Intune Mobile Device Management
Microsoft’s MDM solution is called Intune, and it’s a cloud-based service that can manage the 3-main phone/tablet types, iPhone, Android, and Windows. It can also manage Windows and Mac devices like laptops and desktops that are inside or outside the corporate network.
Microsoft made a pretty bold decision a few years ago when instead of running something like System Center Configuration Manager in the cloud and calling it and MDM solution, they wrote a cloud-based MDM solution from scratch.
The result is an MDM solution that is enterprise grade, and capable of meeting most corporate mobility control requests. Intune can be deployed as a cloud only service or as a hybrid service connecting to System Center Configuration Manager.
It’s very important that Intune (and these Azure based tools) are deployed under the same Azure tenant so that we can integrate authentication from Azure AD and the health of devices can count towards a device health attestation.