For decades, managing business devices meant running an on-premise Windows Server with Active Directory and Group Policy. Microsoft Intune changes that entirely - it is cloud-based Mobile Device Management (MDM) and Mobile Application Management (MAM) that lets Perth businesses control every laptop, phone, and tablet from a browser, without any server hardware.
What Is Microsoft Intune?
Microsoft Intune (part of the Microsoft Endpoint Manager suite) is a cloud service that manages devices and applications across your organisation. It is included with Microsoft 365 Business Premium and available as a standalone subscription.
Intune manages:
- Windows laptops and desktops - via Modern Management (Azure AD join + Intune MDM), replacing traditional domain join + Group Policy
- macOS devices - enforcing policies, deploying apps, and managing settings on Apple hardware
- iOS / iPadOS - iPhones and iPads used by staff for work
- Android - staff Android phones and tablets
What Intune Can Do for Your Perth Business
Enforce security policies on all devices
Regardless of where a device is - in the office, at home, at a client site - Intune enforces your security requirements:
- Require BitLocker encryption on Windows laptops
- Require a PIN or biometric to unlock mobile devices
- Block devices that haven't been updated recently from accessing company resources
- Enforce screen lock timeouts
- Block access to company data from jailbroken or rooted devices
Deploy software and apps automatically
Rather than manually installing software on each device, Intune pushes applications automatically:
- Deploy Microsoft 365 apps (Outlook, Teams, Word, Excel) to all new Windows laptops automatically
- Push approved apps to staff iPhones from the App Store without requiring Apple IDs
- Deploy line-of-business applications to managed Windows devices
- Remove software when a device leaves management
Zero-touch device provisioning with Autopilot
Windows Autopilot (which works with Intune) allows a new laptop to be sent directly to a staff member without IT touching it. The staff member powers it on, logs in with their Microsoft 365 credentials, and Autopilot automatically:
- Joins the device to Azure AD
- Enrols it in Intune
- Applies security policies
- Installs all required software
For Perth businesses with remote staff or multiple locations, this eliminates the need to ship devices to a central office for setup. A laptop can ship directly from a supplier to a staff member's home fully configured.
Conditional Access integration
Intune integrates with Microsoft Entra ID (formerly Azure AD) Conditional Access to enforce that only compliant, managed devices can access corporate resources:
- Block access to Microsoft 365 from personal devices that are not enrolled in Intune
- Require MFA for sign-ins from unmanaged devices
- Block access from devices that don't meet minimum security requirements (not encrypted, not patched)
This is a core component of a Zero Trust security model - verifying both the user and the device before granting access.
Remote wipe for lost or stolen devices
If a staff member loses a laptop or phone, Intune allows you to:
- Selective wipe - remove only company data and apps from a personal device, leaving personal data intact
- Full wipe - factory reset a company-owned device remotely
- Retire - remove the device from management without wiping, for staff who leave
Intune vs Traditional Active Directory
For Perth businesses evaluating whether to maintain an on-premise Active Directory server or move to a cloud-only model using Intune and Azure AD:
- Intune + Azure AD (cloud-only) suits businesses that are primarily cloud-based (Microsoft 365, SaaS applications), have remote or distributed staff, and want to eliminate on-premise server hardware
- On-premise AD + Intune hybrid suits businesses with on-premise applications that require domain join, or that have existing AD infrastructure they are not ready to migrate
- On-premise AD only is increasingly difficult to justify for new deployments, as it provides no device management outside the office network without additional tooling
Which Microsoft 365 Plans Include Intune?
- Microsoft 365 Business Premium - includes Intune. This is the plan we recommend for most Perth SMBs wanting full device management plus security features.
- Microsoft 365 Business Basic / Standard - does not include Intune. You can add it as a standalone licence ($10–15/user/month).
- Microsoft 365 E3 / E5 - includes Intune as part of the enterprise bundle.
For most Perth businesses with 5–100 staff, Microsoft 365 Business Premium at around $28/user/month is the most cost-effective way to get Intune plus all the Microsoft 365 security features (Defender, Conditional Access, Azure AD Premium).
Frequently Asked Questions
Do I need an on-site server to use Intune?
No, that's the whole point, Intune is entirely cloud-based, so you can enforce security policies, push software, and manage every laptop and phone from a browser without any on-premise server hardware.
Which Microsoft 365 plan includes Intune?
Microsoft 365 Business Premium includes Intune as standard, which is why we recommend it for most Perth SMBs wanting device management. If you're on Business Basic or Standard, you can add Intune separately for around $10-15/user/month, or get it bundled by upgrading to Premium.
What happens if a staff laptop or phone is lost or stolen?
Intune lets you remotely wipe just the company data and apps from a personal device while leaving personal photos and files untouched, or fully factory-reset a company-owned device. Either way it takes a few clicks from the Intune console rather than hoping the device is never found by the wrong person.
Can a new laptop be shipped straight to a remote staff member instead of coming into the office first?
Yes, that's what Windows Autopilot (used alongside Intune) is designed for. The staff member just powers on the laptop and signs in with their Microsoft 365 login, and it automatically joins the network, enrols in Intune, applies your security policies, and installs the required software without anyone from IT touching it first.
We deploy and manage Microsoft Intune for Perth businesses - from initial enrolment to Autopilot provisioning and Conditional Access configuration.
Microsoft 365 Services →Get Intune set up for your Perth business
Call 0433 087 091 - we'll assess your current device management setup and roll out Intune across your organisation.
Book a Free ConsultationFor related reading, see our guides to Microsoft 365 Security for Perth Businesses and Microsoft 365 Business Premium vs Standard for Perth Businesses.