You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Microsoft 365 Enterprise includes Microsoft Intune. See how Intune provides mobile device management and mobile application management for your organization. Read common scenarios, and use Intune to deploy Microsoft 365 in your environment.
6
-
author: MandiOhlinger
6
+
author: MandiOhlinger
7
7
ms.author: mandia
8
8
manager: dougeby
9
-
ms.date: 01/25/2022
9
+
ms.date: 10/10/2022
10
10
ms.topic: overview
11
11
audience: microsoft-business
12
12
ms.service: microsoft-intune
@@ -28,96 +28,63 @@ ms.collection:
28
28
- highseo
29
29
---
30
30
31
-
# Device management overview
31
+
# What does device management mean?
32
32
33
-
A key task of any Administrator is to protect and secure an organization’s resources and data on devices in their organization. This task is **device management**. Users receive and send email from personal accounts, browse websites from home and from restaurants, and install apps and games. These users are also employees and students. On their devices, they want to access work and school resources, such as email and OneNote, and access them quickly. As an administrator, your goal is to protect these resources, and provide easy access for users across their many devices, all at the same time.
33
+
**Device management** enables organizations to administer and maintain devices, including virtual machines, physical computers, mobile devices, and IoT devices. Device management is a critical component of any organization's security strategy. It helps ensure that devices are secure, up-to-date, and compliant with organizational policies, with the goal of protecting the corporate network and data from unauthorized access.
34
34
35
-
Device management enables organizations to protect and secure their resources and data, and from different devices.
35
+
As organizations support remote and hybrid workforces, it's more important than ever to have a solid device management strategy. Organizations must protect and secure their resources and data on any device.
36
36
37
-
Using a device management provider, organization can make sure that only authorized people and devices get access to proprietary information. Similarly, device users can feel at ease accessing work data from their phone, because they know their device meets their organization's security requirements. As an organization, you might ask - **What should we use to protect our resources?**
37
+
## Features and benefits
38
38
39
-
The answer is [Microsoft Intune](what-is-intune.md). Intune offers mobile device management (MDM) and mobile application management (MAM). Some key tasks of any MDM or MAM solution are to:
39
+
Device management solutions have the following features and benefits:
40
40
41
-
- Support a diverse mobile environment and manage iOS/iPadOS, Android, Windows, and macOS devices securely.
42
-
- Make sure devices and apps are compliant with your organization's security requirements.
43
-
- Create policies that help keep your organization data safe on organization-owned and personal devices.
44
-
- Use a single, unified mobile solution to enforce these policies, and help manage devices, apps, users, and groups.
45
-
- Protect your company information by helping to control the way your workforce accesses and shares its data.
41
+
- The toolset to manage devices, including the ability to deploy and update software, configure settings, enforce policies, and monitor with data and reports
42
+
- The ability to administer virtual and physical devices, including remote administration
43
+
- Maintain a network of devices running common operating systems, including Windows, macOS, iOS/iPadOS, and Android
44
+
- Automate policy management and deployment for apps, device features, security, and compliance
45
+
- Optimize device features for business use
46
+
- Provide a single point of management for devices, including the ability to manage devices from a central console
46
47
47
-
Intune is included with Microsoft Azure, Microsoft 365, and integrates with Azure Active Directory (Azure AD). Azure AD helps control who has access, and what they have access to.
48
+
With device management solutions, organizations can make sure that only authorized people and devices get access to proprietary information. Similarly, device users can feel at ease accessing work data from their phone, because they know their device meets their organization's security requirements.
48
49
49
-
## Microsoft Intune
50
+
As an organization, you might ask - **What should we use to protect our resources?**.
50
51
51
-
Many organizations, including Microsoft, use Intune to secure proprietary data that users access from their company-owned and personally owned devices. Intune includes device and app configuration policies, software update policies, and installation statuses (charts, tables, and reports). These resources help you secure and monitor data access.
