Choose between Microsoft Intune standalone and hybrid MDM with Configuration Manager

Applies to: System Center Configuration Manager (Current Branch)

One of the most commonly asked questions regarding mobile device management (MDM) with Microsoft Intune is "Should I integrate Intune with Configuration Manager (hybrid MDM) or run Intune standalone in the cloud only configuration?"

Intune on Azure is Microsoft's recommended MDM solution.


As of August 14, 2018, hybrid mobile device management is a deprecated feature. For more information, see What is hybrid MDM.

Intune standalone

Intune standalone is Microsoft’s recommended deployment topology. Intune standalone is a cloud-only MDM solution that you manage using a web console accessed from anywhere in the world. Intune data centers are hosted in North America, Europe, and Asia. Because Intune is a cloud service, you can quickly deploy Intune management to your devices.

Customers generally find it faster and easier to deploy the standalone topology because there's no dependency for on-premise components. Intune standalone is now on the Microsoft Azure cloud platform and provides many advanced features, such as:

  • Integrated enterprise mobility management platform: An integrated cloud platform and admin experience in Azure portal for Intune, Azure AD Premium, and Azure Information Protection

  • Mobile device management: Rich mobile device management and information protection capabilities

  • Scale: Deploy and manage mobile devices without worrying about scale

  • Role-based access control: Restrict access to administrative functions based on assigned roles and scopes

  • Programmatic access (API): Microsoft Graph API support, and SDK and PowerShell management options

  • Web console: An HTML 5-based console built on web standards with support for most modern web browsers

  • Advanced reporting: Ability to create customized reports

  • Agility: Simple setup and rapid delivery of new capabilities

Hybrid MDM with Configuration Manager


As of August 14, 2018, hybrid mobile device management is a deprecated feature. For more information, see What is hybrid MDM.

Hybrid MDM is a solution that integrates Intune's mobile device management capabilities into Configuration Manager. It uses Intune as the delivery channel for policies, profiles, and applications to devices but uses Configuration Manager on-premises infrastructure to administer content and manage the devices. A hybrid implementation gives you "single pane of glass" control. This means you can use the same on-premises infrastructure and administrative console to manage mobile devices with Intune as well as PCs and servers with the traditional Configuration Manager client.

You may choose hybrid MDM for the following reasons:

  • You want to manage both mobile devices enrolled in Intune and devices managed with the Configuration Manager client from the same administrative console

  • Your infrastructure requires that you have multiple NDES servers for certificate delivery to mobile devices

  • Your infrastructure requires that you have multiple Exchange connectors

  • You require S/MIME encryption support


If you set up hybrid MDM in Configuration Manager for conditional access with on-premises Exchange, users can still access email in Outlook for iOS and Android. This same configuration with Intune standalone blocks email for these clients.

Change the MDM authority

If you need to change the MDM authority setting, you can change it yourself without having to contact Microsoft Support, and without having to unenroll and reenroll your existing managed devices. For details, see Change your MDM authority.