Intune lets you manage a range of devices by enrolling them into the service. Users can then use a company portal to perform a range of operations such as enrolling their device, browsing and installing apps, making sure their device is compliant with company policies, and contacting their IT support.
Ways to manage mobile devices
Intune can manage the following device platforms:
- Apple iOS 7.1 and later
- Google Android 4.0 and later (including Samsung KNOX SDK 4.0 and higher)
- Windows Phone 8.0 and later
- Windows RT and Windows 8.1 RT
- PCs running Windows 8.1
- PCs running Windows 10 (Home, Pro, Education, and Enterprise versions)
- Mac OS X 10.9 and later
The Intune software client can manage Windows PC running Windows 7 operating system and later. Customers with Enterprise Management Suite (EMS) can also use Azure Active Directory (AAD) to register Windows 10 devices.
If you previously enrolled devices running an earlier version of iOS than the supported version, the devices will remain enrolled. Check documentation to confirm the feature supports that version of iOS.
Intune can manage users' devices, popularly known as "bring your own device" (BYOD). It can also manage company-owned devices including scenarios where the company provides a list of devices users may choose from, known as "choose your own device" (CYOD).
Enrolling devices into management
For mobile device operating systems including iOS, Android and Windows Phone, you must always enroll devices. How you enroll devices depends on your organization's needs:
|Enrollment type||BYOD||CYOD||Shared device with manager account||Shared device without a user account|
|Description||Personal device enrolled using Microsoft Intune||Corporate-owned device for single user||Corporate-owned device managed using a manager account shared by many users||Corporate-owned user-less device used by many users.|
|Device’s user||Owner||Assigned user||No user-specific account||No specific user|
|Who enrolls?||Owner||Administrator||Device Manager||Anyone|
|Who un-enrolls?||Owner or administrator||Platform||Administrator or user||Administrator or user|
|Who can reset?||Owner or administrator||Administrator||Administrator||Administrator|
For additional guidance, see choose how to enroll mobile devices.
See Mobile device management capabilities for a full list of the capabilities that enrolling devices gives you.
Ways to manage Windows PCs
Intune can manage Windows Vista and later Windows PCs using the Intune computer client. However, for Windows PCs, you can choose between enrolling them or installing the Intune PC client software which offers a few capabilities not available when you enroll devices. In most scenarios, you will enroll your Windows device with Intune which provides a greater set of capabilities than the computer client.
Consider using the Intune computer client when you want to:
- Use any of the Microsoft Intune computer client enabled capabilities to manage your Windows PCs
- Manage a Windows PC that runs an operating system that is not supported for enrollment
See Windows PC management capabilities for a full list of the capabilities that installing the Intune computer client on supported Windows PCs gives you.
Exchange ActiveSync management
You can also manage devices by using Exchange ActiveSync. This requires you to install the On-Premises Connector or use the built-in Service to Service Connector to connect to your Exchange Server.
To learn about the hardware and software requirements to install the On-Premises Connector, see Requirements for the On-Premises Connector.
To learn about using the On-Premises Connector or Service to Service Connector with Exchange, see Mobile device management with Exchange ActiveSync and Microsoft Intune.
Now you've discovered some of the capabilities you can use when you enroll your devices with Intune. Next, you'll need to enroll your devices. After you have enrolled your devices, you can take advantage of all of the capabilities you've read about in this topic.