52
+
## MicrosoftIntune is a world class device management solution
52
53
53
-
It's common for people to have multiple devices that use different platforms. For example, an employee might use Surface Pro for work, and an Android mobile device in their personal life. And, it's common for a person to access organizational resources, such as Microsoft Outlook and SharePoint, from these multiple devices.
54
+
Many organizations, including Microsoft, use Intune to secure proprietary data that users access from their company-owned and personally owned devices. Intune includes device and app policies, software update policies, and installation statuses (charts, tables, and reports). These resources help you secure and monitor data access.
54
55
55
56
With Intune, you can manage multiple devices per person, and the different platforms that run on each device, including iOS/iPadOS, macOS, Android, and Windows. Intune separates policies and settings by device platform. So it's easy to manage and view devices of a specific platform.
56
57
57
-
**[Common scenarios](common-scenarios.md)** is a great resource to see how Intune answers common questions when working with mobile devices. You'll find scenarios about:
58
+
For more information about Intune and its benefits, go to:
58
59
59
-
-Protecting email with on-premises Exchange
60
-
-Accessing Microsoft 365 safely and securely
61
-
-Using personal devices to access organizational resources
-[Get started with Microsoft Intune](get-started-with-intune.md)
62
63
63
-
For more information about Intune, see [What is Intune](what-is-intune.md).
64
-
65
-
## Co-management and tenant attach
64
+
### Cloud attach your on-premises Configuration Manager
66
65
67
66
Many organizations use on-premises Configuration Manager to manage devices, including desktops and servers. You can cloud-attach your on-premises Configuration Manager to Microsoft Intune. When you cloud-attach, you get the benefits of Intune and the cloud, including [conditional access](../../configmgr/comanage/quickstart-conditional-access.md), [running remote actions](../../configmgr/comanage/quickstart-remote-actions.md), [using Windows Autopilot](../../configmgr/comanage/quickstart-autopilot.md), and more.
68
67
69
-
[Microsoft Endpoint Manager](../../endpoint-manager-overview.md) is a solution platform that unifies several services. It includes [Microsoft Intune](what-is-intune.md) for cloud-based device management, and [Configuration Manager + Intune](../../configmgr/comanage/overview.md) for cloud-attach device management.
70
-
71
-
If you use Configuration Manager, and you're ready to move some tasks to the cloud, then co-management is your answer. For more information about cloud-attaching your Configuration Manager, see [What is co-management](../../configmgr/comanage/overview.md).
72
-
73
-
Endpoint Manager tenant attach is also an option. You upload your devices to the Endpoint Manager admin center, without enabling automatic enrollment for co-management or switching workloads to Intune. You can see your devices, and run actions on Configuration Manager managed devices. For more information, see [Microsoft Endpoint Manager tenant attach](../../configmgr/tenant-attach/device-sync-actions.md).
74
-
75
-
## Integration with secure-and-protect services
76
-
77
-
A key task of any device management solution is to provide security and protection. Intune does a great job of integrating with other services to achieve this task. For example:
78
-
79
-
-**Microsoft 365** is a key component to simplifying common IT tasks. In the Microsoft 365 admin center, you create users, and manage groups. You also get access to other services, such as Intune, Azure AD, and more.
68
+
For more information, go to:
80
69
81
-
For example, create an iOS/iPadOS devices group in Microsoft 365. Then, use Intune to push policies to the iOS/iPadOS devices group that focus on iOS/iPadOS features, such as access to the app store, using AirDrop, backing up to iCloud, using Apple's web filter, and more.
82
-
83
-
-**Windows Defender** includes many security features to help protect Windows client devices. For example, using Intune and Windows Defender together, you can:
84
-
85
-
- Enable [Windows Defender SmartScreen](../protect/endpoint-protection-windows-10.md) to look for suspicious activity in files and apps on mobile devices.
86
-
- Use [Microsoft Defender for Endpoint)](../protect/advanced-threat-protection.md) to help prevent security breaches on mobile devices. And, help limit the impact of a security breach by blocking a user from corporate resources.
