup deployment is a benchmark for the desired level of reliability in policy-based installations.
Though reluctantly, we are utilizing Advanced Endpoint Analytics as application installs and compliance policy issues plague it. Comm client policy errors frequently skew statistics, providing an inaccurate representation of our day-to-day operations. These misleading metrics are largely due to other Intune component problems. While we can access analytics, we often manipulate data to exclude irrelevant demographics and metrics, such as application install failures, to produce more accurate reports. Similarly, device compliance statistics are unreliable indicators of fleet performance. While Advanced Endpoint Analytics offers potential utility, it primarily highlights underlying issues requiring resolution rather than providing actionable insights.
We can rectify endpoint anomalies. However, we overlook many others unless issues are exceptionally critical and high-priority. While Intune Analytics is a system component we utilize, its performance metrics are underwhelming. Conversely, our other ITSM infrastructure metrics are quite positive. Intune Analytics requires significant troubleshooting.
Intune is not as streamlined as SCCM but offers greater accessibility. While Intune is more assured, SCCM ultimately proved more efficient in terms of time spent.
For how long have I used the solution?
I have been using Microsoft Intune for six years.
What do I think about the stability of the solution?
I would rate the stability of Microsoft Intune nine out of ten.
What do I think about the scalability of the solution?
I would rate the scalability of Microsoft Intune nine out of ten.
How are customer service and support?
The technical support is good.
How would you rate customer service and support?
Positive
What other advice do I have?
I would rate Microsoft Intune seven out of ten.
We are working to expand Copilot's utility beyond its current primary use case of text-based summarization, which offers limited business value. While it aids productivity in meeting contexts, it does not significantly contribute to tasks that generate value. Consequently, we are investing resources in improving Copilot's capabilities without seeing commensurate returns.
Intune is an accessible system and one of the industry standards, so there's not a lot that you'll be left wanting.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Microsoft Intune
April 2026
Learn what your peers think about Microsoft Intune. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,244 professionals have used our research since 2012.
Enterprise IT Infrastructure Architect at Capital Group of Companies
Is flexible, improves productivity, and is user-friendly
Pros and Cons
- "Microsoft Intune simplifies device management by replacing the traditional method of installing OS, joining a domain, and configuring everything manually."
- "Manually syncing devices to enforce policies is cumbersome."
What is our primary use case?
We use Microsoft Intune to manage our endpoint.
How has it helped my organization?
Microsoft Intune simplifies endpoint and security management by unifying app deployment, device administration, and security features under one cloud-based platform. This lets us easily generate reports, and even remotely wipe missing devices through the Azure portal, enhancing overall endpoint protection.
Intune's user experience has been fantastic! The flexibility, especially with the company portal, allows users to independently install applications. This eliminates the need to constantly request installations from IT, saving everyone time.
Initially, some resistance and a learning curve slowed our adoption of Intune, but its benefits became clear during the shift to a remote workforce because of COVID-19. After initial deployment in 2020-2021, Intune simplified onboarding for new hires with remote access, allowing them to sign in to their laptops and gain immediate access to company resources.
Microsoft Intune helps with hybrid work models to secure company data by allowing employees to access work resources with BYOD while enforcing security measures on those devices.
Intune has positively affected our IT team's productivity. Everything is automated so their workloads have been reduced by 50 percent.
Intune has allowed us to consolidate other vendors.
What is most valuable?
Microsoft Intune simplifies device management by replacing the traditional method of installing OS, joining a domain, and configuring everything manually. With a central management portal, we can easily group and manage all devices, eliminating the need to physically join them to a domain. This allows for seamless enrollment from anywhere, making Intune a user-friendly and flexible solution.
What needs improvement?
Manually syncing devices to enforce policies is cumbersome. Automating this process in Intune would significantly improve efficiency.
The licensing cost has room for improvement.
For how long have I used the solution?
I have been using Microsoft Intune for three years.
What do I think about the stability of the solution?
We experience occasional delays with Intune, especially during updates, software deployments, and device syncs. While changes on the Intune portal should ideally reflect immediately on all devices, restarts or repeated syncing might sometimes be necessary for policy updates to reach endpoints. However, Intune functions well once everything is up-to-date.
