Jamf cost money, Intunes is 'free'

The fact that Microsoft uses Jamf rather than Intune to manage their own in-house Apple devices speaks volumes....

@cpominville In the interest of being that guy, the product is spelled Intune, not InTunes. And Intune isn't free, it is part of a portfolio of other things likely already purchased and licensed.

<tinfoil_hat> with Jamf and Microsoft already in partnership to support conditional access/AAD authentication and the obvious love the MS Office for Mac team gets, it really wouldn't shock me to hear talks about acquisition and assimilation. </tinfoil_hat>

@andrew.nicholas I’ve been having the same thoughts of Microsoft buying Jamf. It makes sense because Microsoft will not invest time in designing a MacOS agent for intune.

@andrew.nicholas I've heard a rumor in that direction, so it wouldn't surprise me at all....

Also from a tech debt perspective, Intune has way more. jamf itself is riddled with tech debt and I can tell you, using both, Intune has way more tech debt. You cannot even schedule something on a regular basis with out manipulating the objects via API (or powershell module) in code to hack around it.

Intune does some things out of the box better than jamf though. I will say their SAML/SSO with MFA to enroll devices into Autopilot just freaking works out of the box and it syncs the IdP password right to AAD joined systems pretty seamlessly. Both jamf and Apple can take a lesson from that.

However, all things considered, Intune is not a great tool for macOS.

Canada...'nuff said.

They STILL haven't apologized for the whole Justin Bieber atrocity. Then again...I don't know if something like that can actually be forgiven.

Why would you want to work for someone who asked/suggests to use any product beside Jamf?

C

With Vista Equity Partners 2017 purchase/investment I don't see MS buying Jamf... I also don't think it would be smart for Apple to allow MS to buy Jamf.

That said, it's beyond stupid that Apple didn't buy Jamf years ago.

C

@gachowski uh MSFT is valuated at 1Trillion dollars, they can buy jamf if they wanted to. They also would complete their cloud model in Azure for device management if they did acquire jamf. There could be a lot of money to be made.

Apple would have zero say it, nor would Apple care. When was the last time Apple did anything that was "Enterprisey?"

@tlarkin

:)

Valid point about the MSFT money and I do agree with the premise. I just didn't say it very well, I think both companies should have bought Jamf years and years ago and let Jamf run as its own company like FileMaker... I don't think Apple should "let" MSFT have that kind of access to its customers or that much control its future.

I am the last person to argue that Apple supports the enterprise because I know they don't care....however, there are a few points, Enterprise Connect in Catalina and ABM corp accounts.???? ( yes it's both are 1/2 baked... alright 1 is 1/2 baked and the other is MIA) but they show somebody in Cupertino is "trying"... : )

In fact, I agree with the premise so much, I am still trying to figure out why either company hasn't bought fleetsmith from what I have seen they look like they know what they are doing.

C

Our argument went along the lines of I've been using JAMF to manage iPads do you want me to learn how to manage iPads in inTune or train the guys that manage InTune to be able to manage iPads? Didn't think so. Here's the approval to buy JAMF iOS licences.

JAMF iOS Conditional Access would help this look less like the wrong decision...

Since when is Intune free ? - you have to pay a license for each user

But no. Intune cannot cover apple devices if it should be professional enviroment. If it is only few devices that give it a go

call seattle school district and ask about why they botched the intunes and went back to Jamf.

Here's someone on reddit who's just been dropped into Intune: I feel we've made a huge mistake by moving our MDM to INTUNE...

lol, this thread

If anyone has been to Microsoft's Ignite, you'd notice that Jamf has a presence there. My boss asked Microsoft techs/reps about a Mac solution and they pointed him to the Jamf booth. Intune is not designed to manage Macs as well as Jamf is and Microsoft knows this.

I mean y'all now there ain't no such thing as a free lunch right?

While MSFT AAD Intune do some things out of the box better than jamf, managing macOS and iOS devices are not among those things. We use AAD Intune to manage our Windows 10 clients so I am familiar with it. Also, Intune is a pure MDM where jamf is a MDM an agent. This makes a huge difference

From macOS device management with Microsoft Intune

I might get flamed for saying this, but I think Intune is horrible. It's also incomplete. I just went through several weeks of weekly training sessions on Intune and I left thoroughly unimpressed. When Jamf announced at JNUC 2017 that Intune would work with Jamf Pro, I sat through the keynote presentation wondering why I would want to connect my Jamf Pro servers to Intune? What real benefit does doing that provide? It provides none except to allow some Windows guys to have their hands in my Apple deployments. That's about it. I see no need to ever let Intune be involved in managing my Apple deployments.

Intune, conditional access and Okta device trust and others are where the industry is going, secure access to cloud data and apps without VPN. It's not too much to expect that users are going to stop using services that require VPN and then demand a solution that doesn't require a VPN for those services.

Not using the VPN for O365 services is very big win for user experience, moving the Intune, conditional access was one of the most important "work goals/accomplishments" I have done.

C

Intune has a ton of shortcomings, I know this because we use Intune to manage our Windows 10 devices. However, I completely agree that when Microsoft cares to fix all this stuff they will probably completely own the SSO/IdP + conditional access world because all of that tech is there in the Azure stack. Microsoft just has to mature it.