Microsoft Endpoint Manager is a service from Microsoft which allows you to manage corporate employee devices, both desktop, and portable devices. We will help you plan the deployment of Microsoft Intune in your organization: develop the architecture and design, gradually connect all the devices and help in solving possible problems when working with this system.

​

• IT Partner Responsibilities

• Client Responsibilities

• Additional cost items not provided by the project

• Prerequisites

• Plan

• Success Criteria

​

Microsoft Intune is a cloud service located on Microsoft servers in Azure, it allows you to manage the devices that are used by your employees to access corporate data.

Protect the private company information, reducing the possibility of unauthorized access to it, both by company employees and third parties.
Manage applications on employee devices. Monitor the compliance of devices with the requirements for working with corporate services.
This service will allow you to design and plan your deployment and start using Microsoft Intune in your company.

​

• IT Partner responsibilities

• Identify goals and objectives for Microsoft Intune deployment

• Identify use-cases and system requirements

• Develop rollout and communication plan

• System architecture design

• Configure Intune domain, users and groups

• License assignment

• Resource profiles, configuration policies and compliance policies setup

• Conditional access policies setup

• Provide user reference material on self-setup of devices

• Force automatic enrollment for domain-joined workstations

• Post-implementation break-fix support for 1 month

​

Client responsibilities

​

• Coordinate Client resources and staff schedules

• Provide a dedicated point of contact responsible for working with IT Partner

• Coordinate any outside vendor resources and schedules

• Participate in the project discussion and provide all the information necessary to implement the solution

• Configure all network equipment such as load balancers, routers, firewalls, and switches

• Users must self-enroll their corporate mobile devices

• Users can self-enroll their own Windows PCs and mobile devices

• Review and approve engagement deliverables in a timely manner

​

Additional cost items not provided by the project

​

• Applications deployment through Microsoft Intune

• User training

• Device data protection configuration

• Thread protection configuration

• Device management after service implementation

​

Prerequisites

​

• Enterprise Mobility + Security (EMS) / Microsoft Intune subscription

• Office 365 subscription (for Office apps and app-protection-policy managed apps)

• Apple APNs Certificate (to enable iOS device platform management)

• Azure AD Connect (for directory synchronization)

• Intune On-Premises Connector for Exchange (for conditional access for Exchange On-Premises, if needed)

• Intune Certificate Connector (for SCEP certificate deployment, if needed)

• Managed device must be compliant:​