Microsoft Intune delivers mobile device management (MDM), mobile application management (MAM), and PC management from the cloud. Whether your strategy is bring your own device (BYOD), or you supply corporate-owned devices, Intune can control data and the end user experience on Apple, Android, and Microsoft mobile devices.

Intune takes a unique approach to segmenting access to corporate data. Rather than requiring users to launch a separate “container” application to access corporate applications and data, Intune creates a “managed garden” of applications that are accessible in the same manner as all of the other applications the user uses. Inside each of these applications, corporate data is encrypted and movement of that data can be restricted to only other managed applications.

Microsoft Intune is the only solution that enables you to manage the Microsoft Office mobile applications across all supported mobile platforms. Combined with Azure Active Directory Premium, you can ensure that Office 365 and SaaS applications are only accessible from a healthy, policy compliant device that is managed by Intune.

Mobile Device Management

Intune’s Mobile Device Management (MDM) allows you to ensure that devices meet a set of policy and health requirements in order to access corporate data like email as well as applications connected to Azure Active Directory.

A variety of MDM policies can be applied to iOS, Android, and Windows devices to meet your requirements.

Combined with System Center Configuration Manager (SCCM), Intune can provide a single management interface for traditional corporate owned devices as well as user supplied mobile devices.


Managing the device is only part of the battle when it comes to protecting corporate data. Intune’s Mobile Application Management (MAM) capabilities enable you to control what end users can do with corporate data inside of managed applications.

With MAM, you can allow your end users to work with sensitive attachments that they receive via the Outlook App and transfer that data to other managed apps like Word or PowerPoint.

MAM will block the end user from saving the attachment to an unmanaged location like Box or Google Drive and also make sure data can’t be copied and pasted in to an unmanaged app or email account.


Intune is an ideal solution for managing client computers that are either not domain joined or are rarely on the corporate network.

Intune can be used to perform common client management functions on these computers such as software and hardware inventory, update management, and application distribution.

Since Intune is hosted entirely in the cloud, computers must only have a periodic Internet connection to be managed by Intune.