If Intune is free, then what am I paying for?

[Mike Marx]

Were you told "Intune is free?"    
In this blog, I’ll unpack what “free” really means and explore the true costs associated with Microsoft Intune.

 

What is Intune?
Let’s begin with a quick overview.  Intune is Microsoft’s cloud-based device management service that provides mobile device management (MDM), mobile application management (MAM), and manages conditional access services.  This allows secure access to company applications and data from users' mobile devices.
The primary aim of a device management platform is to facilitate compliance and consistency, as well as provide efficient provisioning of applications and policies across a wide range of user devices.  As the number of endpoint devices continues to grow, administrators are increasingly seeking cost-effective solutions to meet these goals for both corporate-owned and personal devices.

 

Intune Plans and Features 
Intune is offered in three tiers: 
•    Intune Plan 1
•    Intune Plan 2
•    Intune Suite

 

Intune Plan 1 serves as an introductory option, providing basic device and application management features primarily aimed at single-user devices.
 

Intune Plan 2 builds on the capabilities of Intune Plan 1, adding additional controls and functionality for non-Windows multi-user devices. This plan enables management of conference room devices, kiosk devices, includes a lightweight application-based VPN tunnel for iOS and Android, and enables ‘firmware over the air’ updates for supported rugged devices.
Intune Plan 1 and Intune Plan 2 offer customers premium add-on features that expand the capabilities of Intune and add to the cost of the solution.  These Premium Features include Remote Help, Endpoint Privilege Management, Advanced Analytics, Enterprise Application Management, and Cloud-based PKI (certificate) management.
 

Intune Suite encompasses all features from Plan 1 and Plan 2, along with Intune’s optional premium features.  Enterprise customers will likely gravitate toward the Intune Suite to cover essential features like privilege management, certificate management, and enterprise application management, which are common requirements for an enterprise solution.
At first glance, it seems straightforward:  Three Intune plans with distinct features and various add-ons allowing customers to tailor their Intune solution.  However, there is underlying Microsoft licensing requirements that need to be validated before assuming Intune can be utilized by everyone.
Reference: https://www.microsoft.com/en-us/security/business/microsoft-intune-pricing

 

Getting caught in a licensing Net 
Customers constantly get tangled up with Microsoft M365 and Intune pricing.  Intune licensing is often marketed as free when it’s just a pre-paid license included with an enterprise agreement.  If you aren’t interested in Intune, then you shouldn’t be paying for it as part of that enterprise agreement.  If you are interested in Intune’s device management, then any “free” glimpse of Intune’s capabilities is limited unless you pay more.
Watch out when deciding on a premium enterprise agreement to simplify and future-proof license needs.  Some customers that ‘took the bait’ were surprised that a "complete" Intune solution is not included in that premium enterprise agreement.  Instead, they received the equivalent of an $8 coupon for an introductory plan, instead of a full-featured enterprise solution.  

 

Here are a few considerations:
1.    If users are covered by an M365 enterprise agreement that includes Intune (E3, E5, EM+S E3, etc.); determine if the ‘free-paid’ Intune Plan 1 meets your needs or if you will incur additional costs for premium and add-on features.
2.    If any users are not covered by an M365 enterprise agreement that includes Intune (O365, Teams enterprise, etc.); users may inadvertently consume Intune services that require additional M365 licensing add-ons to be compliant.  (such as Entra ID P1).  This requires additional licensing costs to cover these users.
3.    If you have shared devices, kiosk devices, or conference room devices, then an Intune Plan 1 Device Licenses is required - for an additional cost.  The ‘free’ Intune Plan 1 only covers devices enrolled by a licensed user; shared devices don’t have an assigned user and require a separate device license.
4.    If you allow unenrolled (aka: registered mode) iOS and Android devices to access corporate data, then understand that the ‘free-paid’ Intune Plan 1 license doesn’t cover this scenario.   The Intune Plan 2 add-on license is necessary to provide application based vpn for these devices.

 

Be Aware 
Intune is rarely free.  The additional costs for needed premium features and add-ons add up quickly.  
Intune requires certain Microsoft cloud services to function.  M365 enterprise licenses cover these additional services.  However, customers mixing M365 and O365 licensing agreements across their employee base will need to review and possibly purchase ala-carte licenses for any unlicensed services.        

 

Omnissa Workspace ONE offers a platform that truly scales with your business.
From basic device management to comprehensive employee experience management, Workspace ONE enables companies to immediately concentrate on achieving their business goals rather than grapple with ‘free-paid’ Intune limitations.
With subscription choices ranging from enterprise solutions to just the essentials, Workspace ONE provides competitive pricing and top tier features that Intune simply can't match.   Broad platform support, comprehensive application management, and advanced security features are available right from the start.  
Empower your organization to securely deliver corporate services to any employee, while managing any device, according to your needs—without locking you into complex licensing with Workspace ONE.

https://www.omnissa.com/products/workspace-one-unified-endpoint-management/

 

References
•   https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune
•   https://www.microsoft.com/en-us/security/business/microsoft-intune-pricing
•   https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/final/en-us/microsoft-brand/documents/modern-work-plan-comparison-enterprise.pdf
•   https://learn.microsoft.com/en-us/mem/intune/protect/microsoft-tunnel-mam

Edited November 22 by Mike Marx
posting error