Skip to main content
Question

Trusted Device in Microsoft Intune

  • January 14, 2026
  • 1 reply
  • 6 views
S
Forum|alt.badge.img+2

Hi All,

we currently use Jamf School to manage our iPad estate.  it works great for what we use it for, but the goalposts have been changed on us.

Moving forward, Cyber Essentials requirement are set to change so that our devices need to be trusted.  Our trusted IP address will no longer satisfy the requirements.  So we will need to add our devices to Microsoft Intune.  I believe that this is configurable with JAMF Pro, but not JAMF School.  Is this the case? Is this a feature that will be added in the near future?

We are currently having to evaluate using Microsoft InTune as an MDM alternative to JAMF School if it cannot fulfill this requirement, and it is already covered in our Microsoft Licence.

Any advice would be much appreciated.

1 reply

h1431532403240
Forum|alt.badge.img+3
  • h1431532403240
  • New Contributor
  • January 14, 2026

Hi ​@Si_P,

Thanks for reaching out about the Cyber Essentials requirements and Microsoft Intune integration with Jamf School.

You're correct that Jamf Pro does support Microsoft Intune integration, specifically through the Device Compliance feature (which replaced the older Conditional Access integration). This integration allows Jamf Pro to send device compliance status to Microsoft Entra ID (formerly Azure AD), enabling organizations to enforce Conditional Access policies that ensure only trusted users on compliant devices can access corporate resources.

Unfortunately, Jamf School does not currently support Microsoft Intune integration for device compliance or conditional access. This is one of the key differences between Jamf School and Jamf Pro. Jamf's own comparison documentation notes that Jamf Pro is better suited for scenarios involving "integrations with device compliance or conditional access."

Your options going forward:

  1. Migrate to Jamf Pro - This would give you the Microsoft Intune Device Compliance integration you need for Cyber Essentials. The integration allows Jamf Pro to report device compliance status to Microsoft Entra ID, satisfying the "trusted device" requirement. You would continue managing your iPads with Jamf Pro while gaining the Intune integration.
  2. Use Microsoft Intune directly - Since you mentioned Intune is already covered in your Microsoft licence, this is a viable alternative. Intune can manage iPads natively, though the Apple-specific management experience may not be as polished as Jamf's offerings.
  3. Submit a feature request - You can request this feature through Jamf's Feature Request process on Jamf Nation. However, there's no public indication this feature is on Jamf School's near-term roadmap.

Regarding Cyber Essentials changes: The April 2025 update (v3.2) mainly focuses on terminology updates (like "extensions" replacing "plugins", "home and remote working" replacing "home working"), passwordless authentication guidance, and vulnerability fixes definitions. If your organization has specific new requirements around "trusted IP" or device trust that are driving this change, you may want to clarify with your Cyber Essentials assessor exactly what controls would satisfy the requirement.

I'd recommend reaching out to your Jamf sales representative or account manager to discuss the migration path from Jamf School to Jamf Pro if that's the direction you choose to go.

References:

Hope this helps clarify your options!

Terms & ConditionsCookie settingsAccessibility statement