Photos: Windows Intune

Installing the Intune agent on a PC is a simple process, with no user intervention required. Put the installer on a share, or send it via email to let your users connect to Intune.

Users can work with Intune from the Intune Center, where they can check for updates, ensure they have the latest malware protection, or ask for help form a support desk.

Along with its management agent, Intune's client software includes a version of Forefront Endpoint Protection, replacing the anti-malware tools on a managed PC.

The Windows Intune web service gives you an overview of your managed PCs, indicating any security issues and flagging alerts that need to be resolved.

You can get a quick feel for what needs to be done from the Updates Overview, seeing what updates Intune has ready to deploy, and what's waiting to be installed on managed PCs.

Drilling down into Intune's update list allows you to see just what each update is, so you can approve the updates you want to deploy.

PCs with management software installed are automatically placed in the Unassigned Computers group, where you can handle basic management tasks before assigned them to groups for more specific actions.

Managed computers can be placed in groups, which can then be used to control policies and to manage which users get which updates.

Use Intune's details view to drill down into the state of individual PCs. You can see what updates they need, whether there are any alerts associated with a machine, and the state of its malware protection.

You can use Intune to see just what software is installed on which PC, which helps keep track of deployed applications and ensure you have the right number of licences. You can also use it to track down issues with specific applications and proactively deliver updates.