Get in touch
We are just a click or a call away – personal, direct and uncomplicated.
+49 611 711857-0
hallo@denkform.net
Zanggasse 6
65719 Hofheim am Taunus
Monday to Friday 8:30–13:30 and 14:30–17:00 (Friday until 15:30)
Microsoft Intune – Endpoint management directly from Microsoft 365
Centrally control devices, apps, and access – across Windows, macOS, iOS, Android, and Linux, based on Zero Trust principles. We plan, implement, and support your Intune environment, including seamless Apple integration.
1
All endpoints. One cloud platform.
Microsoft Intune is Microsoft's cloud-based Unified Endpoint Management platform. Windows clients, Macs, iPhones, iPads, Android devices, and Linux clients are registered, configured, and secured via a single interface – eliminating the need for separate tools for each platform.
The greatest advantage lies in integration: Intune is part of Microsoft 365 and works directly with Microsoft Entra ID, Conditional Access, and Microsoft Defender. If you use Microsoft 365 Business Premium or E3 and higher (E5, E7), you typically already have Intune licensed – a point often overlooked in practice.
We will review your existing licenses with you and build an environment that is cleanly structured from day one.
2
Zero Trust: verify first, grant access later
Intune is most effective where device management and access control work together. Every device reports its status to Entra ID – only when it meets the defined compliance rules does the user gain access to their mailbox, SharePoint, or business applications. An encrypted, up-to-date, and policy-compliant device becomes a requirement, not just a recommendation.
- Compliance Policies – automate checks for encryption, OS versions, and password rules
- Conditional Access – link access to corporate data to verified device status
- App Protection Policies – protect corporate data on personal devices without managing the device itself
- Update Rings – roll out Windows and driver updates in staged, controlled waves
- Defender Integration – incorporate risk assessments from the security platform into access decisions
- Endpoint Privilege Management – standard users work without local admin rights, while approved tasks remain possible
3
Intune in action – features at a glance
From automated initial setup to secure decommissioning, Intune covers the entire lifecycle of a device. New hardware is delivered pre-configured, and existing devices are integrated step-by-step.
- Windows Autopilot – new devices go directly to the employee, set up upon first startup
- Apple Business – automated device enrollment and app assignment via Volume Purchasing
- Android Enterprise & Zero-Touch – Work profiles for BYOD and fully managed devices for corporate hardware
- App distribution – Centrally assign, update, and remove store apps, web apps, and custom packages
- Configuration profiles – Deploy Wi-Fi, VPN, certificates, and restrictions without user interaction
- Remote Help – Secure remote support directly from the console
- Cloud PKI – Certificate management without the need for your own PKI infrastructure
- Co-management with Configuration Manager – Gradually transition existing on-premises environments to the cloud
- Advanced Analytics – Device queries and reporting across your entire fleet
4
Apple with Intune – and when Jamf is the better choice
Intune manages Macs, iPhones, and iPads reliably and is the obvious solution for many Microsoft-centric organizations. However, for more advanced Apple requirements, the platform reaches its limits sooner than an Apple-specialized solution.
We will be transparent about where those limits lie – and in mixed environments, we often deploy both tools side-by-side: Intune for Windows and access control, and Jamf for your Apple fleet, connected via Entra ID.
5
Implementation & Operations by Denkform – from start to finish
An Intune environment is quick to set up but difficult to fix if the foundation isn't right. We build it from the ground up to ensure it scales with your needs.
- 01 – Analysis & License Check: We assess your device landscape, verify the coverage of your existing Microsoft 365 licenses, and define the target state.
- 02 – Setup & Configuration: We structure groups, policies, and configuration profiles, integrate Apple Business and Android Enterprise, and set up conditional access.
- 03 – Migration & Enrollment: Existing devices are transitioned gradually, while new hardware is deployed via Autopilot and automated device enrollment.
- 04 – Training & Ongoing Operations: We train your IT team, document the environment, and provide ongoing support for updates, expansions, and day-to-day questions.
- Intune alone – makes sense for a manageable number of Apple devices and a Microsoft-centric infrastructure
- Intune + Jamf – recommended if Apple devices are business-critical or deep macOS configuration is required
- Compliance integration – Jamf reports device status to Entra ID, while conditional access remains centralized
- Apple Business – the foundation for automated enrollment in both scenarios
- An honest assessment – we recommend the solution that fits your device landscape, not the more expensive one
Many manufacturers. One procurement process.
Denkform procures, configures, and delivers hardware across all device categories.
Windows
Accessories
Display/Video
Smartphones
Tablets
Audio
Accessories
Network/Security
Display/Video
Windows
Accessories
Printers
Printers
Network/Security
Display/Video
Accessories
Windows
Network/Security
Display/Video
Display/Video
Printers
Smartphones
Display/Video
Accessories
Network/Security
Printers
Windows
Display/Video
Audio
Network/Security
Display/Video
Tablets
Accessories
Windows
Display/Video
Accessories
Audio
Accessories
Tablets
Windows
Network/Security
Display/Video
Audio
Display/Video
Smartphones
Tablets
Display/Video
Accessories
Display/Video
Printers
Frequently asked questions
Is Microsoft Intune included in our Microsoft 365 license?
In many cases, yes. Intune is included in Microsoft 365 Business Premium as well as E3 and all higher-tier plans (E5, E7). Before implementation, we will work with you to review whether your current license package covers the required functionality or if additional options would be beneficial.
Can Intune also manage Macs, iPhones, and iPads?
Yes. Intune supports macOS, iOS, and iPadOS and integrates with Apple Business Manager and Apple School Manager. For more complex Apple requirements, we recommend combining it with Jamf – we will help you determine the best approach for your specific needs.
Can we migrate from an existing on-premises management system to Intune?
Yes. Using co-management with Microsoft Configuration Manager, you can gradually transition management to the cloud without interrupting ongoing operations. We plan the sequence to ensure a rollback path is always available.
What is the difference between Intune and Jamf?
Intune is cross-platform and integrated into the Microsoft ecosystem, with strengths in Windows and access control via Entra ID. Jamf specializes exclusively in Apple, offering a broader range of features for those devices. In mixed environments, the two can be effectively combined.
How long does it take to implement Microsoft Intune?
This depends on the number of devices, locations, and your current setup. A straightforward environment can be up and running in a few weeks, while we plan complex migrations involving legacy systems in stages. You will receive a reliable timeline after our initial analysis.