87
-
88
-
-**Conditional Access** is a feature of Azure Active Directory, and integrates nicely with Intune. Using [Conditional Access](../protect/conditional-access.md), make sure only compliant devices are allowed access to email, SharePoint, and other apps.
70
+
-[What is co-management](../../configmgr/comanage/overview.md)
## Choose the device management solution that's right for you
91
74
92
-
There are a couple of ways to approach device management. First, you can manage different aspects of devices using the features built in to Intune. This approach is called **Mobile device management (MDM)**. Users "enroll" their devices, and use certificates to communicate with Intune. As an IT administrator, you push apps on devices, restrict devices to a specific operating system, block personal devices, and more. If a device is ever lost or stolen, you can also remove all data from the device.
75
+
There are a couple of ways to approach device management.
93
76
94
-
In the second approach, you manage apps on devices. This approach is called **Mobile application management (MAM)**. Users can use their personal devicesto access organizational resources. When opening an app, such as email or SharePoint, users can be prompted to authenticate. If a device is ever lost or stolen, you can remove all organization data from the Intune managed applications.
77
+
First, you can manage different aspects of devices using the features built in to Intune. This approach is called **mobile device management (MDM)**. Users "enroll" their devices, and use certificates to communicate with Intune. As an IT administrator, you push apps on devices, restrict devices to a specific operating system, block personal devices, and more. If a device is ever lost or stolen, you can also remove all data from the device.
95
78
96
-
You can also use a combination of [MDM and MAM](byod-technology-decisions.md) together.
79
+
In the second approach, you manage apps on devices. This approach is called **mobile application management (MAM)**. Users can use their personal devices to access organizational resources. When users open an app, such as Outlook or SharePoint, they can be prompted to authenticate. If a device is ever lost or stolen, you can remove all organization data from the Intune managed applications.
97
80
98
-
## Simplify IT tasks using the Device Management admin center
81
+
You can also use a combination of MDM and MAM together.
99
82
100
-
The [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) is a one-stop shop to manage and complete tasks for your mobile devices. This admin center includes the services used for device management, including Intune and Azure Active Directory, and to also manage client apps.
When you're ready to get started with an MDM or MAM solution, walk through the different steps to set up Intune, enroll devices, and start creating policies. The [Microsoft Intune planning guide](intune-planning-guide.md) is a good resource.
122
-
123
-
Microsoft IT case study: [Migrating mobile device management to Intune in the Azure portal](https://www.microsoft.com/itshowcase/Article/Content/1042/Migrating-mobile-device-management-to-Intune-in-the-Azure-portal)
Copy file name to clipboardExpand all lines: memdocs/intune/fundamentals/whats-new-archive.md
-2Lines changed: 0 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1983,8 +1983,6 @@ For more information about this setting, see [Move Android devices from device a
1983
1983
#### New URL for the Microsoft Endpoint Manager admin center<!-- 3704810 -->
1984
1984
To align with the announcement of Microsoft Endpoint Manager at Ignite last year, we have changed the URL for the Microsoft Endpoint Manager admin center (formerly Microsoft 365 Device Management) to [https://endpoint.microsoft.com](https://endpoint.microsoft.com). The old admin center URL ([https://devicemanagement.microsoft.com](https://devicemanagement.microsoft.com)) will continue to work, but we recommend you start accessing the Microsoft Endpoint Manager admin center using the new URL.
1985
1985
1986
-
For more information, see [Simplify IT tasks using the Microsoft Endpoint Manager admin center](what-is-device-management.md#simplify-it-tasks-using-the-device-management-admin-center).
1987
-
1988
1986
#### Change Primary User for Windows devices<!-- 3794742 -->
1989
1987
You can change the Primary User for Windows hybrid and Azure AD Joined devices. To do so, go to **Intune** > **Devices** > **All devices** > choose a device > **Properties** > **Primary User**. For more information, see [Change a device's primary user](../remote-actions/find-primary-user.md#change-a-devices-primary-user).
0 commit comments