Microsoft Intune Reviews

We have policies that need to be enforced regarding mobile devices accessing email and the corporate intranet. We have defined them in Intune so that the devices are not able to connect to the resources that they are not supposed to connect. This is the main use case for which we are using Intune.

It helps with security because everybody is not cautious. For security, it is quite useful. It has had a positive impact on the organization. We have zero tolerance for cybercrime. We do not want any threat to our systems. Intune has reduced the number of security issues. It helps to ensure that the devices are compliant and can connect. It also helps with some tracking.

We understand that as an organization, we are not supposed to interfere with users' personal data. We are able to use Intune to segregate the applications. It controls what they are allowed to see on the bank network.

We have three different categories of staff, and we are able to create and enforce policies based on each category.

We have an overview of the devices in terms of security compliance and from where they are connecting with our network. We can also do root cause analysis when there is any issue. It also helps prevent data loss. If a user is doing something against the policy, it can inform the user.

We have good visibility over mobile devices and workstations. If we have any problem, we know where it is coming from.

Intune has helped with productivity. Before Intune, we were not able to give access to some remote workers because we were not able to check exactly what kind of devices they were using. We had a limited number of people who could work from home. With Intune, we are able to check the devices to allow them. If they cannot finish their work in the office, they can continue from home.

It has helped with compliance. It has helped to ensure that devices comply with the organization's policy. If they are not compliant and secure, they cannot access the resources.

It would be good if, in addition to the minimal patching and compliance, we could also use Intune for application deployment. For instance, if a device is not patched, Intune should have the ability to push not only a Microsoft patch but also other patches, such as a browser patch.

I have been using Intune for six years.

It does not have any problem.

It is scalable.

We were not using any similar solution previously.

We have it on a public cloud. We have Microsoft 365. 

It is not difficult to maintain because it is in the cloud. It is important for us that the capabilities of the Intune Suite are integrated with Microsoft 365 and Microsoft Security for both cloud and co-managed devices.

We had a Microsoft partner for some configuration and training. We did not have any issues.

We have seen a positive return on investment, but it is hard to quantify the ROI and put a value on it. As a bank, we must protect our data, and the cost of losing the data is very high.

We did not evaluate other options.

I would recommend it to others. I would rate Intune a nine out of ten.

I am an Operations and Infrastructure manager. I do not use it directly. My team is the implementer, and I oversee it. I know the product, and I know what I can do and what it can do. I just do not push the buttons.

We are still launching it. We have about 85% of our PCs in Intune. We have only got two or three conditional access policies and compliance policies in place.

We are using it for endpoint management for basically getting control. Our next step will be to launch Autopilot. We will use Intune Autopilot and then also security policy management and group policy management. We will also use it for updates and patching compliance.

At this stage, we have not fully utilized its capability for securing hybrid work and protecting data on company and BYO devices. We are still growing. We have been managing our security manually through the security portal and through Azure Security. Intune can provide an additional level of management capability by bringing all of the external services into one management console. It is going to make managing our security posture a little bit easier.

Intune has not yet affected IT productivity in our organization, but it will. Once we start bringing on the remote support capabilities and we are fully compliant in terms of touch management and minimum touch levels, it is going to ease up a lot more. There will be more time and resources for us to look at the other features and capabilities.

Intune has helped to reduce the risk of security breaches in our organization, and that is purely due to its patch management at this stage.

Intune has saved us costs. As it is bundled with our enterprise agreement or enterprise subscription, we have not had to look at additional products. I am still hoping to convince our business that maybe Absolute is not needed if we can manage things with Intune. As we are still relatively young and immature in that area, we might need to look at alternate products to bolt onto it, so we have not yet had any direct savings. We have possibly had indirect savings.

Based on the bit of work or research that I have done, it seems to fit our needs. When you are looking at some of its tracking and management capabilities versus Absolute, it just does not go that one step further where Absolute would go with the recovery service for Precision laptops. My users or asset management are asking for the recovery capability on laptops. If they were not asking for that, I would just settle for Intune and provide the lost location and submit those details to enforcement, but they want the recovery service.

