Insights
Jamf vs Intune: which should you use to manage Macs?
An impartial guide from a team that runs both every day.
Most organisations we meet run Microsoft 365 and a mix of Windows PCs and Macs. Intune is often already included in their Microsoft licences, so the question comes up quickly: do we need Jamf as well? The honest answer depends on how many Apple devices you have, how much control you need over them, and who is going to manage them.
What Intune does well on Mac
Microsoft Intune has improved a great deal on macOS. It can enrol Macs automatically through Apple Business (formerly Apple Business Manager). It can push configuration profiles and shell scripts, deploy apps and enforce FileVault. It can also report compliance to Microsoft Entra ID for conditional access. It can set up Platform SSO, so people sign in to their Mac with their Microsoft Entra ID work account. For organisations with a small number of Macs and simple requirements, that is often enough.
The biggest advantage is one console and one licence. If you already pay for Microsoft 365 Business Premium or an E3 or E5 plan, Intune is included.
Where Jamf goes further
Jamf is built only for Apple. This focus is clear in daily administration:
- Depth of control. Smart groups, extension attributes and policies let you target and report on almost anything about a Mac, and automate fixes without scripting everything by hand.
- New Apple releases. Jamf has a long record of supporting new macOS and iOS versions from the day Apple releases them. This matters because many users install updates as soon as they appear.
- Self Service. A branded app store where people install approved apps, printers and fixes themselves. This reduces helpdesk tickets.
- Patching third-party Mac apps. Jamf keeps a large catalogue of common Mac apps up to date with little effort.
- Apple-specific security. Jamf Protect adds endpoint protection and compliance benchmarks built for macOS, and Jamf Connect manages identity and account sync with Entra ID.
You do not have to choose one or the other
A common and well-supported pattern is to use Jamf for Apple devices and Intune for Windows. Jamf shares each Mac’s compliance status with Microsoft Entra ID, so conditional access treats Macs and PCs the same way: only compliant, managed devices can access Microsoft 365. People sign in with the same work account everywhere, and your security policies stay consistent.
A simple way to decide
| Your situation | Usually the better fit |
|---|---|
| A small number of Macs, simple needs, cost is the main factor | Intune |
| Macs are a large or growing share of your devices | Jamf for Apple, Intune for Windows |
| Creative, engineering or executive teams who rely on their Macs | Jamf |
| Regulated work, audits or security benchmarks on Macs | Jamf with Jamf Protect |
| iPhones and iPads used as shared or single-purpose devices | Jamf |
| Mostly Windows, occasional Mac for a few users | Intune |
Licensing and features change regularly on both platforms, so check current pricing and roadmaps before you decide. The right choice is the one your team can run well every day.
How we help
As a Jamf Professional Partner that also manages Microsoft 365 and Intune every day, we have no reason to push you towards one platform. We look at your devices, people and security requirements, and recommend the set-up that fits. Then we manage it for you or with your team. If you already have Jamf or Intune, we can review how it is configured and fix the problems we find.
Frequently asked questions
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
Is Intune free with Microsoft 365?
Intune is included in Microsoft 365 Business Premium and in Microsoft 365 E3 and E5, among other plans. It is not included in Business Basic or Business Standard. Check your current licences, as Microsoft changes plan contents from time to time.
Can Jamf and Intune work together?
Yes. Jamf shares each Mac’s compliance status with Microsoft Entra ID, so conditional access policies apply to Macs managed by Jamf and PCs managed by Intune in the same way.
Can we move from Intune to Jamf, or the other way?
Yes. Devices can be moved between management platforms. Devices on iOS 26, iPadOS 26 or macOS 26 or later that were enrolled through Automated Device Enrollment can move without being erased, with a deadline you set in Apple Business. With careful planning, most moves can be done with little disruption to users.
Do you resell Jamf licences?
Yes. As a Jamf Professional Partner we can supply Jamf licences as well as deploying and managing Jamf for you. Jamf now sells plans, such as Jamf for Mac and Jamf for Mobile, so we help you choose the plan that fits your devices and look after the renewals. See Jamf licensing.
Get new guides by email
Practical updates on Apple, Jamf, Microsoft 365 and security. Unsubscribe at any time.
Start with a 1-hour conversation
Tell us what you want your IT to do next. We’ll ask about your people, devices and plans, and tell you honestly whether we’re the right fit.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai