Skip to content
English - United States
Schedule Consultation
  • There are no suggestions because the search field is empty.

What Is Microsoft Intune?

Microsoft's cloud tool for managing and securing PCs, Macs and phones.

Microsoft Intune is Microsoft's cloud-based device management service. It enrolls PCs, Macs, iPhones, iPads and Android devices, applies security policies, deploys applications and settings, and can wipe company data remotely. It is included with Microsoft 365 Business Premium and is the usual answer to "how do we manage our devices" for Microsoft-centric businesses.

What Intune does

  • Enrollment. New Windows devices can be shipped straight to the user and configure themselves on first sign-in through Windows Autopilot.
  • Compliance policies. Require encryption, a PIN, current OS version and active endpoint protection. Non-compliant devices can be blocked from email and files through Conditional Access.
  • Configuration. Push Wi-Fi, VPN, email and security settings, enforce BitLocker, and lock down local admin rights.
  • App deployment. Install and update Office, browsers, line-of-business apps and security agents automatically.
  • Mobile application management. Protect work email and files on personal phones without managing the whole device. See what is mobile device management.
  • Remote actions. Locate, lock, restart, retire or wipe.

Why it matters for security

Most breaches involve a device in some way: an unencrypted laptop, an unpatched PC, a phone with company email and no passcode. Intune turns "we ask people to be careful" into enforced policy, and it produces the evidence insurers and auditors ask for.

Intune and BitLocker

Intune enforces BitLocker disk encryption on Windows devices and stores the recovery keys in Entra ID, which solves the classic problem of a locked drive and a lost key. See what is BitLocker.

Licensing

Included with Microsoft 365 Business Premium and Enterprise plans; see Business Basic vs Standard vs Premium. Available as a standalone license otherwise.

Mentis Group configures and manages Intune for clients as part of Microsoft 365 support and our Enhanced Cybersecurity mobile device management services.

Have a question about your own environment? Schedule a consultation with Mentis Group or call (866) 901-7808.