The web portal is terrible and incredibly difficult to navigate. The built-in Endpoint Protection barely catches anything and we have to clean up almost every piece of malware or viruses seperately or hope Palo Alto picks it up before it hits the computer. It doesn't patch third party applications, and doesn't allow for ease of patching of the OS either. It doesn't auto-deploy. The support from Microsoft is terrible. It doesn't provide an imaging solution or any real management tools aside from basic machine visibility. The reporting is pathetically inaccurate and we can't reliably use it to grt inventory records, application inventory, or user info. I could go on...
From what I've heard, Intune was meant more for mobile decice management than actual laptop/end user machines. Which makes sense I guess. But we're so so happy to get rid of it. Bonus is that SCCM agent is included in the Windows User CAL, so we don't have to pay for that management tool seperately. Upside to Intune: Microsoft does it all, it's more hands-off. Downside to Intune: Microsoft does it all...