What do I think about the scalability of the solution?
Microsoft Intune is scalable as long as we have the licenses.
Which solution did I use previously and why did I switch?
While SCCM offers a lower upfront cost with a single license, Intune's cloud-based subscription model provides greater flexibility and more features. Although continuous subscription fees make Intune more expensive over time, its functionality outweighs the cost factor for many users, especially those who don't require constant network connectivity for updates.
How was the initial setup?
The initial deployment process was straightforward. We followed the on-screen instructions, downloaded the necessary software from the cloud, and our device was ready to use.
The time it takes to deploy Intune depends on our internet speed and location. On a fast network, deployment can be completed in ten to 20 minutes. Slower connections with high latency can take 30 to 45 minutes, and remote offices with limited bandwidth may require up to an hour or two.
Two people were required for the deployment.
What about the implementation team?
The implementation was completed in-house.
What's my experience with pricing, setup cost, and licensing?
Using the Cloud is expensive. Perhaps in five to ten years, we will see some cost savings.
The Intune license model is costly. We need to have an enterprise mobility license to use Intune.
What other advice do I have?
I would rate Microsoft Intune eight out of ten.
Our organization is currently piloting Microsoft Intune Copilot, which includes its AI functionalities. We're evaluating its features and functionality to determine its suitability for broader deployment across the entire organization.
Microsoft Intune simplifies mobile device management with BYOD for businesses, reducing the total cost of ownership. Intune's user-friendly interface eliminates the need for extensive IT expertise, making it a strong recommendation for most organizations.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Director at Destino Infotech Pvt Ltd
A user-friendly UI, comprehensive visibility, and a seamless experience
Pros and Cons
- "One of the biggest advantages of Microsoft Intune is that it brings the management of Windows, macOS, iOS, Android, and even Linux under a single pane of glass."
- "A new Intune feature allows application packaging, but it incurs additional licensing costs for a significant number of applications."
What is our primary use case?
Our primary use of Microsoft Intune is for device management and improve security. Initially, it focused on management for Windows devices. However, over time, its capabilities have expanded to encompass mobile device management in general, as well as management for other platforms like iPO, Android and Mac OS devices.
To ensure our devices are manageable regardless of location, we transitioned from an on-premises device management solution to Microsoft Intune. This cloud-based approach allows us to manage devices from anywhere, eliminating the need for them to be on our company network or VPN. Intune empowers us to remotely take actions on devices, including software installation, user identification, performance checks, and even triggering a remote lock if a device is compromised.
How has it helped my organization?
While most of our devices are company-owned, we also manage a small number of personal devices. Regardless of location, Intune allows us to manage them all.
Intune streamlines mobile application management by offering a single pane of glass for all devices across platforms, including iOS, Android, MacOS and Windows. It integrates seamlessly with the respective app stores for each platform.
Intune is a key component of a zero-trust security architecture. With Intune, we can manage our entire device fleet from a single platform. This enables us to enforce compliance policies. Intune verifies if devices meet our organization's security standards. We can implement zero-trust access control. Non-compliant devices are blocked from accessing company resources. Secure devices are granted access. Intune helps consolidate security management. It simplifies device security by offering features like compliance checks, security posture assessments, and configuration management - all in one place. Finally, Intune reduces management overhead: Intune streamlines device management by eliminating the need for multiple tools for tasks like patching and application deployment. While it may not offer the full functionality of specialized tools, it provides a comprehensive solution for core device security and configuration needs.
Intune offers comprehensive visibility and IT control over devices across various platforms. This allows for remote management, although integration with additional solutions or configuration might be necessary in some cases. However, Intune provides a single point of control for all our devices. Key functionalities include remote device control. We can manage devices remotely and trigger various actions. As well as advanced features to locate devices, enforce data synchronization, and more. It's important to note that certain advanced functionalities, like admin-level remote control, require device approval and may not be as robust as solutions offered by competitors, such as TeamViewer. Additionally, to access features like privileged email access, privileged device management, and advanced remote assistance, additional licensing is required, resulting in increased costs.
