What is our primary use case?
The main use cases are that we are using Microsoft Intune in a co-management environment. We do have SCCM also in place, but currently we are managing limited workloads shifted to Microsoft Intune, such as configuration policies, and all devices are enrolled in Microsoft Intune. The patching is still going on from the SCCM end, but we are planning to migrate the patching workload to Microsoft Intune in the near future. Application deployment is currently under plan and I'm testing some use cases. There are many add-ons Microsoft has added in the Microsoft Intune suite so that we can have multiple third-party patches. We can package applications in a quicker time as part of the plan.
How has it helped my organization?
Advanced endpoint analytics provides granular information about devices in Microsoft Intune, facilitating easier troubleshooting at system and application levels.
It is a SaaS solution. Firstly, as an internal administrator, I appreciate that we don’t have to manage the entire infrastructure, which is a significant advantage. Moreover, since this is a Microsoft product, it is designed with seamless integration in mind. While it supports various platforms like macOS, Android, and even Linux, the primary users are typically on Windows systems. The brand recognition of Microsoft adds value, and because both the operating system and the solution come from Microsoft, we face fewer challenges compared to using third-party products. With third-party solutions, integration issues may arise, requiring multiple discussions with vendors or Microsoft. Having everything from Microsoft leads to a more convenient, built-in solution. Additionally, there are numerous advantages related to patch management and setting maintenance windows.
Another noteworthy point is that Microsoft frequently introduces new features. It’s impressive that updates and service releases occur almost every month, providing useful enhancements for both the company and the overall Intune administration experience. This consistent flow of new features ultimately benefits our organization.
The introduction of Copilot is one of the latest enhancements, although it has been in public preview for quite some time. Another noteworthy advancement is the Autopilot device preparation policy. The latest version of this policy has reduced many burdens since the management is now cloud-based, eliminating the need for hardware hashes. Devices no longer need to be registered for Autopilot or have their hardware hashes uploaded in this new environment.
Additionally, there have been numerous improvements in Windows 365, including advancements in cloud PCs and provisioning policies. Microsoft has also introduced automatic device preparation policies for Windows 365. Furthermore, Intune continues to receive many enhancements. For instance, TPM support has been added, which aligns with approved concepts. Though the Copilot integration is not functioning as expected at the moment, Microsoft is still actively working on its development, as communicated to me. Lastly, I also wanted to mention the Local Administrator Password Solution (LAPS) as an important capability that is being improved.
What is most valuable?
The user experience of Microsoft Intune is excellent because it's a SaaS solution altogether. There is no need to take a burden of the infrastructure part because everything is Microsoft controlled and it's a good solution for endpoints. It's performing exceptionally at present.
Configuration profiles or policies function very well. We can accomplish a lot with the configuration profile itself, instead of opting for other packaging methods or on-prem GPO group policies. Everything can be managed through the background, but it’s all accessible within the settings catalog. The settings catalog in the configuration profile is a much better alternative than going for the administrative template and creating everything from scratch. The settings catalog is doing an excellent job in this regard.
What needs improvement?
I have been closely observing these products and regularly testing their functionality in my test environment. I provide feedback to Microsoft based on my observations. Additionally, I write blogs and conduct training sessions for my colleagues and other candidates. If I were to pinpoint an area for improvement, I would highlight reporting issues. Back in 2020, there were significant problems with report accuracy, particularly regarding web patching. However, Microsoft has made substantial improvements in the reporting for Windows Update for Business and has added various advantages.
We hope for greater flexibility and advancement. We appreciate the introduction of functionalities like Copilot, the Intune enterprise app catalog, and analytics features such as remote help, but there are concepts like hot patching that we believe could enhance the overall experience.
For how long have I used the solution?
I have been using Microsoft Intune for over seven years, starting with SCCM and then moving to the SaaS solution.
What do I think about the stability of the solution?
There have not been any significant stability and reliability issues with Microsoft Intune.
What do I think about the scalability of the solution?
