Business Premium includes Intune. Most tenants ship with it on and nothing configured. We do the configuration: Autopilot, Conditional Access, compliance policies, and the app packaging that makes it stick.
Which M365 SKUs are in play, what's already configured, what Conditional Access policies exist (if any), what the device inventory looks like. Most tenants have surprises.
Autopilot for new Windows devices, Apple Business Manager for corporate Apple, Android Enterprise zero-touch for supported OEMs, MAM-only for BYOD phones. Sometimes all four.
Compliance policies, security baselines, app packaging, Conditional Access rules: designed together so they don't fight each other. Written down before anything is deployed.
Compliance policies on a test group first. Enrolment at 95%+ before blocking policies go live. Legacy auth blocked only after Outlook is confirmed on every phone.
Both are real options. The right one depends on where your identity layer sits and how much of the Microsoft stack you already run. Three places Intune pulls ahead.
Conditional Access, App Protection Policies, Compliance Policies, and Defender for Endpoint all evaluate the same Entra ID signal. The device state feeds Conditional Access directly. Hexnode federates with Entra ID but can't reach into the same policy graph.
Pick Intune if you already run Conditional Access and want device compliance feeding into the same decisions.
If you're on Microsoft 365 Business Premium, E3, or E5, Intune is bundled. No additional per-device charge, no separate vendor. Hexnode is a parallel subscription with its own seat count and renewal.
Pick Intune if you've already committed to a M365 SKU that includes it. Ours is local CSP, billed in ZAR.
Windows Autopilot zero-touch enrolment, the Windows configuration catalog (thousands of settings, not the lowest-common-denominator policies), and direct Defender for Endpoint integration are all native. Hexnode covers Windows; Intune dominates it.
Pick Intune if Windows is the majority of your fleet and Autopilot or Defender are on the roadmap.
If you're on Business Premium and Intune is switched on but not set up, that's the conversation to have. 60 minutes, we look at your current state, and you leave with a clear picture of what's missing and what it takes to fix it.
If you're on Business Premium and Intune is switched on but not set up, that's the conversation to have. 60 minutes, we look at your current state, and you leave with a clear picture of what's missing and what it takes to fix it.