For users, Intune offers a seamless experience. Once their devices are enrolled, they typically don't need to do anything further. This is especially true for end users. For administrators, Intune is also an easy-to-use solution. Being cloud-based, it's accessible from a web portal just like any other SaaS application. The company portal experience is straightforward. Once users understand the basics, they can easily check device compliance and install applications. Overall, the user experience is very positive. However, device enrollment might require some training. Not everyone is comfortable managing their devices themselves. Even though the enrollment process is fairly simple and intuitive, some user training and change management might be necessary, especially for mobile device management in Intune. This is because multi-factor authentication is sometimes required to enroll devices, and some users may need help understanding and completing this step.
It provides a centralized solution for viewing all our devices. It also simplifies enrollment for Windows devices. Once we enable automatic enrollment for on-premises devices or upon user sign-in to company applications, enrollment can be seamlessly done through mobile devices. The most significant benefit is undoubtedly patching. Intune automates the process of keeping devices updated with the latest Windows updates and feature updates. This significantly reduces administrative overhead. After setting up the policies, we can be confident that updates are being applied without needing to constantly monitor them. Intune also offers improved visibility into device compliance. Unlike traditional Group Policies, which may only show successful application but not actual implementation, Intune displays the real-time status of enforced policies on each device. This allows us to see if features like BitLocker encryption or security restrictions are truly active, providing greater confidence in our device security posture. In essence, Intune offers a significant improvement in terms of device visibility and configuration management.
Intune's device compliance policies offer organizations valuable visibility into device settings. This includes essential requirements like BitLocker password complexity and minimum Windows or OS versions. Additionally, these policies allow for the deployment of custom compliance settings. This lets us measure compliance against any specific criteria. For example, one of my clients uses Intune to verify if CrowdStrike is running on the required version and if devices have downloaded the latest updates. By ensuring compliance, we can be confident that devices are secure against the latest vulnerabilities and security risks. This provides an extra layer of assurance. When used in conjunction with conditional access, Intune can block non-compliant devices. This guarantees that only compliant devices can access our organization's resources and applications. From a security standpoint, this offers significant peace of mind.
Application deployment in Intune offers several features that streamline the process. These features include applicability rules. We can deploy applications only to devices that meet specific criteria, such as operating system version or name. This ensures users receive the applications they need and avoids unnecessary installations. Device filtering allows us to exclude devices that don't require the application, further optimizing deployment efficiency. While Windows Win32 applications require packaging, the process is straightforward. Although automation would be ideal, packaging becomes easier with practice. Microsoft could potentially improve Intune by allowing seamless import of SCCM application packages. This would eliminate the need for repackaging and streamline migration. Overall, Intune simplifies application deployment for administrators. Features like self-service installation through the company portal empower users and reduce administrative burden. Packaging requirements vary depending on the application type. Standard applications like Office 365 are straightforward to deploy. Additionally, Intune integrates directly with app stores for iOS and Android apps, eliminating the need for manual packaging for these platforms.
Intune excels at securing hybrid work environments and protecting data on both company-owned and BYODs. It allows for selective wiping of company data from these devices without affecting personal information. However, for data downloaded from company applications like OneDrive, additional security policies might be necessary to ensure its security on downloaded devices, especially BYODs. The good news is that Intune allows the management of BYODs, enabling the deployment of settings, configurations, and security measures to assess the device's security posture. Notably, it's very easy to deploy for BYODs with its mobile application management for iOS and Android. For securing data within applications on Windows devices, Microsoft's Windows Information Protection capabilities seem to have been replaced. There's now a category requirement, likely used to secure data accessed through the Edge browser on privileged devices. This ensures data remains secure when users access it through Edge. It's important to note that some aspects of data security on BYODs might require additional configuration to guarantee complete protection.
Microsoft security signals identify the settings configurations we need to enforce on the devices. Then, it's up to organizations to deploy those settings or configurations. So, it's a good thing. It helps us understand what additional security we need to enable on the devices. Microsoft signals do help us do that, but it may not be enough. We might have various other compliance requirements that not everything would be covered under Microsoft signals, I believe.
