Microsoft Intune Plan 1 (NCE COM ANN)

As organizations support hybrid and remote workforces, they're challenged with managing the different devices that access organization resources. Employees and students need to collaborate, work from anywhere, and securely access and connect to these resources. Admins need to protect organization data, manage end user access, and support users from wherever they work.

✅ To help with these challenges and tasks, use Microsoft Intune.

Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints.

You can protect access and data on organization-owned and users personal devices. And, Intune has compliance and reporting features that support the Zero Trust security model.

With Intune, you can manage devices owned by your organization and devices owned by your end users. Microsoft Intune supports Android, Android Open Source Project (AOSP), iOS/iPadOS, Linux Ubuntu Desktop, macOS, and Windows client devices. With Intune, you can use these devices to securely access organization resources with policies you create.

✅ Simplify app management

Intune has a built-in app experience, including app deployment, updates, and removal. You can:

• Connect to and distribute apps from your private app stores.
• Enable Microsoft 365 apps, including Microsoft Teams.
• Deploy Win32 and line-of-business (LOB) apps.
• Create app protection policies that protect data within an app.
• Manage access to apps & their data.

✅ Automate policy deployment

You can create policies for apps, security, device configuration, compliance, conditional access, and more. When the policies are ready, you can deploy these policies to your user groups and device groups. To receive these policies, the devices only need internet access.

✅ Use the self-service features

Employees and students can use the Company Portal app and website to reset a PIN/password, install apps, join groups, and more. You can customize the Company Portal to help reduce support calls.

✅ Integrate with mobile threat defense

Intune integrates with Microsoft Defender for Endpoint and third party partner services. With these services, the focus is on endpoint security. You can create policies that respond to threats, do real-time risk analysis, and automate remediation.

✅ Use a web-based admin center

The Intune admin center focuses on endpoint management, including data-driven reporting. Admins can sign into the admin center from any device that has internet access.

✅ Advanced endpoint management and security

The Microsoft Intune Suite offers different features, like Remote Help, Endpoint Privilege Management, Microsoft Tunnel for MAM, and more.

Microsoft Intune integrates with other Microsoft products and services that focus on endpoint management, including:

Configuration Manager for on-premises endpoint management and Windows Server, including deploying software updates and managing data centers

You can use Intune and Configuration Manager together in a co-management scenario, use tenant attach, or use both. With these options, you get the benefits of the web-based admin center and can use other cloud-based features available in Intune.

Windows Autopilot for modern OS deployment and provisioning

With Windows Autopilot, you can provision new devices and send these devices directly to users from an OEM or device provider. For existing devices, you can reimage these devices to use Windows Autopilot and deploy the latest Windows version.

Endpoint analytics for visibility and reporting on end user experiences, including device performance and reliability

You can use Endpoint analytics to help identify policies or hardware issues that slow down devices. It also provides guidance that can help you proactively improve end user experiences and reduce help desk tickets.

Microsoft 365 for end user productivity Office apps, including Outlook, Teams, Sharepoint, OneDrive, and more

Using Intune, you can deploy Microsoft 365 apps to users and devices in your organization. You can also deploy these apps when users sign in for the first time.

Microsoft Defender for Endpoint to help enterprises prevent, detect, investigate, and respond to threats

In Intune, you can create a service-to-service connection between Intune and Microsoft Defender for Endpoint. When they're connected, you can create policies that scan files, detect threats, and report threat levels to Microsoft Defender for Endpoint. You can also create compliance policies that set an allowable level of risk. When combined with conditional access, you can block access to organization resources for devices that are noncompliant.

Windows Autopatch for automatic patching of Windows, Microsoft 365 apps for enterprise, Microsoft Edge, and Microsoft Teams

Windows Autopatch is a cloud based service. It keeps software current, gives users the latest productivity tools, minimizes on-premises infrastructure, and helps free up your IT admins to focus on other projects. Windows Autopatch uses Microsoft Intune to manage patching for Intune-enrolled devices or devices using co-management (Intune + Configuration Manager)

The Intune admin center makes it easy to connect to different partner services, including:

Managed Google Play for Android apps: When you connect to your Managed Google Play account, admins can access your organization's private store for Android apps, and deploy these apps to your devices.

Apple tokens and certificates for enrollment and apps: When they're added, your iOS/iPadOS and mac OS devices can enroll in Intune and receive policies from Intune. Admins can access your volume purchased iOS/iPad and macOS app licenses, and deploy these apps to your devices.

TeamViewer for remote assist: When you connect to your TeamViewer account, you can use TeamViewer to remotely assist devices.