Microsoft Managed Desktop technologies

This topic lists the technologies and apps used in Microsoft Managed Desktop.

Microsoft 365 Enterprise licensing is required for all Microsoft Managed Desktop users. For more information on licensing requirements for the service, see Prerequisites for Microsoft Managed Desktop.

This topic summarizes the components included in the required Enterprise licenses, with a description of how the service uses each component with Microsoft Managed Desktop devices. Specific roles and responsibilities for each area are detailed throughout Microsoft Managed Desktop documentation.

Office 365 E3 or E5

Office 365 ProPlus (64-bit) These Office applications will be shipped with the device: Word, Excel, PowerPoint, Outlook, Publisher, Access, Skype for Business, OneNote.

The 64-bit full versions of Microsoft Project and Microsoft Visio are not included. However, since the installation of these applications depends on the Office 365 ProPlus installation, Microsoft Managed Desktop has created default Microsoft Intune deployments and security groups that you can then use to deploy these applications to licensed end users. For more information, see Install Microsoft Project or Microsoft Visio on Microsoft Managed Desktop devices.
OneDrive for Business Azure Active Directory Single Sign On is enabled for end users upon first sign in to OneDrive for Business.

Known Folder Redirection for "Desktop", "Document", and "Pictures" folders is included; enabled and configured by Microsoft Managed Desktop.
Store Apps Microsoft Sway and Power BI are not shipped with the device. These apps are available for download from Microsoft Store.
Win32 Applications Teams is not shipped with the device, but is packaged and provided by Microsoft for Microsoft Managed Desktop devices. Azure Information Protection Client is not shipped with the device, but you can have this packaged for deployment.
Web Applications Yammer, Office in a browser, Delve, Flow, StaffHub, PowerApps, and Planner are not shipped with the device. Users can access the web version of these applications with a browser.

Windows 10 Enterprise E3 or E5

Application Virtualization (App-V) Customers can deploy App-V packages using the Intune Win32 app management client.
Microsoft Defender Advanced Threat Protection Microsoft Managed Desktop uses this to monitor device security.

Enterprise Mobility + Security E5

Enterprise Mobility + Security E3
Azure Active Directory Premium P2
You can use all features of Enterprise Mobility + Security E3 and Azure Active Directory Premium P2 to manage MDM devices.
Microsoft Cloud App Security You can use this optional feature with Microsoft Managed Desktop.
Azure Information Protection P2 You can use this optional feature with Microsoft Managed Desktop.