Intune's endpoint privilege management is a valuable feature. It allows granting privileges to specific applications instead of giving local admin rights to users or entire devices. This can improve security by minimizing the attack surface. While EPM requires an additional license, it's a worthwhile consideration for many organizations. I've experimented with it in a lab setting, but we haven't deployed it for production use yet.
It has significantly boosted our IT department's productivity by automating many tasks. For instance, we no longer need to create custom images with Autopilot; we can simply deploy application settings configurations. Additionally, Intune seamlessly handles Windows updates and feature updates once they're configured. It's a set-and-forget system. Application deployment is also significantly simplified, saving admins valuable time. Overall, Intune improves IT productivity and empowers users with self-service features. Once trained, users can handle tasks like application installation, device compliance checks, and remediation actions for non-compliant devices.
While Intune isn't designed to identify security breaches directly like Defender does, it plays a crucial role in minimizing our attack surface. This is achieved by deploying the latest updates, configurations, and endpoint security policies. In my experience, Intune has significantly improved our overall security posture by reducing vulnerabilities, but it's not a replacement for breach detection tools.
Intune helps save costs by consolidating multiple endpoint management solutions. For instance, we might have separate solutions for iOS devices, Android devices, and Mac devices. By bringing everything together into a single solution with Intune, we can save on both platform licensing costs and administrative costs. Additionally, Intune reduces the need for additional per-device licensing fees that may have been incurred with separate solutions.
The user interface is well-designed and easy to navigate. It has a simple and well-structured layout, which makes it a pleasure to use. I'm very happy with the overall experience of the Intune portal. They also seem to be continuously improving it, with updates made on a monthly basis.
It streamlined our mobile device management by allowing us to manage both iOS and Windows devices under a single solution. This consolidation reduced the number of consoles and overall management tools required.
The integration of Microsoft Intune with Microsoft 365 and Microsoft Defender for Cloud strengthens cloud management and support for hybrid environments. This unified approach bridges the gap between cloud-based and on-premises device management, allowing organizations to leverage existing infrastructure while transitioning to cloud solutions.
What is most valuable?
One of the biggest advantages is that it brings the management of Windows, macOS, iOS, Android, and even Linux under a single pane of glass. This means we can manage all our devices from one central location.
A particular advantage is its tight integration for managing Windows devices. Since Intune is a native Microsoft product, it offers a more comprehensive and streamlined experience compared to many third-party solutions.
For mobile device management, Intune includes all the capabilities and features we'd expect from other vendors. However, it goes a step further by allowing us to secure Office 365 apps without needing full device management. This is a significant advantage when compared to other MDM solutions.
What needs improvement?
We package Win32 applications and import existing packages using solutions like SCCM or third-party tools. While Intune doesn't currently offer third-party application patching, we rely on third-party solutions for that functionality.
A new Intune feature - Enterprise App management allows to deploy Microsoft and Third party apps and keep them up to date but it incurs additional licensing costs. Ideally, this feature should be included in the base license. Similarly, the privilege endpoint management feature also requires additional licensing.
Intune would benefit from offering some core features at no extra cost. The most valuable improvement, in my experience, would be the ability to identify inactive devices through reports. Customizable reporting capabilities within Intune would simplify overall management and allow us to track device activity and inactivity more effectively.
For how long have I used the solution?
I have been using Microsoft Intune for over 10 years.
What do I think about the stability of the solution?
Microsoft Intune is an extremely stable product with a small amount of glitches over the years.
I would rate the stability 10 out of 10.
What do I think about the scalability of the solution?
Intune is cloud-based and therefore highly scalable. I have clients with over 40,000 devices.
How are customer service and support?
The quality of Microsoft's technical support varies based on the level we have. Premium support offers faster escalation for complex issues, while basic support may have longer wait times for a response. However, there's a strong online community around Microsoft Intune. Searching questions online through Google can often lead us to solutions from this community.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I have used Jamf, Microsoft Configuration Manager, Altiris Symantec Endpoint Management Suite, and Cisco Meraki Systems Manager. Microsoft is considered a leader in endpoint management solutions. While Jamf excels in specific areas, Microsoft Intune is generally recognized as the market leader due to its comprehensive capabilities. Intune also integrates seamlessly with other solutions such as compliance checks, conditional access policies, and mobile application management. Microsoft Intune offers several advantages over competitors, providing a comprehensive suite of mobile device management capabilities.
