FAQs
Have Questions?
What is Microsoft Intune?
Microsoft Intune is the cloud-based unified endpoint management service in Microsoft 365 that manages Windows, Mac, iOS, and Android devices from one console. It handles device enrollment, compliance policies, application deployment, conditional access integration, and security baselines for laptops, desktops, tablets, and phones used by the business.
Is Intune included in our Microsoft 365 subscription?
Intune is included in Microsoft 365 Business Premium, Microsoft 365 E3, Microsoft 365 E5, and Enterprise Mobility + Security (EMS) plans. Microsoft 365 Business Basic and Business Standard do not include Intune. CinchOps reviews the existing licensing and recommends the right tier based on the security and management needs of the business.
What is Windows Autopilot?
Windows Autopilot is the zero-touch provisioning service in Microsoft Intune that lets new laptops arrive directly to the employee from the manufacturer and configure themselves to the business standard on first power-on. The employee signs in with business credentials and Intune applies all required policies, applications, and security settings automatically.
How does Intune handle a lost or stolen device?
For lost or stolen Intune-managed devices, the help desk can issue a remote wipe that removes business data, disable the device from accessing any Microsoft 365 service via conditional access, and revoke any active sign-in sessions. The wipe can be a selective wipe (business data only) or a full device reset depending on whether the device is personal or business-owned.
Can Intune manage personal mobile devices used for business email?
Yes. Intune supports BYOD scenarios through App Protection Policies (APP) that protect business data inside Outlook, Teams, and other Microsoft apps on personal phones without enrolling the entire device. The business data is encrypted, copy-paste to personal apps is restricted, and a selective wipe is possible without affecting personal content.
