Azure Active Directory and Intune - IT Hotdesk (2024)

FAQs

What is the difference between Intune and Azure Active Directory? ›

Intune helps control the applications installed on mobile devices and can remotely delete the data from your lost devices. However, Azure can manage storage, database, virtual machines, and networking. Azure can control devices in hybrid mode, while Intune uses the same platform to manage devices.

Benefits of Integrating Intune with Azure Active Directory

The integration allows for leveraging Azure AD security features and protecting sensitive data during remote access. Centralized management: The integration enables administrators to manage devices and user identities from a single console.

Re: Device management without Azure AD credentials in intune

You can use that to enroll the devices into your tenant and Entra ID. But if you only use local accounts for the users, it will only do device configuration things and not user things... Tracking users won't be possible with local users...

Azure AD offers features and integrations for cloud-based environments, while AD manages traditional on-premises infrastructure and applications. Azure AD provides scalability and flexibility in the cloud, while AD is limited by the capacity of on-premises hardware.

Azure Virtual Desktop is a desktop and app virtualization service that runs on Microsoft Azure. It lets end users connect securely to a full desktop from any device. With Microsoft Intune, you can secure and manage your Azure Virtual Desktop VMs with policy and apps at scale, after they're enrolled.

The Azure AD ID field refers to the object ID, while the Intune ID field is the Intune device ID. Note that Intune never directly references the Azure AD device object. Any modifications in the Endpoint Manager admin center are replicated from Intune managedDevice to the Azure AD device object.

Sign in to the Azure portal, and select Azure Active Directory > Mobility (MDM and MAM) > Microsoft Intune. Configure MDM User scope. Specify which users' devices should be managed by Microsoft Intune. These Windows 10/11 devices can automatically enroll for management with Microsoft Intune.

Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints.

Not Quite Yet! Microsoft announced several enhancements to Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS) that are included in the preview for the next version of Windows Server (Windows Server 2025).

Does Azure AD replace Active Directory? ›

Simply, no. Azure AD cannot fully replace Active Directory. The cloud-specific Azure AD can work for organizations with zero on-premises infrastructure, but not without losing security. Running solely on Azure AD also includes numerous extra steps.

Migrating to Azure AD can result in increased uptime. With on-premises servers, you need to manage physical hardware, perform regular maintenance, and handle software updates. Access to these servers is dependent upon the office Internet connection being up.

Azure AD is a Software-as-a-Service (SaaS). IaaS would imply that you can host your own services on Microsoft/Azure's AAD infrastructure (which you can't).

Yes, Intune integrates seamlessly with other Microsoft services like Microsoft Entra ID (formerly Azure Active Directory) and Microsoft Endpoint Manager, enhancing its capabilities and management efficiency.

Active directories have two roles: controlling who can access your network and applications (people) and how each company device can be used (policies). MDM only controls the policy side of that equation.

Azure AD(AAD) is a specific service within Azure that provides identity and access management capabilities, while identify and access management (IAM) is a broader concept that refers to the management of digital identities and access to resources.

Azure AD is not simply “Active Directory, but for the cloud,” however. There are several differences between the two platforms and their capabilities. While both traditional and Azure AD are similar in that they manage users, Azure AD lacks necessary authentication protocols to protect an organization.