How was the initial setup?
The time it takes to implement Intune depends on two factors: the features we want to enable and the size of our organization. Enabling basic management features for common devices like iOS, Android, Mac, and Windows typically takes one to two weeks. This includes enrolling devices and setting up core functionalities. For a full Intune implementation with all its capabilities, the timeline can vary depending on the organization's size. However, simply enrolling devices and exploring basic features can be done in a couple of days.
While the step-by-step guided scenarios make the initial deployment process easier, it still requires familiarity with Intune and some experience using it.
What's my experience with pricing, setup cost, and licensing?
It is available for individual purchase at a low per-device cost. However, it's also included as part of the Microsoft 365 suite license. Additionally, Intune offers various tiers with advanced features at an extra cost.
What other advice do I have?
I would rate Microsoft Intune 9 out of 10.
We have around 20,000 users on Intune and 4 people who work directly with it.
Intune requires annual maintenance to renew push certificates and tokens for business managers. For Windows devices, we might also need to deploy the latest application. Additionally, it's recommended to periodically review devices that are inactive, outdated, or haven't reported to Intune for a set amount of time. While Intune offers a "set and forget" approach for initial configuration, some ongoing maintenance is necessary to ensure its smooth operation.
I recommend Microsoft Intune to others.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
CTO at Sojitz Logistics Corporation of America
Provides great visibility, helps consolidate our endpoint devices, and our vendors
Pros and Cons
- "Fortunately, now everything is streamlined into a single, unified platform."
- "I would like some integration with the Microsoft reporting platform Power BI."
What is our primary use case?
Microsoft Intune serves as our central platform for device management, ensuring timely patching and secure access through conditional controls.
We leverage Intune to automate device onboarding, ensure patch deployment and device compliance, and generate compliance reports. We prioritize patching devices identified as non-compliant through these reports.
How has it helped my organization?
Microsoft Intune has played a crucial role in enabling remote work for our facilities under our BYOD policy. It has been essential for our success.
Consolidating all our endpoint security management tools into a single platform significantly improves our IT and security operations. This streamlined approach provides us with the advantage of using only one reporting stack, and it yields synergies that surpass the capabilities of individual solutions from separate vendors.
Integrating Intune with other Microsoft services has streamlined authentication through single sign-on. We're now transitioning to passwordless authentication for enhanced security and convenience within our unified environment.
Last week, for example, someone traveling to China had their laptop stolen. Fortunately, thanks to Intune, we were able to remotely wipe the device, protecting their data.
The incident reporting and analytics tools enable us to monitor our devices' compliance status near-continuously. As licensed customs brokers subject to Department of Homeland Security inspections, this allows us to generate reports quickly and efficiently, reducing inspection time from thirty minutes to three to four minutes.
Intune gives us full visibility into our devices and IT control across all platforms. This has significantly streamlined our management process. Previously, two people in our ten-person department spent their entire time monitoring platforms and fixing issues. Now, only one person devotes 75 percent of their time to these tasks. This means we're accomplishing more with fewer people and less time overall.
It's great, but the issue with any platform like it is the delay between deploying something and it rolling out remotely. However, it's probably the best option available in terms of keeping us informed about what's happening outside our server room or hosting environment.
Microsoft Intune has been instrumental in securing our hybrid work environment and protecting data on company-owned devices (BYOD). Before Intune, if someone lost their phone, wiping it meant erasing all their personal data - photos, documents, everything. Today, with Intune, we can selectively remove only our applications and data. This allows users to recover a lost phone and restore their personal information. Intune empowers us to be more proactive, eliminating the worry of accidentally wiping a misplaced device.
Microsoft Security Signals has become an invaluable addition because it provides centralized reporting capabilities. This one-pane-of-glass view empowers us to easily communicate our security posture internally to management and externally to regulatory agencies and auditors.
