Microsoft Intune
Empower IT. Protect endpoints. Optimize with AI.
OVERVIEW
Endpoint protection and management for modern IT operations
Keep your organization agile and ready for growth with a simple and secure approach to endpoint management. Intune helps manage devices, reduce risk, verify compliance, and support Zero Trust across one cloud-based platform.
- Apply Zero Trust principles to continuously verify device compliance and prioritize cyberthreats with AI. Protect data by patching vulnerabilities and keeping apps current.
- Simplify endpoint management by reducing tool sprawl and unifying data across Microsoft solutions. AI automation handles routine tasks, freeing IT teams to focus on strategic priorities.
- Stay competitive in today's fast-moving market. Empower IT and security teams with AI-driven insights while adaptable device experiences minimize downtime and improve efficiency.
NOW INCLUDED
Advanced Intune solutions now in Microsoft 365 E5
Secure AI work, strengthen Zero Trust, and scale operations—with select capabilities also available in Microsoft 365 E3.
PRODUCTS
Explore Microsoft Intune products and capabilities
Safely scale IT operations, help secure data and AI use on endpoints, and drive productivity in today’s digital workplace.
Microsoft Intune Plan 1
Manage and protect cloud-connected endpoints across device platforms, apps and operating systems.
Microsoft Configuration Manager
Manage on-premises endpoints, such as Windows PCs and servers, and support co-management.
Microsoft Security Copilot in Intune
Streamline management decision making and resolution time with actionable recommendations and AI-powered guidance.
Advanced mobility management
Manage app-based VPN access controls, firmware over the air updates, and specialty devices.
Microsoft Intune Remote Help
Enable secure, cloud-based helpdesk-to-user connections.
Microsoft Intune Advanced Analytics
Optimize endpoint health visibility across your fleet with advanced device query capabilities.
Microsoft Intune Endpoint Privilege Management
Allow standard users to perform only IT-approved tasks for safe, controlled productivity.
Microsoft Intune Enterprise Application Management
Deploy and manage apps proactively, simply, and securely.
Microsoft Cloud PKI
Simplify and automate cloud certificate management.
Microsoft Intune Plan 1
Manage and protect cloud-connected endpoints across Windows, Android, macOS, iOS, and Linux operating systems.
Microsoft Configuration Manager
Manage on-premises endpoints, such as Windows PCs and servers.
Advanced mobility management
Manage app-based VPN access controls, over the air firmware updates, and specialty devices.
Microsoft Intune Remote Help
Enable secure, cloud-based helpdesk-to-user connections.
Microsoft Intune Advanced Analytics
Optimize endpoint health visibility across your fleet with advanced device query capabilities.
Microsoft Intune Plan 1
Manage and protect cloud-connected endpoints across Windows, Android, macOS, iOS, and Linux operating systems.
Microsoft Configuration Manager
Manage on-premises endpoints, such as Windows PCs and servers.
Microsoft Intune Plan 1
Manage and protect cloud-connected endpoints across Windows, Android, macOS, iOS, and Linux operating systems.
Microsoft Configuration Manager
Manage on-premises endpoints, such as Windows PCs and servers.
Plans and pricing
Discover pricing for Microsoft Intune
Unify mission-critical advanced endpoint management and security solutions.
Industry research and recognition
-
A Leader in Unified Endpoint Management
Microsoft is named a Leader in IDC MarketScape: Worldwide Unified Endpoint Management Software 2026 Vendor Assessment.1
Customer stories
What customers are saying about Microsoft Intune
Frequently asked questions
- Microsoft Intune is a cloud-based unified endpoint management solution that helps organizations manage and protect devices, apps, and access from one place. Intune helps IT reduce device risk, verify compliance, and keep apps and devices up to date across device platforms. It also reduces complexity by unifying endpoint management with Microsoft security and productivity tools.
- Unified endpoint management (UEM) is an approach to centrally manage and secure endpoints, including desktops, laptops, phones, and tablets, from one platform with consistent policies. Mobile device management (MDM) is part of UEM: it focuses on enrolling, configuring, and protecting devices, while UEM extends across endpoints, apps, and operating systems. UEM helps keep devices compliant, up to date, and ready for secure AI use.
- Yes. Microsoft Intune is a cloud-based UEM platform that helps IT manage and protect endpoints, apps, and access across platforms. It supports a Zero Trust approach by helping verify device compliance before users access company resources.
- Endpoint management is essential for managing, securing, and enabling all the devices an organization uses. By centrally managing endpoints, IT ensures each device is secure, up to date, and consistently configured – protecting data and reducing breach risk. This consistency also helps keep employees productive, enabling them to work safely from anywhere. As workplaces adopt new AI tools on devices, robust endpoint management helps govern their use and keeps these intelligent capabilities secure.
- Intune Suite unifies a set of advanced endpoint and security management solutions into a unified subscription as an add-on to plans that include Microsoft Intune P1. Intune Suite capabilities are included with Microsoft 365 E5 and E7 subscriptions, with select capabilities also included in Microsoft 365 E3.
The full solution suite remains available as an add-on for organizations with different licensing subscriptions. - Yes. For organizations that don’t subscribe to Microsoft plans that include these solutions, Endpoint Privilege Management, Enterprise Application Management, Advanced Analytics, Remote Help, Intune Plan 2 and Microsoft Cloud PKI are all available as standalone add-ons, each priced individually ). The full Intune Suite is the better value when deploying two or more modules at scale. Tunnel for MAM, FOTA, and Specialized Device Management are only available through Intune Plan 2 or the full Suite and not as standalone purchases. See plans and pricing to compare options.
- All Intune Suite add-ons are included in Microsoft 365 E5 and E7 and do not have any other prerequisites. For different plans, Microsoft Intune Plan 1 is the requirement to add on any solution as of July 1, 2026 as the base license. Plan 1 is included in Microsoft 365 E3, E5, EMS E3/E5, . An Azure account with Microsoft Entra ID (formerly Azure AD) is an implicit dependency, as Intune relies on Entra ID for identity and conditional access. See plans and pricing to compare options.
- Intune helps IT enroll devices, apply policies, deploy apps, and manage updates from the cloud. Organizations using Microsoft Configuration Manager can use co-management as they move workloads to Intune. Windows Autopilot supports zero-touch provisioning so new or reset Windows devices can be configured for employees wherever they work. Intune also supports automated enrollment and provisioning for macOS devices, helping IT deploy applications, configure settings, and secure devices at scale.
Help protect everything
Make your future more secure. Explore your security options today.
- [1]IDC MarketScape: Worldwide Unified Endpoint Management Software 2025-2026 Vendor Assessment, doc #US53003125e, December 2025.
Follow Microsoft Security