|
|
|
Device Enrolment |
|
|
Support for Windows OS
Details
|
Supports Windows 10 management
NEW
With Intune, organisations can manage Windows 10 devices as Mobile devices. Intune also can works along with SCCM for Co-Managing a Windows 10 device.
|
Supports Windows 10 management
NEW
With Intune, organisations can manage Windows 10 devices as Mobile devices. Intune also can works along with SCCM for Co-Managing a Windows 10 device.
|
Supported
NEW
Ability to Manage Windows 10 Device via MDM policies.
|
|
Support for Apple macOS
Details
|
Supports Apple macOS 10.9+
NEW
Mac OS can be enrolled and managed just like iOS. Intune enables MDM management for MAC OS 10.9+
|
Supports Apple macOS 10.9+
NEW
Mac OS can be enrolled and managed just like iOS. Intune enables MDM management for MAC OS 10.9+
|
Supported
NEW
With MaaS360 Unified Enrollment experience, MaaS360 not just supports management of Apple macOS 10.7+ via MaaS360 agent, but also supports agentless enrollment.
|
|
|
|
Device Security |
|
|
Encryption of device
Details
|
Supported
Intune utilizes Bitlocker Encryption and the recommended algorithm is XTS-AES
|
Supported
Intune utilizes Bitlocker Encryption and the recommended algorithm is XTS-AES
|
Supported
|
|
Device security Policies and Profiles
Details
|
Supported
NEW
Windows 10 devices can be managed just like Mobile devices. Although, they can be co-managed with SCCM and GPO policies as well, but MDM policies are always an option leading infrastructure to Cloud-First model.
|
Supported
NEW
Windows 10 devices can be managed just like Mobile devices. Although, they can be co-managed with SCCM and GPO policies as well, but MDM policies are always an option leading infrastructure to Cloud-First model.
|
Supported
NEW
PCs can be mangaged via the MDM security policies and configuration.
|
|
|
|
Application Distribution |
|
|
App catalog for Windows PC
Details
|
Partial
Users will be able to use the Self Service Portal to install published applications on their Windows Machine.
|
Partial
Users will be able to use the Self Service Portal to install published applications on their Windows Machine.
|
Supported
NEW
MaaS360 allows Windows App Catalog distributes and updates script files (batch files (.bat), VBScript (.vbs), PowerShell (.ps1), registry files (.reg), Python(.py)) and web clips in addition to exe, msi, appx, and appxbundle and othe downloadable file like docx, pptx, jpeg, png within the App Catalog. It supports App Bundles, and updates the most downloaded apps, the latest apps, reviews/ratings of apps, and sorting and filtering of apps display.
|
|
App catalog for Mac PC
Details
|
Partial
Users will be able to use the Self Service Portal to install published applications on their Macs.
|
Partial
Users will be able to use the Self Service Portal to install published applications on their Macs.
|
Supported
NEW
MaaS360 App Catalog is installed by default during the enrollment and users can view and manage apps through new App Catalog.
|
|
Win32 App lifecylce Management
Details
|
Supported
NEW
Win32 application distribution is supported for Windows 10 OS, with supported file type .msi, .appx, or .appxbundle.
|
Supported
NEW
Win32 application distribution is supported for Windows 10 OS, with supported file type .msi, .appx, or .appxbundle.
|
Supported
NEW
Supports Win32 app deloyments and tracking
|
|
Co-exists with Systems Management
Details
|
Supported
NEW
Starting with Configuration Manager version 1710, and Windows 10, version 1709 (also known as the Fall Creators Update) devices, a Windows device can be managed by using both Configuration Manager and Intune at the same time.
|
Supported
NEW
Starting with Configuration Manager version 1710, and Windows 10, version 1709 (also known as the Fall Creators Update) devices, a Windows device can be managed by using both Configuration Manager and Intune at the same time.
|
Supported
NEW
Starting with Configuration Manager version 1710, and Windows 10, version 1709 (also known as the Fall Creators Update) devices, a Windows device can be managed by using both Configuration Manager and a MDM solution at the same time.
|
|
Unified User catalog and SSO
Details
|
Not Available
NEW
|
Not Available
NEW
|
Not Available
NEW
|
|
|
|
Management |
|
|
|
Supported
NEW
OS and Security updates can be pushed via Windows as a Service or SCCM in case of Hybrid / Co-Management.
|
Supported
NEW
OS and Security updates can be pushed via Windows as a Service or SCCM in case of Hybrid / Co-Management.
|
Supported
NEW
MaaS360 enables admins to push missing patches to Windows OS, in addition patcg management with Compliance rules.
