We compared Microsoft Intune and Microsoft Entra ID based on our user's reviews in several parameters.
Microsoft Intune and Microsoft Entra ID both offer valuable features such as efficient device management and seamless authentication processes. Intune focuses on security measures and integration with enterprise systems, while Entra ID emphasizes user-friendly interfaces and platform integration. Users praise Intune for its prompt customer service and cost-effectiveness, while Entra ID users appreciate its affordability and efficiency. However, Intune users suggest improvements in user interface and performance, while Entra ID users seek enhancements in UI design and customization options.
Features: Microsoft Intune and Microsoft Entra ID have different valuable features. Intune offers data wipe and device reset, integration with enterprise systems, and control over user access. Entra ID focuses on user-friendly interface, efficient authentication, and seamless integration with platforms.
Pricing and ROI: The setup cost for Microsoft Intune is praised for its reasonable pricing and cost-effectiveness. Users find the licensing options to be flexible and accommodating. On the other hand, users have expressed a positive sentiment towards Microsoft Entra ID's pricing, setup cost, and licensing. They appreciate the affordability, competitive pricing, and user-friendly setup process. The licensing options are also seen as flexible and suitable for various needs and budgets., The ROI from Microsoft Intune demonstrated effective cost management, increased productivity, secure device management, streamlined workflows, seamless integration, time savings, enhanced user experience, and improved security measures. On the other hand, Microsoft Entra ID offers significant cost savings, improved efficiency, streamlined business processes, and increased productivity.
Room for Improvement: Microsoft Intune could improve its user interface, speed, customization options, and troubleshooting features. On the other hand, Microsoft Entra ID needs enhancements in its user interface, optimization for different devices, usability, sign-up process, customization options, and security features.
Deployment and customer support: The users' reviews for Microsoft Intune indicate that the duration to establish the tech solution can vary, with some users reporting separate phases of deployment and setup, while others consider both terms to refer to the same period. On the other hand, Microsoft Entra ID user reviews also show variability in the duration required, with some users reporting distinct deployment and setup phases, and others considering them as one., The customer service provided by Microsoft Intune is highly praised for its prompt assistance and knowledgeable support staff. Customers value feeling supported throughout their interactions. In comparison, Microsoft Entra ID's customer service is highlighted for its exceptional efficiency, reliability, and helpfulness. The support team is praised for their friendliness, professionalism, and effective communication, ensuring seamless problem resolution.
The summary above is based on 193 interviews we conducted recently with Microsoft Intune and Microsoft Entra ID users. To access the review's full transcripts, download our report.
"The most valuable feature is the conditional access policies. This gives us the ability to restrict who can access which applications or the portal in specific ways."
"Overall the solution functions very well, such as the ability to access it from the cloud."
"Using [Azure AD's] passwordless technology, you're not even using a password anymore. You're basically just creating a logon request without actually sending or typing or storing the password. This is awesome for any user, regardless of whether you're a factory worker or a CFO. It's secure and super-simple."
"Azure Active Directory features have helped improve our security posture. The remote working has been a massive help during the pandemic."
"The most valuable feature is Identity and Access Management. As an IT administrator, this feature allows me to manage access for users and groups."
"The most valuable feature is its ability to act as an identity provider for other cloud-based, SaaS applications. In our bank, this is the main identity provider for such features."
"The ability to speed up ability is an asset."
"It's very easy to run and it's part of their ecosystem and I don't think it's going anywhere anytime soon."
"The most valuable feature of Intune is the central dashboard for compliance and policy management."
"There has been a noticeable increase in productivity for both my organization and clients."
"For our office workers who are not based in Norway, when we order the PC, we can do some of the settings for them. These are standardized settings. We can set them up exactly as they are in Norway so that they're the same."
"I like the tool's integration with Apple. Anyone who creates an ID in Intune will get an Apple ID."
"We can securely manage both company-owned devices and personal devices enrolled in our BYOD program."
"It's very informative when there is an error. It allows us to backtrace where the error is and resolve that ourselves. It's a bit of a Swiss Army penknife. We find that it fixes most issues."
"The device profiling which uses the official Outlook email enabled us to control the screenshot feature and prevent copying outside of the organization's application."
"The most valuable feature is the UEM capabilities."
"I believe it can also be integrated into other Microsoft products, as well as more integrations with other solutions."
"Microsoft Authenticator is as easy as Google Authenticator, but it is not open to all types of applications. Google Authenticator is integrated with other third-party platforms and applications, whereas Microsoft Authenticator is not. It should have more integration with third-party platforms and applications."
"Customers should be informed that public review features are not intended for production use."
"Its integration with open-source applications can be improved. I know that they are working on open-source authentication methods for integration with open-source applications, but they can make it more open."
"The solution could be cheaper."
"For the end users, it can be confusing if they have worked for another company that had the Authenticator app. It is tricky if they have already had the Authenticator app and then work somewhere else. If they have to download it again and use it again on their phone, it is something that gets complicated. I know how to get through it. They just need to uninstall and reinstall the application, but for them, sometimes, it is confusing."
"They can combine conditional access for user actions and application filtering. Currently, they are separated, and we cannot mix the two. I do not know how it would be possible, but it would be interesting."
