Microsoft Intune

More about Microsoft Intune and MDM

What is MDM?

MDM stands for Mobile Device Management. It is a technology and set of tools used by businesses of various sizes to manage the setup, security, usage policy, and ongoing maintenance and deployment of mobile devices. We recommend and specialise in the implementation of Microsoft Intune – a leading player when it comes to MDM systems.

What is Microsoft Intune?

Microsoft Intune is a cloud-based service that enables businesses to manage and secure their employees' devices, including PCs, laptops, tablets, and mobile phones. Integrated with Microsoft Endpoint Manager, Intune provides comprehensive device management capabilities, allowing administrators to control access to corporate resources, enforce security policies, deploy applications, and ensure compliance across various platforms and operating systems.

Key features of Microsoft Intune

Microsoft Intune is a leading cloud-based Unified Endpoint Management (UEM) service which goes beyond some simpler MDMs. It is a tool that helps businesses to manage and secure various devices their employees use for work. A breakdown of its core features include:

• Mobile Device Management (MDM): Provides full control over company-owned devices, allowing IT to remotely manage settings, applications, and security features.
• Mobile Application Management (MAM): Focuses on securing corporate data on employee-owned devices. This enables access to work apps and information without needing full device enrolment.
• Conditional Access: An extra layer of security that ensures access to company resources is only granted from devices meeting specific compliance standards.

Custom implementations and solutions

Our team are highly experienced in the setup and management of Microsoft Intune.  We adapt each install to match your unique business requirements and can alter these over time as and when required. Some features and benefits, that we have previously implemented and can do so for your business, include:

• • Enrolling work-owned Windows, Apple, and Android devices as well as those which fall under ‘Bring Your Own Device’ (BYOD). The devices can even be enrolled straight out of the box with Apple Business Manager, Windows Auto-Pilot and Android Zero-Touch.
• • Enforcing a layer of security that is automatically shown when users try to connect their mobile device to work resources such as Microsoft Outlook. This will trigger the device to be managed and therefore require certain requirements to be met before the device can access the work resources. This can include policies that enforce a strong PIN be used, the device is encrypted, the device is not used outside of the UK, and much more.
• • Setting up compliance policies so that devices can be prevented from accessing company resources if certain criteria are not met.  For example, a device could be prevented from accessing Microsoft 365 services if antivirus software is not installed and active and BitLocker encryption is not enabled.
• • Deploying work applications across multiple devices simultaneously. For completely work owned devices we can ensure that no unauthorised apps can be installed.
• • Setting up configuration profiles so that certain settings are configured on devices automatically.  For example, Microsoft Edge could be configured in Windows to always sync with the user’s work profile so that favourites and browsing history sync between the user’s devices.

MDM is particularly salient for businesses that have a BYOD policy in place. Through implementing Microsoft Intune with the help of D8A IT Services, you can ensure that all devices accessing work applications and files are meeting the desired requirements.