|
|
|
Not Available
|
Not Available
|
Partial
MaaS 360 enables administrator to enforce automated actions on enrolled macOS devices based on compliance policies for patch management.
|
|
Customize HW & SW Inventory Collection
Details
|
Partial
NEW
Custom built reports can be used for HW and SW inventory
|
Partial
NEW
Custom built reports can be used for HW and SW inventory
|
Supported
NEW
A software agent runs continuously on managed devices for reporting & analysis. The agent reports Software inventory including application types (Win32 and Windows Store applications), Hardware inventory, OS patch levels and information, including file size, severity level & how many users are missing each one etc.
|
|
Compliance Settings & Remediation
Details
|
Partial
NEW
Admins can configure Compliance policies and mark device as non-compliant and send email to the end user in case of non-compliance.
|
Partial
NEW
Admins can configure Compliance policies and mark device as non-compliant and send email to the end user in case of non-compliance.
|
Partial
NEW
Only notification available for Windows desktop OS.
|
|
Software Metering or Usage Analysis
Details
|
Supported
NEW
Intune captures details for all managed applications installs. It displays data around the number of install and users / devices for each published application install.
|
Supported
NEW
Intune captures details for all managed applications installs. It displays data around the number of install and users / devices for each published application install.
|
Partial
NEW
Application install details are available but not the appliation usage details
|
|
|
Supported
NEW
Skype for business on PCs can be used for Remote sessions.
|
Supported
NEW
Skype for business on PCs can be used for Remote sessions.
|
Supported
NEW
TeamViewer integration with MaaS360 is supported on iOS, Android, Windows Phone 10+, Windows Laptops/Desktops and MacOS.
|
|
Full Device or Hard Drive Wipe on Windows OS
Details
|
Supported
NEW
Remote wipe for PCs is also supported. For Windows 10 version 1709 or later, admins also have the Retain enrollment state and user account option.
|
Supported
NEW
Remote wipe for PCs is also supported. For Windows 10 version 1709 or later, admins also have the Retain enrollment state and user account option.
|
Supported
NEW
Supports full device wipe for both supported Windows OS and MacOS. Also, with MaaS360 admins can create compliance rules to remote wipe or selective wipe a OOC machine.
|
|
|
|
Client Health and Security |
|
|
Endpoint Protection
Details
|
Supported
NEW
With Endpoint Protection with Intune, or Windows Defenders, IT can achieve comprehensive protection for corporate systems, files and online activities from viruses, malware, spyware, and other threats.
|
Supported
NEW
With Endpoint Protection with Intune, or Windows Defenders, IT can achieve comprehensive protection for corporate systems, files and online activities from viruses, malware, spyware, and other threats.
|
Supported
NEW
MaaS360 adds support for enforcing the Trusteer Threat Management policies through Persona policies for mixed mode (MDM+SPS) customers.
|
|
Data Classification and Protection
Details
|
Supported
NEW
Can be achived via Azure Information Protection which allows labels and policies to be applied to files and folders
|
Supported
NEW
Can be achived via Azure Information Protection which allows labels and policies to be applied to files and folders
|
Not Available
NEW
Data can be published and shared ut could not be categoized as Corp or Byod.
|
|
Device health compliance
Details
|
Supported
NEW
Intune enables configuration and reporting of Non-Compliant devices
|
Supported
NEW
Intune enables configuration and reporting of Non-Compliant devices
|
Supported
NEW
MaaS360 has a large number of available in-built reports that allows admins to fetch generic reports like compliance status, HW and SW inventory etc.
|
|
|
|
Reporting and Analytics |
|
|
|
Supported
Supported via Intune Datewarehouse / Power BI and Intune in hybrid mode with SCCM.
|
Supported
Supported via Intune Datewarehouse / Power BI and Intune in hybrid mode with SCCM.
|
Not Available
Only provides in-built reports.
|
|
|
|
Device Management |
|
|
Support for Domain Joined laptops
Details
|
Supported
NEW
Supported with Azure Domain registeration. Once registered, these devices can then be included in Azure Conditional Access policies.
|
Supported
NEW
Supported with Azure Domain registeration. Once registered, these devices can then be included in Azure Conditional Access policies.
|
Supported
NEW
Device management for PCs is independent of the fact if the device is domain joined or BYOD
|
|
Support for BYOD laptops
Details
|
Supported
NEW
BYO Windows 10 machines and MACs can be managed as Mobile devices.
|
Supported
NEW
BYO Windows 10 machines and MACs can be managed as Mobile devices.
|
Supported
NEW
Device management for PCs is independent of the fact if the device is domain joined or BYOD
|
|
Asset Tracking and Inventory
Details
|
Supported
NEW
Admins can track machines via the Device Dashboard and reports. They can check device type, ownership type, basic details, etc.
