Endpoint Management: Microsoft Intune & Configuration Manager
Intune managed properly and reported on honestly, so you can prove the state of every device rather than assume it.
Checked 4 October 2026. Built from the full service page.
In short: Day-to-day Intune management plus the reporting layer Intune does not give you: what every device is actually running, whether policies landed, and evidence of patching you can hand an auditor. Covers Configuration Manager and co-management where an on-premises estate is still doing real work. For IT teams who cannot currently answer what state their devices are in.
Who this is for
The problem
An endpoint estate nobody reports on drifts quietly. Policies stack up until no one knows which one is winning, devices fall out of compliance without anyone noticing because nothing is watching the trend, and the first time the gap becomes visible is when a certification body, an insurer or an incident asks a question that has to be answered with evidence rather than intent.
What we would do
Fix the reporting before you change anything else. Until you can see what is genuinely deployed, patched and compliant across the estate, every other decision is being made on assumption. It is also the cheapest stage, and it often shows the estate is in better shape than feared.
- If Configuration Manager is doing work Intune genuinely cannot do yet, co-manage rather than migrate. Moving workloads one at a time is supported, reversible and much safer than a cutover.
- If devices are unmanaged rather than badly managed, enrolment comes first and reporting follows it, because there is nothing to report on yet.
- If a certification deadline is driving this, do the patching evidence first and the rest afterwards. It is the control most likely to fail and the slowest to fix retrospectively.
When we are not the answer: If you want someone to take Intune off your hands and send you a monthly ticket count, cheaper options exist. This is for teams who want to know the real state of their estate, which means we will show you things you would rather were not true.
What is included
- Microsoft Intune management: policies, compliance, applications and update rings
- Estate-wide Intune reporting, including evidence of patching over time rather than at a moment
- Autopilot provisioning, so a replacement device is a delivery rather than a build
- Configuration Manager management, co-management and workload migration at your pace
- Compliance evidence mapped to what Cyber Essentials and insurers actually ask for
- Policy rationalisation, because most estates have accumulated conflicting policies nobody retired
- Application deployment, including the packaging work when an application resists it
What the last 12 months looked like
What it costs
Scoped and quoted against your estate rather than sold from a rate card. We price what you already run, including the parts that are working and do not need replacing, and the quote itemises what is included so it can be compared line by line with anyone else’s. Managed IT support starts at £40 per user, per month if that is the wider question.
Three questions people ask
Why do we need extra reporting if we already have Intune?
Because Intune answers questions about objects well and questions about estates over time poorly, and the questions you get asked are nearly always the second kind. Whether a device is compliant right now is easy.
Do we have to move off Configuration Manager?
No, and we would push back on anyone telling you otherwise without looking at what it is doing for you.
Our devices show as compliant. Is that enough?
Not on its own, for three reasons worth checking. Compliance is reported at the last check-in, so an estate that looks healthy may partly be an estate that has gone quiet, and stale devices need separating from compliant ones before the number means anything.
Tell us what you need
A short call to talk through how your IT works today, what your team handles, and what you need from a provider. We will tell you plainly how we would approach it.
Prefer to talk now? Call us on +44 (0)1482 770583.