What Intune does
Microsoft Intune is Microsoft's cloud service for managing laptops, phones and tablets. From one console you can set security rules, install apps, push updates, check that devices are compliant and, if one goes missing, lock or wipe it remotely. It covers Windows, macOS, iPhone and iPad, and Android.
Why mobile devices need managing
Phones now hold business email, Teams chats, client documents and authenticator apps. A phone left in a taxi in Douglas or on the ferry to Heysham can expose all of that if it is not protected. Under the Isle of Man's data protection law, losing an unprotected device containing personal data can count as a personal data breach. Encryption, a PIN and the ability to wipe the device are what turn that into a minor inconvenience.
Company-owned and personal devices
Company-owned devices
For devices the business owns, Intune can take full control: enforce encryption and PINs, install the apps staff need, block risky settings and wipe the whole device when someone leaves. With Apple Business Manager or Android Enterprise, new devices can be set up automatically the first time they are switched on.
Personal devices (BYOD)
Many island businesses let staff use their own phones. Intune's app protection policies secure the work apps, such as Outlook, Teams and OneDrive, without managing the whole phone. Work data can be kept out of personal apps and wiped on its own, while personal photos and messages are left untouched. This is usually the right balance between security and privacy.
Licensing
Intune is included in Microsoft 365 Business Premium and in several enterprise plans, and can also be licensed separately. If you already pay for Business Premium, you may have Intune available without extra cost.
Getting started
- Decide which devices are company-owned and which are personal, and write a short policy staff can understand.
- Set baseline rules: PIN or biometrics, encryption, minimum operating system version.
- Enrol company devices, starting with a pilot group.
- Apply app protection policies for personal devices.
- Link compliance to sign-in, so only compliant devices can reach company data.
Common questions
Can the business see personal photos or messages?
No. With app protection on a personal phone, the business only manages the work apps and their data.
What happens when someone leaves?
Company devices can be wiped and reassigned, and on personal devices the work data is removed without touching anything else.
Does Intune manage laptops as well as phones?
Yes. It is commonly used to manage Windows laptops and Windows 365 Cloud PCs too.
Set up Intune with Omega IT
We plan and roll out Intune for businesses across the island, from policy writing to enrolment. See our mobile device management service or contact us.