Intune has not helped us consolidate vendors because we are pretty much a single vendor. We have only got the Microsoft ecosystem. We are busy decommissioning our on-prem System Center setup, and we are moving to Intune on the cloud. It is integrated fully with AAD. We do not want to run infrastructure in South Africa. Because of the load shedding and electricity problems that we have here, we would rather use the cloud.

In the context of our journey to the cloud, it is important for us that the capabilities of the Intune Suite are integrated with Microsoft 365 and Microsoft Security for both cloud and co-managed devices. It would not have been attractive if it was not.

It is quite easy to manage. From what I have seen, it is very easy to check through. It is very basic. I do not need to be a rocket scientist to manage it. It takes a little bit of experience to set it up if you have never done it before. From a manageability point of view and ease of use, I would give it an eight out of ten rating.

It is quite policy-enabled, so you can build pretty much any policy to manage remote endpoints.

There could be more wizard-driven policy development or creation. Some of the policies can get quite complex. If they have a wizard that assists the administrators in creating the policy, that will be a great job.

Microsoft South Africa should improve their support for Intune in terms of turnaround time.

We started using it in about October 2022. It has been about a year and four months.

Microsoft South Africa could certainly improve on their support of it in terms of the implementation experience and completion of the project. This project has been going on for a year and four months already, but it should have been completed in six months. There are just too many clients looking at it, and there are not enough Microsoft support engineers for Intune.

We have one assigned Microsoft resource. We have got a unified support contract. They have only one support person to deal with multiple clients within our area, and if he is not available, we just wait.

If we had confident and good support from Microsoft, we probably could have cut the project time by 50%. We probably would already be finished and have 100% PCs fully compliant with Intune. 

I would rate their support a four out of ten.

Neutral

We are busy migrating from Microsoft System Center Configuration Manager and Endpoint Manager because of the infrastructure requirements. We want to be on the cloud.

We are a key government department that looks after and advises 13 other departments. They are rolling up Intune to those 13 departments.

It comes as a bundle, so you do not really know what the prices are. Microsoft does not break it down to the user cost for us. It is just bundled with our E5 license.

We did not evaluate other solutions because Intune was a part of our subscription.

My advice would be to make certain that you have the relevant in-house capability so that if you are working with Microsoft, you are able to cross-skill with Microsoft. If you do not have that and you are going to fully rely on Microsoft to assist you with deploying it, then make certain that you go into your project with your eyes wide open in terms of timing. The product is good. The scoping of the project is good, but the turnaround time is an issue. There is a lot of improvement required at Microsoft's end. The easier they make the policy creation within Intune with the wizard-driven process, the easier it will be for the internal administrators to implement it. If you remove your reliance on Microsoft, you can run a good product.

We do not use the feature called Tunnel for MAM to provide remote access to corporate resources on mobile devices. We do use Teams as a support or email support tool. We have a very small department, so that is sufficient. We would not migrate it to Intune.

We are not using Intune's Endpoint Privilege Management feature. At this stage, we are using Azure privileged management as the primary means of control. If it makes sense, we will get to it. It is not the first one on the list of things that we have got to do at the moment. We are on a zero-trust journey. If it is going to be one of the tick boxes, we will get to that.

Based on what I have seen of the product and its capabilities, I would rate Intune a seven out of ten. There are some issues that need to be dealt with, especially with the integration with Microsoft Defender Endpoint. Most definitely, the level of support and Microsoft resource capability is where I would mark it down.

Microsoft Intune serves as a crucial tool to safeguard against unauthorized access and protect sensitive data. By implementing Intune, we can control and monitor device usage, acting as a gateway to enterprise services. Access to corporate resources, including email and sensitive information, is restricted to devices enrolled in Intune. It is a comprehensive security solution that not only controls access to enterprise resources but also tracks and prevents unauthorized access, ensuring the protection of sensitive data and preventing potential data loss scenarios.

It acts as a central integration point for endpoint and security management tools, simplifying the connection process. However, considerations such as privacy laws may impact the integration of certain devices, like partner devices, emphasizing the flexibility of Intune in adapting to various organizational needs. Given that Microsoft Intune operates on a policy-driven model, connecting all staff devices becomes a matter of duty. This is because the platform excels in efficiently managing endpoints by enforcing policies that govern device security, access, and compliance.