Microsoft Intune definitely scales up when it comes to integration and development requirements. It is reliable with the features currently available.
Looking forward to the next 10 years, there should be substantial development available in the portal or the Microsoft Intune admin center to be more helpful for organizations. With additions such as Copilot and based on feedback from users, MVPs, and tech enthusiasts, the product continues to develop in ways that make it more useful for companies, users, and admins.
How are customer service and support?
I would rate the technical support of Microsoft a nine out of ten. While I haven't faced many issues in the enterprise environment, the overall support I received for cases raised in my personal tenant has been satisfactory. They responded and provided the expected feedback, even though it was free of cost.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We have also been using SCCM. We do have functionalities, such as the Cloud Management Gateway (CMG) in SCCM, but as technology continues to evolve, we need to gradually shift towards Intune. I believe this will be more feasible for future requirements. If we don’t make this move now, in one to two years, or perhaps within five years, it will be essential to transition at least your endpoint devices to Intune.
How was the initial setup?
We did not have any challenges because we already had SCCM in place, which is functioning effectively in our environment. It is like a parallel migration. Currently, all devices are co-managed, and since they are in a common space, we haven't encountered many complications. However, it would be beneficial if Microsoft could introduce more flexibility in this area, such as enabling the bulk enrollment of all devices at once. That would be great.
The deployment process is streamlined, requiring only a few clicks for installation, with most settings pre-configured. If an application isn't available in the enterprise app catalog, requests can be made to Microsoft for pre-packaging.
From an Intune perspective, I haven't faced much difficulty with enrollment or onboarding devices. Given that we already have a management tool in place and it’s working as expected, there’s been no disruption to business operations. Overall, I would say the process has been quite smooth.
What was our ROI?
Regarding cost effectiveness from the Microsoft Intune product, there is definite value. With an enterprise license for Windows 10 or 11, we have the capability to incorporate those features into Microsoft Intune without requiring an additional license for management. This represents a significant benefit.
What's my experience with pricing, setup cost, and licensing?
While Microsoft products can be expensive, they offer valuable functionality. With Microsoft Intune Suite license or standalone license for enterprise app catalog, there are predefined third-party apps available that are pre-packaged. The enterprise app catalog, though license-based, provides numerous third-party applications with auto-update options. Ivanti brings significant capabilities in third-party application updates and patching.
Which other solutions did I evaluate?
Comparing Microsoft Intune with products such as Jamf and Ivanti solutions, there are distinct differences. For third-party patching, Ivanti is particularly helpful.
What other advice do I have?
Copilot recently moved to general availability and Microsoft is expecting substantial user feedback. While it requires an additional security Copilot license which can be expensive for enterprise environments, it offers capabilities such as compliance checking and application installation on multiple devices with simplified query creation.
Regarding enterprise application management, the enterprise app catalog environment includes both Microsoft-owned and pre-packaged third-party applications.
It’s a feasible solution. If you already have many endpoint devices, this solution is particularly suited and is not dedicated solely to servers. If you have servers, you can leverage the existing SCCM solution and any other solutions already in place. The biggest advantage is that you can still manage your workload with co- management. You can start with the co-management scenario. Gradually, you can move your workloads and do enrollment. First, enroll the devices into Intune, and then slowly transition your workload based on the specific scenarios or test cases you've evaluated.
Since the pandemic in 2020, many devices are now mobile, and most companies are operating in a hybrid environment, with some even functioning entirely remotely. In these cases, it's challenging to bring devices, like laptops—which are essentially mobile devices—into the organization's office to connect to the internet and receive the necessary policies.
Based on my experience, I would rate Microsoft Intune a nine out of ten because many of the latest add-ons are being incorporated. However, I'm not giving it a perfect ten because there are still areas that need improvement. We are also expecting some additional features. While the current capabilities in Intune are good, we hope for greater flexibility and advancement. If these improvements and features are implemented, it could become a completely reliable solution—something close to a perfect ten—for both end users and organizations.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.