I'm impressed with the Intune endpoint privilege management feature. It's allowed us to reduce even the admin team's permissions significantly. Now, they typically lack access to most things, but the system elevates their privileges just in time for them to complete specific tasks and then demotes them again afterward. This least-privilege approach has been fantastic, and the built-in integration across the entire Microsoft stack is a major advantage. It saves us the hassle of purchasing and integrating a separate solution – it's simply there and works seamlessly.
Implementing least privilege access through Endpoint Privilege Management has significantly improved our organization's attack surface. For example, our Microsoft Secure Score was around 60 percent before adopting the solution, and it's now up to 98 percent. This reduction in the attack surface has also enabled us to implement various remediation measures and establish context-based security. For instance, even if users enter the correct password and complete two-factor authentication, we can require additional authentication if they log in from an unfamiliar location, such as a new country or state. This multi-layered approach provides us with an enhanced sense of security.
Intune has helped reduce the risk of security breaches in our organization.
We had another deployment solution for Apple iOS and Mac devices. Additionally, we also managed a few Linux boxes with an unsupported management architecture. We were able to migrate all of those devices to Intune.
Intune has helped consolidate vendors.
What is most valuable?
The integration with macOS and mobile devices specifically iOS, iPhones, and iPads was challenging in the past, requiring separate solutions and manual processes. Fortunately, now everything is streamlined into a single, unified platform.
What needs improvement?
I would like some integration with the Microsoft reporting platform Power BI.
For how long have I used the solution?
I have been using Microsoft Intune for five years.
What do I think about the stability of the solution?
Microsoft Intune is stable.
What do I think about the scalability of the solution?
The scalability is good.
Which solution did I use previously and why did I switch?
We used System Center Configuration Management, and we did it all on-prem. When Covid hit we switched to Intune.
How was the initial setup?
Microsoft documentation has traditionally been criticized for its complexity and search difficulty. While some improvements have been made, many users still rely on online forums and YouTube videos for basic setup and troubleshooting. As a result, the onboarding experience can feel less polished compared to competitors like Malwarebytes, which offer more hand-holding during installation and configuration. Unfortunately, navigating Microsoft products often requires independent research and trial and error, which can be a barrier for new users.
What's my experience with pricing, setup cost, and licensing?
Consolidating vendors has lowered our licensing costs. However, some features included in Microsoft's Intune might be 50 percent more expensive if purchased separately from another vendor. Specifically, if we consider upgrading Azure Active Directory or Entra to the P2 level, adding Intune capabilities, and acquiring the full Intune suite, Microsoft offers a significantly lower per-user cost compared to external vendors. With Microsoft, it's just a couple of dollars per user, while external vendors typically charge $10-$14 per user for similar functionality.
I would rate the price a four out of ten with ten being the most expensive.
Which other solutions did I evaluate?
We evaluated several options, primarily security solutions like Malwarebytes and Sophos, which offer remote management capabilities. Ultimately, we opted for Intune.
This is a case where remote management was initially implemented as an afterthought, primarily driven by anti-phishing and anti-malware threat response needs. Subsequently, it became the sole platform for endpoint management, despite limitations in its functionality and granularity compared to solutions like Intune.
What other advice do I have?
I rate Microsoft Intune an eight out of ten.
I'm conflicted about consolidating our vendors. On the one hand, it would simplify things considerably, which is appealing. However, I worry about relying solely on one supplier, preferring a layered approach with multiple vendors. Ideally, we'd maintain a multi-vendor setup, but the current complexity makes it challenging. There are currently vulnerabilities related to Microsoft's primary factor authentication, including several unpatched zero-day exploits. These represent ongoing security concerns.
It's crucial for our organization that the Intune suite integrates seamlessly with Microsoft 365 and Microsoft Security, both for cloud-based and co-managed devices. This is especially important considering the recent trend of moving data back on-premises. We believe a hybrid environment offers the best of both worlds, but many tools are cloud-only, making them incompatible with our on-premises servers or unable to manage them effectively. Thankfully, the Intune suite has addressed this gap, providing us with much-needed flexibility and functionality.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cyber Security Officer at Gudu
Consolidates security features and provides comprehensive device monitoring
Pros and Cons
- "These capabilities have made a significant impact in my work, providing a comprehensive view of all devices and features in a single platform."