When it comes to the user experience, integrating and onboarding with Microsoft Intune is a seamless process for the majority of devices, such as those from well-known brands like Android and iOS, where compatibility stands at a high success rate of around ninety-four percent. However, it's important to acknowledge that there might be challenges with certain lesser-known or non-mainstream brands, where compatibility may not reach a hundred percent.

The implementation of Intune hasn't significantly impacted IT productivity within our organization. Instead, its primary function is to enhance security for remote connections.

Intune has played a vital role in minimizing the risk of security breaches. Its effectiveness lies in restricting unauthorized access, particularly in scenarios such as conferences where secure connectivity is crucial. This reinforces the overall security posture, especially concerning mobile devices.

Implementing this product has resulted in cost savings for our organization. In the event of data loss, the expenses associated with investigations and remediation are significantly reduced. The product adds value by mitigating the financial impacts related to security incidents.

Intune plays a crucial role in ensuring the security of hybrid work environments and safeguarding data on both company-owned and BYO devices. While it functions seamlessly for mainstream devices, including Dimensional and others, there might be some challenges with certain brands of personal devices. However, overall, Intune provides a comprehensive platform where both corporate and partner devices can coexist securely.

The utilization of Microsoft security signals, coupled with the impact of Intune on our organization's security, is a pivotal aspect of our strategy. While there may be some limitations in the user interface when dealing with BYOD scenarios, the synergy with Microsoft Defender solutions is noteworthy. The seamless integration within the Microsoft suite ensures a cohesive security approach. Additionally, the incorporation of phishing information and tracking numbers further enhances our security posture, especially when dealing with partner devices atop the Microsoft Defender platform.

The integration of Intune suite capabilities with Microsoft 365 and Microsoft Security for both cloud and on-premises managed devices is highly valuable. The suitability depends on the specific requirements and the number of users in a given scenario.

There is room for improvement, particularly in terms of compatibility, extending beyond the well-known major brands.

I have been working with it for approximately a year.

It provides good stability.

We never faced any issue with scalability.

Thus far, we have not encountered any issues with the support provided, and their responsiveness has been satisfactory.

The deployment process is straightforward; we simply configure the necessary settings within the server, initiate the enrollment, and push it out. This streamlined approach facilitates staff onboarding efficiently.

When it comes to licensing, the decision to include Intune may vary based on the volume of users and the specific modules needed.

Overall, I would rate it eight out of ten.

I use Microsoft Intune for my Active Directory and my end-point and zero-day protection.

Microsoft Intune has allowed us to work from anywhere.

Autopilot is the most valuable feature of Microsoft Intune.

Integrating certain group policies can be challenging and may necessitate using on-premises systems to integrate them with Microsoft Intune.

I am encountering challenges integrating with multiple domains outside of my own due to unsupported Active Directory extensions.

I have been using Microsoft Intune for four years.

Microsoft Intune is stable.

Microsoft Intune is scaled to support more than 39,000 users without any issues. The initial setup process for the on-premises to Active Directory hybrid integration can be quite technical. We have 100 users.

Microsoft Intune's technical support is good.

Positive

The initial setup is straightforward. I am an architect and completed the deployment on my own within two months.

The implementation was completed in-house.

Using a hybrid setup instead of relying on a third-party product can provide a better return on investment with Microsoft Intune.

Microsoft Intune is included in our Office 365 suite license. The E5 license is expensive.

I give Microsoft Intune an eight out of ten.

Microsoft Intune doesn't require any maintenance from our end.

I recommend Microsoft Intune because it can be easily integrated with other Microsoft products into a single suite, making it a plug-and-play solution that can be set up with ease.

We are rolling out the product to manage cloud-based devices. We heavily use it for iOS and Windows devices.

Microsoft Intune improves our organization’s response time. We are supporting an older population of users. It is a key advantage to be able to support users who lock devices quite frequently.

The product’s biggest advantage is its ability to unlock a large number of devices remotely. It supports end-users who tend to lock their devices quite frequently. Its conditional access policy helps us keep the users logged in to their devices.

Microsoft Intune fails a lot when it comes to device compliance. The devices fall out of compliance a little too easily. If the users don't check in within a certain amount of time, they become non-compliant, even after having up-to-date standard settings.

I have been using Microsoft Intune for three years, personally. Our organization was using it for one or two years before I joined.

I haven’t encountered any stability issues for the product.

