Cloud-native devices are the future; there’s no more Active Directory, and users can work from anywhere on a secure device. But how does this work for smaller companies that often lack the in-house skills and experience to manage the transition and ongoing tenant management?
If you’re an MSP reading this, you know the answer already. It’s you. Doing the often unnoticed behind-the-scenes work so your customers get the best possible experience.
We see you, and we appreciate what you do. But what happens if you also lack the time, experience and skills to navigate the world of cloud management? You’re undoubtedly already juggling hardware, user support, networking, backups, management of on-prem infrastructure, and so much more.
Intune options for MSPs
This leaves you in a quandary; which option do you pick?
- Keep your customers in the old on-prem world for as long as possible (kicking the can down the road)
- Tell them you don’t do Intune and hope they don’t go elsewhere
- Rapidly implement something yourself and hope for the best
- Spend months learning the ins and outs of it all (because, of course, your customers will leave you alone to learn it)
- Outsource it

Option 1
Not a long-term solution. The time will come when you won’t have a choice anymore, and by then, your competitors will have the upper hand, and you’ll start to lose customers.
Option 2
Same outcome as #1, only quicker. It’s unlikely they’ll juggle two different MSPs for long, and eventually, one will win the lot.
Option 3
A risky move. Intune and Entra may look straightforward, but a secure configuration is much more complicated than it seems. When configuring, you must juggle security, useability, and more. A poorly secured tenant is much more dangerous than not having one at all. You have a much larger footprint. You also have to consider the ongoing maintenance. It isn’t a click-and-forget setup. Policies will need amending, and the tenant will need regular checks and maintenance, and that’s before we even start keeping those applications updated. No one wants a zero-day exploit, and ransomware is even worse!
Realistically, we’re now down to two options. Both are a lot less risky though.
Option 4
While Intune and Entra are complex, they’re not impossible. You already have the technical abilities, so you could sit down and start learning it – ideally with a test tenant. The big question is, do you have the time and financial capacity? As an MSP, every hour of not doing client work is effectively an hour unpaid, so closing your doors for the next couple of months probably isn’t an option for most.
So you’ll be juggling around the day job, squeezing it in between maintenance, support, meetings, contracts, finding customers, managing your staff, and all the other day-to-day tasks that keep coming. Or you could use your evenings and weekends if they’re not already taken with over-flow tasks. But time is a finite resource. You can’t get more of it, and every second is precious. I would prefer to spend my spare time with loved ones!
Option 5
Fortunately, we still have one option available: simply outsource it. Find an expert who can implement, monitor and manage it all for you and leave you free for everything else. If your clients are asking for cloud-managed devices, pass the cost onto them; they get what they want, and you can offer it at no expense to you and with no effort.
Now’s the time to start offering your customers a robust Microsoft Intune service backed by Algiz Technologies – experts in all things EUC, especially Microsoft Entra and Intune.
How does it work, and what do you get?
For a fixed cost (per user, per month), we’ll configure your tenant, manage it, and monitor it for you.
1. Intune kickstarter or audit
We can prepare and correctly configure a new CIS and NSCS security-compliant instance of Microsoft Intune. If you have an existing tenant, we’ll check your config and resolve any issues.
2. Automated app migration from SCCM to Intune
If you plan to move endpoints from Microsoft Configuration Manager or other MDM solutions, we’ll ensure everything is in place for a smooth transition to Microsoft’s cloud-based endpoint management.
3. Third-party application patching
As part of a full-spectrum managed service, we provide cloud-based, user-friendly tools to help you get your applications Intune-ready in a few clicks
4. Environment management
We help keep your tenant secure with regular backups and security checks to ensure ongoing CIS and NCSC compliance. Here’s a flavour of some of the monitoring and maintenance we’ll perform:
- Check Entra Sign-in logs for any potential issues
- Monitor device compliance
- Monitor update compliance
- Review application updates
- Review Microsoft secure score
- Remediate where applicable
- Keep Intune policies updated
- General tenant housekeeping