- "The user interface should be more user-friendly, as it can sometimes be challenging to navigate. Microsoft often relocates features, making it difficult to consistently find what I need."
What is our primary use case?
I primarily use Microsoft Intune for device monitoring, security, and cybersecurity. My role involves working with devices, monitoring, and enforcing security measures using Microsoft Defender, and synchronizing different security aspects. Microsoft Intune is utilized for tracking device locations, which is crucial for understanding where users are connecting from.
What is most valuable?
The most valuable features in Microsoft Intune for me are the security features, including Microsoft Defender. I use the device location tracking feature often to determine where users are connecting from. It is greatly beneficial to be able to look for devices, enroll them into groups, and apply management policies. The advanced endpoint analytics feature is effective in detecting potential threats and anomalies, allowing me to share graphical information for better communication and understanding. These capabilities have made a significant impact in my work, providing a comprehensive view of all devices and features in a single platform.
What needs improvement?
The user interface should be more user-friendly, as it can sometimes be challenging to navigate. Microsoft often relocates features, making it difficult to consistently find what I need. Stability could also be improved, as features tend to move, requiring additional effort to locate them again.
For how long have I used the solution?
I've been using Microsoft Intune for six years.
What was my experience with deployment of the solution?
I did not encounter any significant deployment issues. The process is straightforward and takes only a few hours.
What do I think about the stability of the solution?
Microsoft Intune is relatively stable, but I rate it a seven out of ten because features sometimes move, creating additional challenges.
What do I think about the scalability of the solution?
Microsoft Intune is quite scalable, and I rate the scalability aspect eight to nine out of ten, with no major problems encountered.
How are customer service and support?
Customer service and technical support are generally good, with an eight out of ten rating. Occasionally, it takes a while to receive responses from Microsoft, which could be improved.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I used VMware's cloud solution before Microsoft Intune, but it lacked many features. It was not user-friendly and prone to mistakes, leading me to switch.
How was the initial setup?
The initial setup was easy, earning a nine out of ten for ease.
What about the implementation team?
We occasionally partnered with integrators from countries like Latvia for implementation.
What was our ROI?
Using Microsoft Intune helps save on management and security costs.
What's my experience with pricing, setup cost, and licensing?
Microsoft Intune is not particularly expensive, especially considering the security features. It costs approximately forty euros per user per month.
Which other solutions did I evaluate?
I previously evaluated VMware.
What other advice do I have?
I recommend Microsoft Intune because it consolidates many features into one place, making it an efficient solution. I rate the overall solution ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
ITSM Consultant at a computer software company with 51-200 employees
Deploys new systems efficiently with excellent stability but needs better integration capabilities
Pros and Cons
- "This solution saves us a lot of time once it's implemented."
- "Autopilot is a feature I really like."
- "I would like to see better integration with Microsoft."
- "I would like to see better integration with Microsoft. There are a few things I can still do with Jamf that I am unable to do with Intune yet."
What is our primary use case?
I started using this solution in the summer of 2021. It was three years ago, and I remember it was to deploy new computers. I aimed to get a brand new laptop with the processing system entirely configured and ready to work with applications deployed.
What is most valuable?
I would say Autopilot is a feature I really like. It allows us to send a brand new computer directly to the user without needing to go through IT. This capability is powerful as it allows us to remove any compromised device remotely, whether it gets stolen or not.
It's a great product to secure data, although it might be a bit more complicated with iOS devices when you're using your own device. It's nice for mobile devices, though smartphones might be less suitable compared to personal computers. This solution saves us a lot of time once it's implemented.
What needs improvement?
I would like to see better integration with Microsoft. There are a few things I can still do with Jamf that I am unable to do with Intune yet.
For how long have I used the solution?
I have been using the solution for three years.
What do I think about the stability of the solution?
Stability issues almost never happen. The worst case I experienced was when Autopilot failed a couple of times, but that's the only issue I had.
