Microsoft Intune

Mobile Device Management (MDM)

With Intune Mobile Device Management (MDM), you have the control to restrict access to applications such as Exchange email, based upon device enrolment and compliance policies to ensure that your sensitive data is protected. MDM frequently checks if your corporate devices are compliant and secure according to your Corporate policy, with the functionality to locate, lock and wipe devices when lost or stolen, adding an extra layer of protection to your sensitive information.

By simplifying device enrolment for large scale deployments using Apple Configurator or Intune service accounts you can deploy certificates, WiFi, VPN, and email profiles automatically, saving significant time, and IT resource. A self-service Company Portal is provided for users to enrol their own devices and install corporate applications across iOS and Android devices removing the burden on your IT department.

Mobile Application Management (MAM)

With BYOD (bring-your-own-device) now so prevalent within enterprise organisations, having the ability to manage and separate personal and corporate content is more important than ever. With Intune MAM you can ensure that your corporate information is protected without the risk of intruding on a user’s personal life.

Additional controls allow you to separate corporate data from personal data using Office mobile apps by restricting actions such as copy/cut/paste/save outside of your managed app ecosystem. With a user-friendly process, your critical applications can be protected through the use of comprehensive policies. Intune MAM also provides a Single Sign-on experience across all managed applications, in addition to a simplified user lifecycle management process.

PC Management

With Intune, your IT teams can manage Windows devices in the same way you would manage your enterprise mobile devices utilising the modern device management functionality built into the Windows 10 operating system. If your organisation is running older versions of the Windows operating system, you can manage all of your corporate PCs through the Intune Software Client utilising traditional PC management capabilities.

Through the Intune client, you can ensure that PCs on your network are always up-to-date, with control over the date and time of updates. Addition controls can be applied to Windows Firewall policy and anti-malware protection including Endpoint Protection. With remote assistance within Intune, your users can contact support teams who can provide assistance via remote desktop capabilities.

Comprehensive lifecycle management

From initial device enrolment and provisioning, to management and protection, right through to device retirement, Microsoft Intune enables organisations to manage devices used on corporate networks throughout their entire lifecycle – all through the Intune web console. End-users also can enrol their own devices, install recommend company apps and perform a selective wipe from Intune’s self-service Company Portal.

Enrol

Provide a self-service Company Portal for users to enrol devices

Deliver custom terms and conditions at enrolment

Bulk enrol devices using Apple Configurator or service account

Restrict access to Exchange email if a device is not enrolled

Provision

Deploy certificates, email, VPN, and WiFi profiles

Deploy device security policy settings

Install mandatory apps

Deploy app restriction and data protection policies

Manage, Protect

Restrict access to corporate resources if policies are violated (e.g., jailbroken device)

Protect corporate data by restricting actions such as copy, cut, paste, and save as between Intune-managed apps and personal apps

Report on device and app compliance

Retire

Revoke access to corporate resources

Perform selective wipe

Audit lost and stolen devices

Latest insights into Office 365