1. App Management Add-On: Consider Scappman Instead
- Intune App Management Add-On: Intune’s app management capabilities through Mobile Application Management (MAM) can manage apps on both company-managed and personal devices, but it has limitations in terms of the number of apps in its catalog and customization.
- Why Scappman?
- Bigger App Catalog: Scappman offers a more extensive application catalog, with better support for third-party apps and frequently updated applications. This is especially beneficial for organizations that need to manage a large variety of business applications beyond the scope of what Intune provides.
- Automated App Packaging: Scappman simplifies the deployment process by automating packaging, signing, and distribution of apps via Intune, reducing manual effort.
- Cost-Effective: Scappman is typically cheaper than using Intune’s app management add-on, offering competitive pricing with better features for those focused on broad application management.
- Conclusion: For organizations that need a comprehensive app catalog and automated app deployment, Scappman provides more flexibility and cost-efficiency than Intune's App Management Add-On.
2. Endpoint Privilege Management (EPM) Add-On: Consider AdminByRequest Instead
- Intune EPM Add-On: Intune’s endpoint privilege management allows users to elevate their permissions to perform specific tasks without needing full admin access. While useful, it may lack some of the more advanced features required for enterprises that need highly customizable privilege management.
- Why AdminByRequest?
- More Features: AdminByRequest offers granular control over user permissions, allowing IT to define which users can elevate privileges, which applications are pre-approved, and detailed logging of all privilege elevations. It also supports a wider range of policy enforcement options.
- Cost-Effective: AdminByRequest is generally more cost-effective than Intune’s EPM add-on, especially for organizations with a large number of users.
- Cross-Platform Support: In addition to supporting Windows, AdminByRequest also works across macOS and Linux, which is a significant advantage for organizations with diverse device environments.
- Conclusion: AdminByRequest is a more feature-rich and affordable solution for organizations needing advanced EPM capabilities, making it a better alternative to Intune’s EPM Add-On.
3. Cloud PKI Add-On: Choose a Broader Solution Covering Radius and IoT
- Intune Cloud PKI Add-On: Intune’s cloud PKI capabilities are primarily focused on managing certificates for user authentication and device security, but they might fall short when it comes to broader use cases like Radius and IoT device management.
- Why Choose a Broader Cloud PKI Solution?
- Wider Coverage: A more comprehensive PKI solution will not only handle certificate-based authentication for users and devices but also cover Radius servers (for secure Wi-Fi and VPN access) and IoT devices, which are increasingly a part of modern business infrastructures.
- Enhanced Flexibility: Broad PKI solutions provide better integration with different network components, ensuring secure communications across various environments, from standard devices to specialized IoT hardware.
- Scalability: Third-party PKI solutions often offer better scalability and flexibility in terms of policy configuration, certificate lifecycle management, and integration with enterprise infrastructure.
- Conclusion: For organizations needing broader cloud PKI capabilities, particularly those involving Radius and IoT devices, opting for a more comprehensive PKI solution is a more robust and cost-effective choice compared to Intune’s focused Cloud PKI Add-On.
Overall Recommendation
While Intune Add-Ons can be useful for organizations looking to extend their current Intune setup, third-party solutions like Scappman, AdminByRequest, and broad PKI platforms offer more specialized features, scalability, and often more attractive pricing. Depending on the specific needs of your organization, opting for these alternatives can deliver more functionality and better ROI.
Cost vs. Feature Balance: Intune Add-Ons vs. Alternatives
- Scappman (App Management): Better suited for large app catalogs and automated deployment workflows.
- AdminByRequest (EPM): Provides more granular controls and cross-platform support at a lower cost.
- Broader Cloud PKI Solution: Ideal for organizations needing PKI management for diverse infrastructure, including Radius and IoT.
Conclusion
Instead of relying solely on Intune Add-Ons, organizations should consider third-party solutions that may offer more features, flexibility, and cost savings for app management, endpoint privilege management, and cloud PKI. Each of these alternatives aligns better with specific use cases and offers long-term scalability for growing enterprises.
Want to know where your tenant stands? Griffin31 checks your Microsoft 365 security settings continuously and shows you what to fix first.