Edit

Microsoft Intune advanced capabilities

Intune includes capabilities that extend endpoint management and security across Microsoft 365 and Microsoft Security. This article describes each capability, shows which licenses include them, and explains how to try them.

Capabilities

Intune offers the following advanced capabilities:

Firmware Over-the-Air updates

Remotely deliver firmware updates to Android devices over the air, without user action.

Specialty device management

Manage AR/VR headsets, large smart-screen devices, and conference room meeting devices.

Microsoft Tunnel for MAM

Extend the Microsoft Tunnel VPN to Android and iOS devices that aren't enrolled in Intune.

Advanced Analytics

Get analytics-driven insights to understand and improve the user experience across your endpoints.

Remote Help

Securely connect to user devices for cloud-based help-desk support with role-based access controls.

Microsoft Cloud PKI

Use a managed certificate authority for issuance, renewal, and revocation across Intune platforms.

Endpoint Privilege Management

Run users with least privilege while still allowing approved tasks that require elevation.

Enterprise Application Management

Deploy curated Win32 apps from a Microsoft-hosted Enterprise App Catalog with built-in install settings.

Intune plans and advanced capabilities

Advanced capabilities are available through Microsoft Intune Plan 2, the Microsoft Intune Suite, and select Microsoft 365 bundles. For what's included in each plan, current pricing, and how to buy, see Microsoft Intune plans and pricing.

For licensing concepts and admin-access requirements, see Microsoft Intune licensing.

Trial subscriptions for advanced capabilities

You can start a free trial to explore advanced capabilities before purchasing.

Trial summary

  • Duration: 90 days
  • Maximum users: 250 per tenant
  • Trial limit: One trial per capability per tenant
  • Post-trial: 30-day grace period

After the trial ends, a 30-day grace period begins. Once this period expires, the capability is no longer available in the admin center.

Before you start

Availability of advanced capabilities depends on your existing licenses, which may vary across your organization. Review your licensing to understand what is already included and avoid overlapping functionality.

For more information, see:

If a capability isn't included in your current licenses, you can start a trial to evaluate it.

Start a trial

  1. Sign in to the Microsoft Intune admin center as a Global or Billing administrator.
  2. Go to Tenant administration > Intune add-ons.
  3. Select the All add-ons tab and find the capability you want to try.
  4. In the Try or Buy column, select View details, then choose Go to Microsoft 365 admin center.
  5. In the Microsoft 365 admin center, complete the Start free trial process.
  6. Return to Tenant administration > Intune add-ons. The capability now shows as Active.

Note

If you're not a Global or Billing admin, the Your add-ons tab isn't visible. The Capabilities tab still shows what your tenant is eligible for.

To try Microsoft Intune itself (rather than an advanced capability), see Sign Up for Microsoft Intune Free Trial Setup Guide.

Related content

  • Last updated on