What is our primary use case?
Microsoft Intune has several use cases, such as managing app protection. For example, when managing WhatsApp, if your company doesn't want anything to be copied from WhatsApp to your browser, such as Outlook or Microsoft Teams due to security concerns, we create app protection policies. Users cannot copy data from Microsoft Teams or Outlook to WhatsApp but can copy from WhatsApp to those platforms if required. This type of policy is created according to the organization's requirements.
How has it helped my organization?
Microsoft Intune brings all of my endpoint and security management tools into one place because endpoint management is very vast. When talking about endpoints, it is a part of core security. If any malicious activity occurs on a device, I understand the concept but I'm not managing it directly. I know through the security portal at security.microsoft.com how things are managed.
Having all of these endpoint and security management tools in one place affects my IT and security operations overall because we have segregated this process. For Microsoft Intune, we made policies for different devices, whether BYOD or corporate. We create conditional policies based on group needs. For example, if someone joins with a personal device, we make a different policy than for corporate devices.
When assessing Microsoft Intune for secured hybrid work and protecting data on company and Bring Your Own Devices, I find that the best approach is group policies. We implement conditions for personal users who can only read specific things without admin roles. Conditional access policies apply to those devices while we allow exceptions for VIPs such as CEOs. We also frequently audit logs and have alerts for risky users according to Microsoft algorithms, blocking login attempts if there's an unusual region change.
Endpoint Privilege Management enables me to enforce least privilege access, which affects user productivity in my organization. We are not specifically monitoring user productivity through Microsoft Intune. We use different tools such as Sapiens for monitoring laptop productivity, but for certain corporate VIP users, we create different policies ensuring more security.
Least privilege access affects my organization's attack surface because we always implement multi-factor authentication, which is currently required. With Microsoft set to depreciate SMS and voice MFA soon, only Microsoft Authenticator or passkey authentication will be supported. We make compliance conditions in Microsoft Intune based on device versions and have enabled a sign-in frequency to enhance security by logging users out after inactivity.
The key benefits that Microsoft Intune brings to my organization include protecting all devices to avoid vulnerabilities and ensuring user safety.
What is most valuable?
The best features in Microsoft Intune from my perspective include the ability to customize things according to requirements. I really appreciate the customization options available. Additionally, Microsoft Intune is connected with Microsoft Entra ID and all the security parts, making it very effective.
I am using Microsoft Intune's Endpoint Privilege Management feature.
I am using the Enterprise Application Management features of Microsoft Intune Suite, including App Registration. We have configured around 600 Enterprise Applications, enabling SSO that facilitates user access across various applications.
Regarding Advanced Endpoint Analytics in Microsoft Intune, we have it available, but I have not recently tried it.
I use Microsoft Intune Suite Cloud PKI for certificates. We utilize PKI certificates for a few vendors but not extensively.
Regarding PKI's role in managing complexity, it is very important for certificate-based security. Though a bit tricky, once you enable connections through Microsoft Intune, it becomes easier to monitor.
I am using Copilot in Microsoft Intune, as well as Copilot Studio and everything related to Cloud AI.
I use Copilot in Microsoft Intune primarily to analyze device compliance and user activity. By enabling Copilot licenses, I can gain insights into non-compliant devices and risky devices from the admin portal.
Assessing Copilot for helping protect the environment, it provides ease of admin tasks. When I face errors in Microsoft Intune, Copilot assists in troubleshooting quickly.
What needs improvement?
While I appreciate Microsoft Intune overall, I would like to see improvements in Microsoft support, which I find lacking.
Regarding missing features in Microsoft Intune, I don't see any at this time since Microsoft is continuously updating it.
For how long have I used the solution?
I have been working with Microsoft Intune for approximately 10 years.
I manage all the Intune means such as mobile, MAM, and all the policies I'm making according to company requirements. My role is very vast. I manage all complete M365 features, whatever available, including Microsoft Intune, Entra, security, and even SharePoint.
What do I think about the stability of the solution?
My thoughts on the reliability and stability of Microsoft Intune indicate that performance is good, with no issues.
What do I think about the scalability of the solution?
When it comes to scalability, I find Microsoft Intune to be very good, with no problems.
How are customer service and support?
On a scale of one to ten, I rate Microsoft's technical support as a two.
Which solution did I use previously and why did I switch?
I have experience working with Microsoft Azure Active Directory, Microsoft Teams, Microsoft Exchange Online, as well as some knowledge of Lotus Notes and Proofpoint.
How was the initial setup?
I find the initial setup process with Microsoft Intune to be straightforward and not overly complex, provided you make a solid plan.
What was our ROI?
Microsoft Intune is cost-effective, particularly since it bundles services such as email. I would rate its return on investment around 6.5 or 7.
What's my experience with pricing, setup cost, and licensing?
Regarding thoughts on pricing, setup costs, and licensing for Microsoft Intune, it varies based on organization size and needs. Business Premium and Business Standard are available, and I find the costs to be reasonable.
What other advice do I have?
Based on my rich experience with Microsoft Intune, I believe it is perfect and doesn't present problems for those looking to implement it.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.