Confuse to how manage users device and company endpoints

Question

I'm baffled about managing users' devices and company servers with Microsoft's solution. Below are my client's definitions and assets:

They have Microsoft 365 Business Premium licenses for users.

They have company devices and BYOD for users.

They have some on-prem and Azure servers (Windows and Linux).

Client's requirements:

Manage the user's device and server

Threat and Vulnerability

Update (prefer to automate) third-party applications (Adobe, .NET, IDE, etc.)

Update (prefer to automate) operating system

Central view for control and manage

Currently, I have some issues and questions. In the Defender portal:

In the portal, I saw some devices managed with Intune, and their status is Unknown. Some are managed with Microsoft Defender Endpoint. I know all devices managed with Intune also have MDE. How can I move all devices managed by Intune? Why is the status Unknown?

Another question is, how do small and medium-sized companies keep up with updating third-party applications installed on users' devices? Based on the "Discovers Vulnerabilities" page on the Defender portal, I had to ask users to please update affected software. I would like to know how other companies handle this item.

Answer 1

@Mohsen Akhavan Thanks for posting in Q&A. Currently, the supported operating systems with Intune is listed in the following link. And for windows, only windows client like Windows 10 or Windows 11 support, Windows server is not in the support list.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers

For Azure machine, it supports Azure Virtual Machine single session and multi session, Windows 10/11 Cloud PCs on Windows 365. But it has limitation.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/windows-10-virtual-machines

For the status unknow, please ensure we have configured Microsoft Defender for Endpoint in Intune and ensure the connection between them is active.

https://learn.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

For the affected app, you can check if the app can be deployed via Intune, then do the update via Intune side or it may update automatically for some app type.

https://learn.microsoft.com/en-us/mem/intune/apps/apps-add

Also, there's a new feature named Enterprise App Catalog app we can use to deploy third party software. You can also check if your app is in the supported app list. But as a reminder it needs additional Microsoft Intune Suite license.

https://learn.microsoft.com/en-us/mem/intune/apps/apps-enterprise-app-management#apps-available-in-the-enterprise-app-catalog

https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-enterprise-app

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi Mohsen Akhavan,
Intune is currently not supported in the Q&A forums, the supported products are listed over here https://learn.microsoft.com/en-us/answers/products (more to be added later on).

You can ask the experts in the dedicated Intune forum over here: https://techcommunity.microsoft.com/t5/microsoft-intune/bd-p/Microsoft-Intune

Please don't forget to Accept answer and close this thread.
Thank you.