Browse all topics▾
Microsoft 365 Copilot
Power Platform
Microsoft Teams
SharePoint & OneDrive
Exchange & Outlook
Microsoft Entra (Identity)
- Adding a named location without breaking Conditional Access
- App consent policies and the admin consent workflow
- Assigning licenses with group-based licensing in Entra ID
- Cleaning up over-consented app permissions
- Cleaning up unused enterprise apps in Entra ID
- Compromised Microsoft 365 account response runbook
- + 52 more →
Microsoft Defender (Security)
Microsoft Purview (Compliance)
Microsoft Intune (Devices)
Viva & Apps
Developer & APIs
Migration & Tenants
Microsoft Intune (Devices)
Endpoint management, Autopilot, app deployment, mobile, and Cloud PC. 32 guides in this topic.
Recently reviewed
- Azure Virtual Desktop explainedWhat Azure Virtual Desktop is: host pools, session hosts, multi-session Windows, FSLogix profiles, and when it beats Windows 365 or a physical desktop.
- Configuration Manager co-management with IntuneHow co-management bridges on-prem Configuration Manager and cloud Intune during the migration to cloud-native endpoint management.
- How to deploy a Win32 app with IntuneHow-toHow to deploy a Win32 app with Intune: wrap the installer into an .intunewin, set install and uninstall commands, detection rules, requirements, and assign it.
- How to register devices for Windows AutopilotHow-toHow to register devices for Windows Autopilot: OEM registration, the hardware-hash CSV route, group tags, dynamic groups, and the deployment profile assignment.
- How to remote wipe a lost device with IntuneHow-toHow to remote wipe a lost device with Intune: Wipe vs Retire vs selective wipe, triggering the action, what happens while offline, and BitLocker recovery keys.
- Intune and Android EnterpriseManaging Android devices with Intune through Android Enterprise — work profiles, fully managed, dedicated devices.
- Intune app deployment for Microsoft 365 AppsHow to deploy and manage Microsoft 365 Apps (Word, Excel, etc.) through Intune — channels, updates, and policies.
- Intune app protection policiesHow MAM-WE protects corporate data inside specific apps on personal devices — without managing the device itself.
- Intune baseline for Cloud PCsA minimum viable Intune configuration for Windows 365 Cloud PCs: enrolment, compliance, configuration profiles, Autopatch, and the differences from laptops.
- Intune compliance policies and Conditional AccessCombining Intune compliance with Conditional Access gives you device-aware access control — the heart of zero trust.
- Intune Endpoint AnalyticsEndpoint Analytics measures device performance and user experience across the Windows fleet.
- Intune Endpoint Privilege ManagementEPM lets standard users run specific tasks with elevated privileges without making them local admins.
- Intune macOS managementHow Intune manages Mac devices — enrolment via Apple Business Manager, configuration, app deployment, and compliance.
- Intune scripts and proactive remediationsHow Intune runs PowerShell scripts and proactive remediations on managed Windows devices.
- Intune vs JamfComparisonIntune vs Jamf for managing Macs: where Jamf's Apple depth still wins, where Intune's bundle price and Conditional Access integration win, and when to run both.
- Intune vs KandjiComparisonIntune vs Kandji for Apple device management: Kandji's opinionated Mac automation and Blueprints against Intune's bundled price and Microsoft 365 integration.
- Intune vs Workspace ONEComparisonIntune vs Omnissa Workspace ONE (ex-VMware): Workspace ONE's cross-platform and rugged-device depth against Intune's Microsoft 365 integration and price.
- Intune Win32 app deploymentHow to package and deploy Win32 applications via Intune — the IntuneWin format, detection rules, and dependencies.
- Intune Windows AutopilotReviewed 2026-09-06Windows Autopilot provisions new PCs straight to the end user with zero IT touch. Here's how it works.
- Microsoft 365 Apps for MacDeploying and managing Office apps on macOS — installation, updates, Intune management, and Mac-specific features.
- Microsoft 365 mobile device securitySecuring mobile access to Microsoft 365 — MAM, MDM, Conditional Access, and the BYOD vs corporate distinction.
- Microsoft Tunnel for IntuneMicrosoft Tunnel provides per-app VPN for managed mobile devices — the Intune-integrated way to access on-prem resources.
- Office Scripts in ExcelOffice Scripts is Microsoft's modern automation language for Excel — what it does, where it runs, and how it compares to VBA.
- Rebuilding Autopilot after an enrollment tenant changeHow to move Autopilot-registered devices to a different tenant: deregister from the old, re-register in the new, the OEM route, and what happens per device.
- The Intune Suite explainedReviewed 2026-09-03Intune Suite explained: Endpoint Privilege Management, Remote Help, Advanced Analytics, Enterprise App Management, Tunnel, Cloud PKI — and when it pays.
- The Office Deployment Tool deep diveHow to use the Office Deployment Tool (ODT) for granular Microsoft 365 Apps deployment.
- Troubleshooting Microsoft 365 Apps activationCommon reasons Microsoft 365 Apps fail to activate, and how to diagnose them.
- Universal Print overviewMicrosoft's cloud printing service for Microsoft 365 — what it does, how to deploy it, and the limits.
- Windows 365 explainedWhat Windows 365 is: how Cloud PCs work, the licensing tiers, how it connects to Intune and Entra ID, and when it beats AVD or a physical laptop.
- Windows 365 vs AVD: a real cost comparisonWindows 365 vs Azure Virtual Desktop cost, worked for task worker, knowledge worker, and developer patterns — with the assumptions behind the numbers.
- Windows 365 vs Azure Virtual DesktopMicrosoft's two cloud-hosted Windows products — what each is for and how to choose.
- Windows AutopatchMicrosoft's managed Windows update service — what it does, where it differs from Windows Update for Business, and when to use it.
Frequently asked
- What is Microsoft Intune?
- Intune is Microsoft's cloud-based device and application management service — MDM for Windows, macOS, iOS, Android, and Linux, and MAM (app protection policies) for Microsoft 365 apps on unmanaged devices.
- Do I need the Intune Suite?
- The Intune Suite bundles Remote Help, Endpoint Privilege Management, Advanced Analytics, Enterprise App Management, Microsoft Tunnel for MAM, and Specialty Device Management. Buy it when you need at least two of those; individual add-ons exist otherwise.
- Autopilot or the standard OOBE?
- Autopilot pre-registers a device to your tenant and turns first boot into a hands-off provisioning flow — the right answer for shipped-direct-to-user hardware and remote onboarding. On-site imaging setups can stay with Autopatch-managed standard OOBE for less rewiring.
- Do Intune app protection policies (MAM) require the device to be enrolled?
- No. App protection policies attach to the identity and the app; they enforce PIN, encryption, cut-copy-paste, and Save As controls on Microsoft 365 apps whether the device is enrolled or personal.
Looking for something else? Browse all guides.