Forum Discussion
We want to start using Android Enterprise with MS Intune.
In my organization, we are going to renew equipment, and we were reviewing the option that the equipment we are quoting is an Android Enterprise Recommended device. We were considering the possibilit...
It really depends on what the intended use case is for your devices which will influence what management style of Android Enterprise that you use. For example, BYOD knowledge worker devices have completely different needs from a dedicated device used in a warehouse or retail store which are completely different from a dedicated single purpose kiosk. There are different flavors of Android Enterprise Management for each use case and different EMMS excel at different specialities of Android. My personal experience with Intune is that it does not handle the dedicated or "fully managed" device use case very well and leaves a lot to be desired. There are features like Remote Control that I consider critical for dedicated device management that don't come standard with Intune without additional licensing. In comparison Intune, being a part of the Microsoft ecosystem tends to handle MAM, compliance, and hooking into o365 applications fairly well, which makes it decently suited for the BYOD use case.
Intune also has traditionally been considered the cheap option given historical bundling with o365 subscriptions but over time they have moved more and more features into more and more complex and expensive licensing bundles.
https://www.microsoft.com/en-us/security/business/microsoft-intune-pricing
In summary, we can't give you a thorough answer unless you also describe the different Android Enterprise management use cases that you're looking to cover with Intune.
Thank you very much for all the feedback, mattdermody Below, I’m sharing the specific requirements from my users. The devices they will use will be provided by the company, and we want to restrict the installation of applications while having simple monitoring of these devices.
It’s important to be able to "adopt" the devices into the inventory. In case an employee leaves the company, we need a quick cleanup of the device so that it can be made available again without extensive manual configurations. Additionally, in case of loss, it should be possible to wipe the device remotely.
We also require the installation of specific applications, such as antivirus and some tools from the Microsoft suite that we use internally. Employees will primarily use their devices as a means of communication, both with clients and internally (email, Teams, etc.).
You are describing company provided, business owned devices that are relatively locked down, possibly personally enabled, but still restricted to specific applications. You're describing somewhere in between COBO and COPE from my perspective. Both of those management styles are based on the Device Owner management style which in my personal experience, Intune does not do so well in. Some of the others here my offer a different perspective based on their own experience but I can't personally recommend Intune.
