--- title: "Managing Company Devices with Intune | StartCloud" url: https://startcloud.au/learn/managing-devices-with-intune description: "Module 10 of our free Microsoft 365 Security Essentials pathway: what Intune actually does, what your employer can and cannot see on an enrolled device, app protection for personal phones, and how to roll it out without a revolt." lang: en --- Module 10 and the capstone of StartCloud's Microsoft 365 Security Essentials learning pathway, in five short units with a knowledge check: why an unmanaged laptop undermines every other control, the four jobs Intune does (enrolment, compliance policies, updates and settings, remote wipe), exactly what an employer can and cannot see on an enrolled device, app protection policies as the lighter option for personal phones, and a four-step rollout that avoids a staff revolt. # Managing company devices with Intune Module 10 · Advanced Unit 1 of 5 · about 2 min ## The last gap in the pathway Have a look at what you have built across this pathway. Sign-in needs a second factor. Admin accounts are separated and protected. Mail is filtered and your domain cannot be spoofed. Sharing is controlled, access is shaped by risk, sensitive data carries its own protection, and there is a real backup behind all of it. Now picture the laptop it all runs on. Six months behind on updates, no disk encryption, a local account with no passcode, and a browser signed into everything. **Every control you have built assumes the device is trustworthy**, and until now nothing in the pathway has actually checked. An unmanaged laptop You cannot tell whether it is encrypted, patched or even still in the building. If it goes missing you have no way to wipe it, and nobody knows what was on the desktop. When someone leaves, you are relying on them to hand it back and on nothing having been copied off it. A managed laptop Encrypted, patched, and required to prove it before it gets near company data. Lost on the train, and you wipe it from your phone before dinner. The laptop stops being the weak link and starts being another control, which is exactly what Conditional Access back in Module 6 was waiting for. This is why device management is the capstone Module 6 let you say "only allow access from a compliant device." That sentence is doing nothing at all until something is deciding what compliant means and checking it. Intune is that something, and switching it on upgrades several earlier modules at once. StartCloud assistant Online G'day! 👋 I'm the StartCloud assistant. How can I help you today? ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "LocalBusiness", "ProfessionalService" ], "@id": "https://startcloud.au/#business", "name": "StartCloud", "legalName": "Start Technologies Pty Ltd", "alternateName": "StartCloud Australia", "identifier": { "@type": "PropertyValue", "propertyID": "ABN", "value": "17 676 121 449" }, "slogan": "Go Beyond", "description": "StartCloud is Perth's cybersecurity-first AI MSP: managed IT, Essential Eight security, Microsoft 365 and cloud, networking, and practical AI for Australian businesses with 5 to 50 staff.", "url": "https://startcloud.au", "logo": "https://startcloud.au/og-image.png", "image": "https://startcloud.au/og-image.png", "telephone": "+61862850001", "email": "web@startcloud.com.au", "priceRange": "$$", "currenciesAccepted": "AUD", "paymentAccepted": "Invoice", "foundingDate": "2023", "contactPoint": { "@type": "ContactPoint", "telephone": "+61862850001", "contactType": "customer service", "areaServed": "AU", "availableLanguage": "English" }, "address": { "@type": "PostalAddress", "streetAddress": "Ground Floor West, 6 Gibberd Road", "addressLocality": "Balcatta", "addressRegion": "WA", "postalCode": "6021", "addressCountry": "AU" }, "geo": { "@type": "GeoCoordinates", "latitude": -31.8648813, "longitude": 115.8095638 }, "openingHoursSpecification": [ { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens": "07:00", "closes": "16:30", "description": "General support hours" }, { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ], "opens": "00:00", "closes": "23:59", "description": "Security Operations Centre (SOC) with 24/7/365 threat monitoring" } ], "areaServed": [ { "@type": "City", "name": "Perth" }, { "@type": "State", "name": "Western Australia" }, { "@type": "Country", "name": "Australia" } ], "serviceArea": { "@type": "GeoCircle", "geoMidpoint": { "@type": "GeoCoordinates", "latitude": -31.8648813, "longitude": 115.8095638 }, "geoRadius": "50000" }, "knowsAbout": [ "Cybersecurity", "Managed Security Services", "Essential Eight", "Microsoft 365", "Microsoft Azure", "IT Support", "Network Security", "Disaster Recovery", "Compliance Management", "Microsoft Copilot", "AI Readiness", "AI Governance", "AI Agent Development" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "IT and Cybersecurity Services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Cybersecurity Services", "url": "https://startcloud.au/cybersecurity" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Managed IT Services and Support", "url": "https://startcloud.au/technology" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Microsoft 365 and Cloud Solutions", "url": "https://startcloud.au/cloud" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Managed Networking", "url": "https://startcloud.au/networking" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI and Automation", "url": "https://startcloud.au/ai" } } ] }, "sameAs": [ "https://www.linkedin.com/company/startcloudau", "https://www.facebook.com/startcloudaus/", "https://www.cloudtango.net/providers/12375/startcloud", "https://clutch.co/profile/startcloud", "https://abr.business.gov.au/ABN/View?abn=17676121449", "https://www.yellowpages.com.au/balcatta-wa/bpp/startcloud-581735301", "https://www.truelocal.com.au/balcatta-wa/tlp/startcloud-581735301", "https://www.google.com/maps/place/StartCloud/@-31.8648767,115.8069889,739m/data=!3m2!1e3!4b1!4m6!3m5!1s0x2a32a5b5d9e864b5:0x9f02690968f0e50c!8m2!3d-31.8648813!4d115.8095638!16s%2Fg%2F11vzbgtytj" ] }, { "@context": "https://schema.org", "@type": "LearningResource", "name": "Managing Company Devices with Intune", "description": "Module 10 of the Microsoft 365 Security Essentials pathway: what Intune does, device privacy explained clearly, app protection for personal devices, and a calm rollout plan.", "educationalLevel": "Advanced", "learningResourceType": "Module", "isPartOf": { "@type": "Course", "name": "Microsoft 365 Security Essentials", "url": "https://startcloud.au/learn/microsoft-365-security-essentials", "provider": { "@type": "Organization", "name": "StartCloud", "url": "https://startcloud.au" } }, "author": { "@type": "Organization", "name": "StartCloud", "url": "https://startcloud.au" }, "datePublished": "2026-08-12", "dateModified": "2026-08-12", "url": "https://startcloud.au/learn/managing-devices-with-intune" } ] ```