Microsoft Endpoint Manager (Intune) is a cloud-based service supporting management of desktop and mobile devices. ITSC has been evaluating Intune in the past few months. While Intune has many features, our implementation will first focus on window10, with emphasize on security enhancement.
Under Intune, desktop will be domain joined to the cloud-based Azure AD, and optionally protected by Microsoft Advanced Threat Protection (ATP).
ATP leverages modern cybersecurity technologies (e.g. behavior detection, cloud-based sandbox verification) not featured in traditional signature based Anti-virus tools like F-secure. ATP has proven its effectiveness in a couple of recent attacks on the desktops piloted in ITSC.