Microsoft Intune for US Government GCC High and DoD service description

Note

This article applies to Microsoft Intune features only. If you're looking for information on other features, then go to that specific documentation. For example, for Microsoft Teams devices, go to Teams Rooms on Windows and Android.

The Intune U.S. government service description is as an overview of the service offering in the Government Community Cloud (GCC) High and U.S. Department of Defense (DoD) environments.

This article lists the feature differences compared to the commercial offering of Microsoft Intune.

To learn more about Intune for GCC customers, go to EMS offers for US Government and Microsoft 365 interoperability.

Tip

For information on the US Federal Risk and Authorization Management Program (FedRAMP) accreditation and Microsoft, go to FedRAMP.

Get started with Intune for US Government GCC High and DoD

The Intune GCC High and DoD offerings are built on the Microsoft Azure Government Cloud. This cloud is designed to interoperate with Microsoft 365 GCC High and DoD environments.

For more information about Intune, and what you can do, go to Microsoft Intune securely manages identities, manages apps, and manages devices. Use this documentation as your starting point for deploying and using Microsoft Intune.

Intune has two service instances:

• Commercial service: The commercial service is available to anyone with an Intune license and is used by most Intune customers.
• Government cloud: This service is also known as GCC High or DoD. This instance is a datacenter that's physically separate from the commercial instances. The datacenter is locked down and is only used by government customers who purchase the appropriate license.

These government instances are also known as IL4 and IL5, where IL refers to Impact Level.

What you need to know

• There isn't a built-in way to migrate from the commercial service to the government cloud, and vice versa. To migrate, devices need to unenroll from the current tenant, and then re-enroll to the new tenant.

  This approach is similar to unenrolling from another mobile device management (MDM) service and enrolling in Intune. For more information, go to Deployment guide: Setup or move to Microsoft Intune.

• In the government cloud, the Intune service instance is shared with GCC High and DoD tenants. This architecture is slightly different than other services, such as Microsoft 365 and Azure.

• GCC is the same instance as Microsoft Intune in the commercial space. Other services, like Microsoft 365, have a separate GCC instance. Intune doesn't have a separate GCC instance.

  So, when you see GCC in this Intune article, it refers to the commercial service. When you see GCC High or DoD, it refers to the government cloud.

  GCC instances are commonly used by state and local government customers that require extra accreditation for the cloud services they use.

Feature differences in Intune GCC High and DoD

Available and supported

The following features are available and supported in Microsoft GCC High and/or DoD clouds:

Feature	Availability
Standard MDM features	✅ You can use app policies, device configuration profiles, compliance policies, and more.
Mobile Threat Defense (MTD)	✅ Mobile Threat Defense (MTD) connectors for Android and iOS/iPadOS devices with MTD vendors that also support the government environment can be used. When you sign in to a GCC-H tenant, you see the connectors enabled for those specific vendors.
Platform support	✅ You can use the same operating systems - Android, AOSP, iOS/iPadOS, Linux, macOS, and Windows. - Android (AOSP): There are some device restrictions. For more information, go to Supported operating systems and browsers in Intune - AOSP. - Linux: Generally available (GA) in February 2024.
Remote Help	✅ Remote Help is supported in GCC on Android and Windows devices. It's not supported in GCC High or DoD. For more information on this feature, go to Remote Help in Microsoft Intune.

In the planning phase

The following features are currently not available and aren't supported in GCC High and DoD clouds. Planning is underway to support these features for GCC High and DoD. If ETAs are available, then they're listed.

Feature	Availability
Expedited updates	For more information on this feature, go to Expedite Windows quality updates in Microsoft Intune.
Feature updates	For more information on this feature, go to Feature updates for Windows in Intune.
Log Analytics	ETA is Q2 2024. For more information on this feature, go to Send log data to storage, event hubs, or log analytics from Intune.
Microsoft Intune Plan 2 and Microsoft Intune Suite	For more information on these plans, go to Use Intune Suite add-on capabilities. Some features are being added. When support is added, these features are listed at Available and supported (in this article).
Organizational Messages	For more information on this feature, go to Organizational messages in Microsoft Intune.
Windows Autopilot	For more information on this feature, go to Windows Autopilot overview.

Not available

The following features aren't available and won't be supported for GCC High and DoD:

Feature	Availability
Chrome OS Connector	❌
Microsoft Store for Business	❌
On-premises Exchange Connector	❌
TeamViewer connector or TeamViewer feature	❌

Next steps

To learn more about Intune and how to get started, go to the Microsoft Intune planning guide.