What Intune actually is (and isn't)

Intune is Microsoft's mobile device management (MDM) and mobile application management (MAM) service. In one sentence: it's how you tell laptops and phones what to do, and prove they did it, without touching them.

What it actually does

• Enrolls devices into your tenant so you can see and manage them.
• Pushes configuration — Wi-Fi, VPN, certificates, security baselines.
• Pushes apps — required, available, or store-based.
• Reports compliance — Conditional Access uses this to allow or block sign-in.

What it isn't

Intune is not antivirus, not patch management for everything (Autopatch is its own product), and not a remote-desktop tool. It also doesn't replace Group Policy by itself — it replaces the need for Group Policy if you commit to cloud management.

Where it lives

Sign in to intune.microsoft.com with a Global Admin or Intune Admin role. The admin center is where everything happens.