Choose between Basic Mobility and Security or Intune

  • Article

Microsoft Intune is a standalone product included with certain Microsoft 365 plans, while Basic Mobility and Security is part of the Microsoft 365 plans.

Availability of Basic Mobility and Security and Intune

Both Basic Mobility and Security and Intune are included in various plans, described in the following table.

Plan Basic Mobility and Security Microsoft Intune
Microsoft 365 Apps Yes No
Microsoft 365 Business Basic Yes No
Microsoft 365 Business Standard Yes No
Office 365 E1 Yes No
Office 365 E3 Yes No
Office 365 E5 Yes No
Microsoft 365 Business Premium Yes Yes
Microsoft 365 Firstline 3 Yes Yes
Microsoft 365 Enterprise E3 Yes Yes
Microsoft 365 Enterprise E5 Yes Yes
Microsoft 365 Education A1 Yes Yes
Microsoft 365 Education A3 Yes Yes
Microsoft 365 Education A5 Yes Yes
Microsoft Intune No Yes
Enterprise Mobility & Security E3 No Yes
Enterprise Mobility & Security E5 No Yes

Note

You can't start using Basic Mobility and Security if you're already using Microsoft Intune.

For details, see Microsoft 365 and Office 365 platform service descriptions.

Differences in capabilities

Microsoft Intune and built-in Basic Mobility and Security both give you the ability to manage mobile devices in your organization, but there are key differences in capability, described in the following table.

Note

You can manage users and their mobile devices using both Intune and Basic Mobility and Security in the same Microsoft 365 Business Standard organization by setting up Basic Mobility and Security first, and then adding Microsoft Intune. This allows you to choose Basic Mobility and Security or the more feature-rich Intune solution. Assign an Intune license to enable the Intune features.

Feature area Feature highlights Basic Mobility and Security Microsoft Intune
Device types Managing different OS platforms and major management mode variants. Windows
iOS
Android
Android Samsung KNOX
 Windows
iOS
Android
Android Samsung KNOX
mac OS, iPad OS
Device compliance Set and manage security policies, like device level PIN lock and jailbreak detection. Limitations on Android devices. See details. Yes
Conditional access based on device compliance Prevent noncompliant devices from accessing corporate email and data from the cloud. Not supported on Windows 10.
Limited to controlling access to Exchange Online, SharePoint Online, and Outlook.		 Yes
Device configuration Configure device settings (for example, disabling the camera) Limited set of settings. Yes
Email profiles Provision a native email profile on the device. Yes Yes
WiFi profiles Provision a native WiFi profile on the device. No Yes
VPN profiles Provision a native VPN profile on the device. No Yes
Mobile application management Deploy your internal line-of-business apps and from apps stores to users. No Yes
Mobile application protection Enable your users to securely access corporate information using the Microsoft 365 mobile app and line-of-business apps they know. This help ensure security of data by helping to restrict actions like copy, cut, paste, and save as, to only those apps managed approved for corporate data. Works even if the devices aren't enrolled to Basic Mobility and Security. See Protect app data using MAM policies. No Yes
Managed browser Enable more secure web browsing using the Edge app. No Yes
Zero touch enrollment programs (AutoPilot) Enroll large numbers of corporate-owned devices, while simplifying user setup. No Yes

In addition to features listed in the preceding table, Basic Mobility and Security and Intune both include a set of remote actions that send commands to devices over the internet. For example, you can:

  • remove Microsoft 365 data from an employee’s device while leaving personal data in place (retire).
  • remove Microsoft 365 productivity apps from an employee's device (wipe).
  • reset a device to its factory settings (full wipe).

Basic Mobility and Security remote actions include retire, wipe, and full wipe. For more information on Basic Mobility and Security actions, see capabilities of Basic Mobility and Security.

With Intune, you have the following set of actions:

For more information on Intune actions, see Microsoft Intune documentation.