"The scalability of the solution is good."
"The synchronization could be improved."
"The backend of Microsoft Intune needs to be improved. We have seen a little bit of delay as compared to other MDM solutions. That needs to be improved. A little bit more granularity should also be added"
"The installation could be improved to be simplified."
"I would like to see easier pushdowns. Currently, we have to package our own software and then push it. Intune can make that way easier and integrate applications, such as Zoom and Adobe Acrobat, that are used by a lot of enterprise or corporate organizations."
"It needs certificate provisioning for S/MIME purposes."
"I wanted to check if there is any provision at the Intune level to restrict certain things, such as a website, but unfortunately, that feature is available only in Microsoft Defender. Intune has web filtering capabilities, but they are only useful for protection from malicious websites, whereas we would like to be able to restrict a website. For example, YouTube is a clean website. No one would identify it as a malicious website, but if we want to stop the end-users from going to that website, we have to go for another product, such as Microsoft Defender or another third-party proxy solution. It would be great if this capability is included in Intune."
"Microsoft Intune could improve by being more user-friendly and having it geared toward device management. The graphic interface is not very good."
"Intune has some limitations when it comes to application updates for third-party applications. You can schedule an update, but when it's a package setup, you need to supercede and replace it each time."
Microsoft Entra ID is ranked 4th in Microsoft Security Suite with 190 reviews while Microsoft Intune is ranked 3rd in Microsoft Security Suite with 164 reviews. Microsoft Entra ID is rated 8.6, while Microsoft Intune is rated 8.0. The top reviewer of Microsoft Entra ID writes "Allows users to authenticate from home and has excellent integrations in a simple, stable solution". On the other hand, the top reviewer of Microsoft Intune writes "We can manage all aspects of our devices from a single console, easy to scale, and quick to deploy". Microsoft Entra ID is most compared with Google Cloud Identity, CyberArk Privileged Access Manager, Cisco Duo, Yubico YubiKey and Okta Workforce Identity, whereas Microsoft Intune is most compared with Jamf Pro, VMware Workspace ONE, ManageEngine Endpoint Central, SOTI MobiControl and IBM MaaS360. See our Microsoft Entra ID vs. Microsoft Intune report.
See our list of best Microsoft Security Suite vendors.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
In recent years Microsoft has really upped its game with Defender and Intune. As core cyber-security for an SME, keeping just to Microsoft is now a real option. The challenge is understanding the gaps / cyber security service weaknesses (if they exist) in comparison with other vendors such as ESET, Malwarebytes, Trend Micro, etc.
Azure AD Services, Defender for Endpoint, and Intune are all Microsoft products, but it is important to understand how each product works as they may not be compatible and there may be some limitations.
Devices managed through Intune may not have all of the Defender for Endpoint features. Some advanced features such as automated investigation and remediation may only be available for devices that are enrolled in Defender for Endpoint standalone.
In addition, Azure AD and Intune have different requirements for device enrollment and management. Intune requires devices to be enrolled and managed through an MDM solution, while Azure AD provides basic device management capabilities but may not support all of the features available in Intune.
Lastly, there may be limitations to how user identities and access are managed between Azure AD and Intune. Some features that are available in Azure AD, such as conditional access policies, may not suit Intune, and additional configuration may be required to ensure that user identities and access are properly managed across both services.
If anyone out there has other experiences, please let me know!
It depends on your company's infrastructure. Check with your cyber team whether you can sync your endpoints to Cloud using Azure AD as Azure Registered/ Azure Hybrid AD join/ Azure AD join, etc.
1. So, if the ask is only to enroll them in Intune to leverage defender/BitLocker services - go directly to Azure AD's join approach.
2. If you still want to manage patch management/mcm BitLocker but Defender via cloud, the approach should be Azure Hybrid AD join.
3. You can still use autopilot using both of these approaches.
I believe it is a good first step, and I would say even a requirement, but in no way is it a comprehensive security solution, even for endpoints.
There are many things that need to be addressed for security. In addition to this, there is XDR, MDR, more comprehensive AV for endpoints & Servers that stop attacks, Threat Hunting, Mitigation, PEN Testing, Security Training for end users, Multi-Factor Authentication (Microsoft's MFA is good but only for Microsoft products), Patch Management for Endpoints, Servers and Cloud Workloads, Network Access Control, Firewalls for On-Premise and Cloud server workloads, Network Segmentation, Password Management, Data Backups (3-2-1-1 Rule) with Immutable Backups, Power Backups, Physical Security, Monitoring, NOC/SOC services, and working towards a Zero Trust architecture...
But there are no single-point solutions that will make you secure, so don't get complacent. And you can outspend your profits if you do everything. Just remember it's best to have a layered approach that works together and looks at everything from a security perspective and how it integrates with your overall security plans and objectives to help identify holes and possible mitigations.
Healthcare must do Risk Assessments by law, but I recommend that all companies of all sizes do at least annual risk assessments since there is so such thing as being too small or inconspicuous to be hit with malware or have a cyber security attack since much of the delivery is automated and not just by the script-kiddies of years gone by... Nation States are actively engaging in cyber warfare daily, along with terrorists, and opportunists looking to make big money from you...