Microsoft Intune supports over 10,000 devices for our customers, primarily using iOS and Windows. We have a large number of managed apps in the aerospace industry. We were able to transfer apps to our devices managing app licensing through Intune.  I rate the product’s scalability a nine out of ten.

The technical support services are pretty decent.

Positive

I can see a good return on investment in terms of the areas it can automate to summarize day-to-day tasks, making them less time-intensive.

Intune has helped us greatly by rolling out conditional access policies with the RBAC settings. It helps us create a security posture for devices.

The product is critical for our organization to keep devices safe. We have a large number of around 300-400 IT executives. It is crucial to be able to limit any one user or group of users within the IT field from a zero-trust standpoint.

In the time aspect, the product helps users get the right tools whenever required. It saves a couple of work hours per month by letting the right IT executives know how to access the devices.

We heavily use iOS space with iPads. I advise others to decide to buy the product depending on the operating systems their environment supports. They should make sure it is the right product for their devices. 

I rate Microsoft Intune an eight out of ten.

We use Microsoft Intune to manage desktop, mobile, Apple, and Windows devices.

Before Microsoft Intune, we were unable to manage devices because everyone was working from home, even though they were still part of our group. This meant that we could not control the devices, such as installing software, deploying tools, or setting up laptops for remote users. After Microsoft Intune was implemented, we were able to manage devices remotely. We can now push policies and applications to devices from a central console. This has made it much easier to keep devices up-to-date and secure, even when employees are working from home.

Device management allows us to control devices remotely, push applications from the cloud, and use autopilot. Autopilot is the most valuable feature.

When somebody has a customized application or their own company's application, we cannot deploy that application. For that, Microsoft has to change some tools, such as the launch tools, so that we can deploy those applications as well.

I have been using Microsoft Intune for two years.

Microsoft Intune is stable.

Microsoft Intune is scalable. We have 300 end users.

The technical support is good.

Positive

We previously used TeamViewer Remote Management. However, we switched to Microsoft Intune because TeamViewer did not offer application deployment or vulnerability management. Microsoft Intune offers both of these features, as well as integration with Office 365 Defender.

Intune's initial setup is straightforward. Microsoft provided us with some documentation on how to implement the basic setup, and we went through that. There is also a lot of documentation available on the Microsoft portal. We can easily find whatever we are looking for by searching. The Microsoft support team is also very helpful.

The implementation was completed in-house.

We have seen a return on investment with Microsoft Intune.

Microsoft Intune is more expensive than other solutions, but it offers a wider range of features and control. It is definitely worth the cost for organizations that need a comprehensive mobile device management solution.

I give Microsoft Intune an eight out of ten. It solves all of the problems that we were previously logging into other products to handle. Now, we can do everything from a single console, including security, management, encryption, device vulnerability, and anything else we want to do with the device. We can even run any script.

There is no maintenance required from our end for Microsoft Intune.

To use Microsoft Intune, we must have an active domain. We can then purchase Intune directly from Microsoft or from a partner.

If I had the opportunity to choose a configuration management tool again, I would choose Microsoft Intune.

We use the solution for auto-enrollment with app EPP and application deployment with EPP.

We're currently testing the possibility of using the solution as a new MDM tool for mobile applications.

All regions and departments operate on the same model; we turn on the device, select if it's personal or corporate, and all the products and profiles are loaded onto it.

The solution hasn't improved our organization yet, as we're still in the testing phase and have yet to go into full production.

The ability to switch between Affinity and non-Affinity enrollment is great. 

The wiping features are very good. 

The capacity to create more profiles and switch between corporate and personal devices are beneficial features.

One of the main advantages of Intune is that it's a Microsoft product, so it integrates with the other MS products we use.

The solution needs to be better for managing laptops; many functions are still unavailable in this regard.

The scalability could be improved, and like most other MDM products, Intune is good but not 100% there yet.

We've been using the solution for a couple of years. 

The stability is good, and there has been a lot of progress since I last used the solution.

The solution is working well for the most part, but some improvements could be made to the scalability. 

I never had to contact technical support. 

I previously used MobileIron UEM and VMware Workspace ONE.

