InTune licensing query

[Quatermass]

Two very basic and related questions (doh!)

 

1. Is any level of InTune included free in an OVS-ES agreement? Yet to find a definitive answer in the Microsoft labyrinth...

 

2. Does one need InTune licensing to use any of its features? We're looking at MAM (e.g. OneDrive mobile policy) rather than full MDM, and noticed that we can create a policy in the Azure portal but don't seem to be able to apply it to anyone. Is that simply because we're not licensed?

[KentishCS]

Quatermass from my understanding as i am using InTune

 

1. i believe you need to purchase the EM and then can chose to bolt on S but its not particularly.

 

2. From my understanding you would need devices added to InTune to deploy the MAM policy

[foofighterjim]

2. Does one need InTune licensing to use any of its features? We're looking at MAM (e.g. OneDrive mobile policy) rather than full MDM, and noticed that we can create a policy in the Azure portal but don't seem to be able to apply it to anyone. Is that simply because we're not licensed?

 

To directly answer your question the users must have an InTune Licence, you can get a 30 day trial by going into the O365 Admin portal and adding as a subscription whilst you are testing. We are also stuck mid term on an OVS-ES agreement so are evaluating if we want to purchase InTune over the top. I have actually spent most of this morning working on this, most of my work has been based on these:

 

https://docs.microsoft.com/en-gb/intune/app-protection-policy

https://docs.microsoft.com/en-gb/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip

 

Long story short; if you want to just do content protection such as stopping uses from copying data from the Outlook app then Android and iOS devices do not need to be enrolled, Windows 10 devices do need to be enrolled in my testing so far (although I could have my settings wrong).

[Quatermass]

Thanks, for now I think we'll have to just go for the very basic built-in O365 MDM (requires device password, selective wipe available) coupled with raising staff awareness of the potential DP issues.

 

We'll go for the more granular/fully-featured InTune when (if ever) funds allow.