|
Supported
NEW
Admins can track machines via the Device Dashboard and reports. They can check device type, ownership type, basic details, etc.
|
Supported
NEW
Devices can be tracked from the Device dashboard or devices sections.
|
|
Instant push configurations for Policies
Details
|
Supported
NEW
PCs can be managed either via GPO policies (in case of Co-Management) or MDM policies. MDM policies are instant and over any network and device ownership type.
|
Supported
NEW
PCs can be managed either via GPO policies (in case of Co-Management) or MDM policies. MDM policies are instant and over any network and device ownership type.
|
Supported
NEW
MaaS 360 enables OTA instant push of MDM policies on Windows and Macs.
|
|
|
|
OS Provisioning |
|
|
|
Yes
OSD feature of SCCM possible via Intune in Hybrid mode with SCCM
|
Yes
OSD feature of SCCM possible via Intune in Hybrid mode with SCCM
|
|
|
|
No
|
No
|
No
|
|
|
No
|
No
|
No
|
|
|
|
Security Patch Management |
|
|
|
Supported
Available via WaaS and SCCM (in case of co-management) both.
|
Supported
Available via WaaS and SCCM (in case of co-management) both.
|
Supported
MaaS360 is enabled to fetch missing patches and ditribute on Windows desktop OS. Patch distribution can be scheuled for giving users time to ensure device is connected to the network and data has been saved.
|
|
|
No
|
No
|
Not Supported
|
|
|
No
|
No
|
Partial
MaaS360 does not have the capability to push Mac OS updates, but it can compare and report if Enrolled Macs are missing security patches. And also can set out of compliance action like device wipe, send notification, alert etc.
|
|
Customize HW & SW Inventory Collection
Details
|
Supported
Available via Device and User Collection with Intune in Hybrid Mode or Co-Management with SCCM
|
Supported
Available via Device and User Collection with Intune in Hybrid Mode or Co-Management with SCCM
|
Supported
Pushing Apps updates to specifc groups is available for both Mac and Windows desktop OS.
|
|
|
Power Plans in Configuration manager
Intune Integrated with CM http://bit.ly/2bjLMYn
|
Power Plans in Configuration manager
Intune Integrated with CM http://bit.ly/2bjLMYn
|
|
|
Compliance Settings & Remediation
Details
|
Partial
Limited capabilities for non-compliance. Devices can be marked as non-compliant and an email can be sent to the user.
|
Partial
Limited capabilities for non-compliance. Devices can be marked as non-compliant and an email can be sent to the user.
|
Supported
MaaS360 enables creation of compliance rules and set non-compliance actions on devices.
|
|
Software Metering or Usage Analysis
Details
|
Supported
Limimted capabilities when implemented in standalone intune, but has range of reports when integrated with SCCM
|
Supported
Limimted capabilities when implemented in standalone intune, but has range of reports when integrated with SCCM
|
Partial
App Inventory is available not usage
|
|
|
Yes
Skype for business on PCs can be used for taking Remote control on PCs.
|
Yes
Skype for business on PCs can be used for taking Remote control on PCs.
|
No
MaaS360 integrates with Team Viewer and it allows taking remote on machines.
|
|
Full Device or Hard Drive Wipe
Details
|
Yes
Device wipe available in case of Lost Or stolen device
|
Yes
Device wipe available in case of Lost Or stolen device
|
Supported
Full HDD wipe can be done on both Windows desktop OS and MacOS.
|
|
Endpoint Protection
Details
|
Supported
With Endpoint Protection with Intune, or Windows Defenders, IT can achieve comprehensive protection for corporate systems, files and online activities from viruses, malware, spyware, and other threats.
|
Supported
With Endpoint Protection with Intune, or Windows Defenders, IT can achieve comprehensive protection for corporate systems, files and online activities from viruses, malware, spyware, and other threats.
|
Supported
IBM MobileFirst Protect Threat Management provides the ability to detect, alert, and remediate enterprise malware on iOS and Android devices. Additionally, it provides advanced jailbreak, root and hider detection with over the air updates for security definitions. Administrators can configure compliancy policy on these advanced threats and immediately remediate the vulnerability, improving the security of BYOD and corporate owned devices.
|
|
Reporting & Analytics
Details
|
Multiple Standard reports available
|
Multiple Standard reports available
|
Available
Dashboards deliver a real-time, interactive, graphical summary & Mobile Metrics
|
|
|
Available via SSRS
SQL Server reporting services when integrated with SCCM on Prem
|
Available via SSRS
SQL Server reporting services when integrated with SCCM on Prem
|
Not supported
|