Which solution did I use previously and why did I switch?
I did not use any previous solutions except Jamf for Apple devices.
How was the initial setup?
The initial setup was somewhat between easy and difficult. It took about a month to learn how to use it, initially in a small environment. During the first implementation in March, I did not like all the new features as they took time.
What about the implementation team?
I used it twice. The first implementation took a long time, and there were two of us the second time.
What other advice do I have?
I am sharing my experience between Intune and Jamf. Regarding the user experience, I'm not sure that users realize what Intune does for them. It automates tasks so that from their perspective, things happen automatically without understanding what is being done.
I'm not sure about the name, but I had a personal plan because I started using it without training. It took a few weeks to learn how to use it properly. For application deployment, maintaining packages for updates is necessary. I advise using a testing environment and taking the time to understand how this will impact the infrastructure before putting Intune into production.
Overall, I would rate this product seven out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Technologies Architect at a financial services firm with 10,001+ employees
Provides a more streamlined and consistent method for device management across our multiple domains
Pros and Cons
- "Within Intune, managing policies and having a consistent way to manage devices is valuable."
- "Implementing Microsoft Intune has provided a more streamlined and consistent method for device management across our multiple domains, effectively consolidating our administrative efforts."
- "While no specific feature requires immediate improvement, the ongoing expansion of reporting and inventory capabilities promises to enhance its utility."
What is our primary use case?
Our primary use case is managing our devices and policies and having a consistent way to manage devices on the Windows side.
How has it helped my organization?
Implementing Microsoft Intune has provided a more streamlined and consistent method for device management across our multiple domains, effectively consolidating our administrative efforts.
The Microsoft Intune user experience is good. I would rate it eight out of ten.
What is most valuable?
Within Intune, managing policies and having a consistent way to manage devices is valuable.
What needs improvement?
Intune is a constantly evolving product, with Microsoft prioritizing its development over on-premise tools. While no specific feature requires immediate improvement, the ongoing expansion of reporting and inventory capabilities promises to enhance its utility.
For how long have I used the solution?
I have been using Microsoft Intune for at least seven years.
What do I think about the stability of the solution?
The Microsoft Intune stability is getting better, and I would rate it eight out of ten. A couple of years ago, the performance was not as good as it is now, but there are noticeable backend improvements.
What do I think about the scalability of the solution?
Microsoft Intune's scalability has improved over the years.
How are customer service and support?
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We used Configuration Manager and are continuing to use it. The addition of Intune was due to Microsoft's direction.
What other advice do I have?
I would rate Microsoft Intune eight out of ten. Nothing is perfect, but it's good.
We began using Copilot, but it is currently restricted to a select few. Due to its potential for increased productivity and improved user experience, we are advocating for its wider adoption.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Microsoft Intune Report and get advice and tips from experienced pros
sharing their opinions.
Updated: April 2026
Product Categories
Unified Endpoint Management (UEM) Configuration Management Remote Access Enterprise Mobility Management (EMM) Microsoft Security SuitePopular Comparisons
Microsoft Defender for Endpoint
Microsoft Entra ID
Microsoft Defender for Cloud
Microsoft Defender for Office 365
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Purview Data Governance
NinjaOne
Microsoft Configuration Manager
Red Hat Ansible Automation Platform
Azure Key Vault
Workspace ONE UEM
WhatsUp Gold
Citrix DaaS (formerly Citrix Virtual Apps and Desktops service)
Buyer's Guide
Download our free Microsoft Intune Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Microsoft Intune and VMware AirWatch; Which do you recommend?
- What is lacking in comparison with AirWatch?
- What are the benefits of Microsoft Intune for IT Admin?
- What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
- What are the main differences between Jamf Pro and Microsoft Intune for Mac management?
- Which solution is better for an educational organization: Google Workspace or Microsoft Intune?
- What are the differences between MobileIron UEM and Microsoft Intune?
- What are the pros and cons of Microsoft Intune?
- How does Microsoft Intune compare with ManageEngine Desktop Central?
- Is it worth migrating from WS1 to Intune if we have Microsoft 365 E3 available?











