Understanding Microsoft Intune Enterprise Application Management: Available Plans and Activation Guide

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). It enables organizations to manage the devices and applications their employees use to access company data. Intune is part of Microsoft's Enterprise Mobility + Security (EMS) suite and integrates with Azure Active Directory (Azure AD) for identity management and with Microsoft 365 for productivity tools.

Enterprise Application Management within Intune refers to the management of enterprise applications across a range of devices. This includes:

• Application Deployment: Distributing and managing apps across devices, whether they're company-owned or BYOD (Bring Your Own Device).

• Application Configuration: Ensuring that applications are set up according to company policies and securely configured.

• Application Protection: Protecting corporate data within applications using Intune's Mobile Application Management (MAM) policies.

• Application Inventory: Keeping track of which applications are installed on which devices.

• Conditional Access: Controlling which apps and devices can access company resources based on compliance policies.

  
  

Availability in Intune Plans

Microsoft Intune's Enterprise Application Management features are available as part of several licensing options, typically including:

• Microsoft Intune Plan (standalone)

• Microsoft 365 E3/E5

• Enterprise Mobility + Security (EMS) E3/E5

The exact features available may vary slightly depending on the plan. The broader the plan, the more advanced features are typically included.

How to Activate Enterprise Application Management

Activating Enterprise Application Management in Intune involves a few steps:

1. Subscribe to Intune or a Relevant Microsoft Plan:

   • Ensure your organization has a subscription to Microsoft Intune, or one of the bundles that include it, like Microsoft 365 E3/E5 or EMS E3/E5.

2. Access the Intune Portal:

   • Log in to the Microsoft Endpoint Manager admin center here. This is where Intune management is conducted.

3. Set Up Application Management:

   • Deploy Applications: Use the Intune console to deploy applications by uploading the app package or pointing to the app in the store (e.g., Microsoft Store, Google Play).

   • Configure Applications: Create and assign configuration policies to ensure apps are set up according to company policies.

   • Apply Protection Policies: Set up MAM policies to protect corporate data within applications. This can include policies for data encryption, preventing data backup, or restricting cut, copy, and paste functions between corporate and personal apps.

   • Monitor and Manage Applications: Use Intune’s reporting tools to monitor the deployment status, update apps, and manage application inventories.

4. Implement Conditional Access (Optional but Recommended):

   • Define and enforce access policies to ensure only compliant and managed applications can access corporate data.

     
     

This setup ensures that all corporate applications are deployed, configured, and protected according to your organization’s policies across all devices in your environment.

4o