I wasn't involved in the initial deployment. Now that it's set up, deployment to devices requires turning the phone on, and the device will automatically pull up the profile if the client is linked to our Apple Business Manager tool. We currently have one staff member involved with the maintenance, but we're looking into distributing it to others on the same team.  

The pricing for Intune and the competitor products are all within the same range, there is no true advantage when it comes to cost. 

I evaluated MobileIron and VMware. 

I rate the solution seven out of ten. 

We have yet to reach a level where we can notice flaws or identify areas for improvement since we're still checking and have yet to run the solution through a capability list.

My advice to others evaluating Intune is that it's the best solution for mobile devices like Androids and iPhones. However, if you're rolling out physical laptops, I recommend using a second tool, as there are still many unavailable options on the Intune app for laptops.  

We use it to a small extent for approximately 1,100 devices. The biggest portion of it is used in the Aviation department, which is one of our departments. They have invested heavily in some customized software that they've developed in-house. It is put on the devices, and the devices are primarily used by field staff. It's basically a mixture of work order assignment and work order management, as well as record keeping. For example, I could have a technician who is assigned to go and do a preventive maintenance inspection on an HVAC component in one of the terminals. That request or work order is submitted to his device. When he gets there, he scans barcodes for the room he is in and for the piece of equipment that he is working on. So, they track their actual work order, work order status, workloads, and equipment life cycle, and that's all done through Intune.

It helps us in securing devices. It has eliminated a lot of paperwork. It has simplified record-keeping and maintenance of equipment, life cycle management, staff workload, work hours, et cetera. That's the biggest impact on us, and that's also where most of the devices are used.

Its security is most valuable. It gives us a way to secure devices, not only those that are steady. We do have a few tablets and other devices, and it is a way for us to secure these devices and manage them. We know they're out there and what's their status. We can manage their life cycle and verify that they're updated properly.

It doesn't economize when you scale up. We have over 14,000 employees, and we have between 7,500 and 8,000 city-owned or personal devices being used to conduct city business. Its price can be improved. It is not a cheap solution.

It has been years since it was implemented.

Its stability has been fine. We've had no issues at all.

I don't see any issues with it. We currently have only about 1,100 users and licenses for the Intune product. The largest portion or over 50% of usage is by our Aviation department for tracking and managing their work order, workload,  equipment life cycle, etc. Other users are scattered in small numbers throughout a number of departments. 

Our Parts department also uses it. One thing that's a little bit unique is that they also have these assigned to temporary workers. So, we provide the licenses for a number of temporary workers for the summer or for the winter, and then we take them back and reassign them to somebody else. 

The other departments mostly use it for educational or small use cases where they think this will be a good fit, and it is the product that is available to them. I've heard nothing bad about it, and I have no problem at all with Intune.

In terms of future growth, we're currently looking at another product, but that doesn't mean we're going to go with that other product. We're working with a vendor on another solution, and that vendor also has a mobile device management product, but we're not yet ready to go there.

I've no direct input on it. Right now, we're on unified support, but we've always had their premier support. If we ever have a problem with any of our Microsoft products, including Intune, we do have a way to reach out and get additional assistance.

I'm not aware of any other solution being used. I know there were one or possibly two failed mobile device management project implementations. I was not a member of the department then, so I don't know the details. I only know that both of the deployments failed. In other words, either the vendor promises were not met, or we found a function that was supposed to exist but did not exist. 

It was pretty straightforward. It was not a very long, complex, and involved process. It was fairly easy to set up.

It was done in-house. For its maintenance, we have no one dedicated to it. Our client computing side takes care of that.

I've never tried to quantify an ROI for the program. We have just a small number of devices. At some point, we will look at implementing large-scale mobile device management, and that'll be a different case where we may look at Intune, Workspace ONE, or another product.

It is not a cheap solution. The price for a device when you start using it at a large scale can be improved.

It is covered under our enterprise agreement. We pay once a year. I am not aware of any additional costs.

It meets the basic security needs and management needs for most organizations. It allows you to monitor the security of devices and manage those devices if they're organization-owned. It is fairly easy and straightforward to manage. It is not difficult. Some of the other solutions are a little bit more difficult.

I would rate it an eight out of 10. It meets all the basic needs that most organizations will have for device management and device security. I am not sure if it can provide the required level of security for different business scenarios that require additional security, which means you'd have to run two systems in tandem.