Microsoft 365 Business includes the following device and application management features:

  • Mobile Device Management (MDM)
  • Mobile Device Management (MDM) auto-enrollment
  • Mobile Application Management (MAM) for Office apps and LOB apps
  • Windows update management, Defender, Firewall policies
  • Data protection – selective wipe
  • Security Group (SG) targeting for policies
  • Install Office apps on enrolled Windows 10 devices
  • Windows Defender configuration
  • Deploying device profiles and security configuration
  • Enterprise State Roaming for Windows 10 with Azure AD join
  • Self-service BitLocker recovery

Microsoft’s TechNet site goes on to say: “Simplified Windows 10 device management built into Microsoft 365 Business console. Full Intune capabilities for iOS, Android, MacOS, and other cross-platform device management built into Azure console, also licensed for use with Microsoft 365 Business. Third-party apps and configuration of things like WiFi profiles, VPN certificates, and so on, can be managed in the full Intune console.”

My own iOS and MacOS devices are shown above as they’re detected by Office 365’s Intune and its respective Company Portal app.

Free one-hour consultation – scheduled at your convenience at or