Especially, when you have Microsoft Intune.
You’ve heard it before. Perhaps, even said it yourself.
“We have Intune as part of our EM+S or M365 bundle and I have to try it.”
You tried it and found out that Intune can perform some endpoint management tasks adequately, others well, but left out quite a few capabilities you need now or know you’ll need in the future. That’s what we found when we asked a third-party testing organization to show us the functionality gaps left by Intune. We then asked them to validate the use cases where Workspace ONE is clearly needed, even if you own Intune. If you want to skip to the details, download the report here and the FAQ here.
Workspace ONE Supports Any Use Case
The following list is a summary of the top ten use cases that are best served by Workspace ONE:
1. If you have any users on ChromeOS or Android Rugged Devices.
Workspace ONE allows your organization to use more platforms than Intune, including ChromeOS for Chromebooks and Android rugged (including Zebra, Samsung and more). Intune doesn’t have deep API integration but relies on the third-party vendor’s software to configure the devices. That’s a significant advantage for organizations that appreciate the cost efficiency of Chromebooks as well as for education systems throughout the US, where these devices are popular.
2. If you have any users with Android Devices.
Workspace ONE offers Android device management features that Intune doesn’t offer:
• Allows changes to system update settings
• Configures Launcher, an app launcher to help customize and secure Android devices
• Configures Chrome Browser Settings
3. If you need DLP (data loss prevention) for O365 and non-Office applications.
Workspace ONE delivers the best-in-class DLP capability by integrating Intune App Protection with the DLP controls of the operating system. This ensures that whether the application is part of the Microsoft Office suite or a third-party application, you can build coherent DLP policies across your entire suite of apps, for example, native email attachments opened into the Office applications.
4. If your organization relies on third-party MFA solutions.
Workspace ONE can leverage any RADIUS- or SAML-based multi-factor authentication solution. You can extend your MFA investment by using the capability of Workspace ONE Conditional Access to add additional security checkpoints before a device can consume corporate data.
5. If your users demand a consistent user experience across all device OSes supported.
From an end-user perspective, Workspace ONE has been meticulously designed to offer parity across all supported operating systems. From an IT perspective, you can take advantage of all the different “Out of Box” experiences offered by the operating system vendors to distribute new devices directly to the end user. VMware Workspace ONE Intelligent Hub becomes your single application to consume corporate data, regardless of the device type or operating system.
6. If your security team requires your Unified Endpoint Management solution to leverage third-party security vendors.
VMware understands that security is typically not solvable by a single vendor. Workspace ONE Intelligence implements a Trust Network of partners that ingests data from third parties to create a single infrastructure layer that provides client health reporting, automation, and proactive security. From an administrator perspective, Workspace ONE Intelligence alerts you when a security event is detected, automatically quarantines unhealthy devices, and reports in real time the devices that are affected.
7. If your Mergers and Acquisitions team requires you to quickly add new organizations, people, and structures to your management authority.
Workspace ONE uses a multi-tenant architecture that allows for one instance of the software to support multiple organizations or groups within a large organization. Each tier provides an additional layer of security, configuration, customization and access control. The ability to override settings on a per-organization group basis, when combined with organization group characteristics such as inheritance and multi-tenancy, can be further combined with authentication. This combination provides for ease in scalability and flexible configurations.
8. If you have Mac users that require better integration with macOS.
Workspace ONE integrates with more macOS features than Intune, including Time Machine, AirPlay, and Network file locations. Intune is limited to the Office Suite. For non-Microsoft products, Intune lacks application distribution and is heavily reliant on JAMF. For organizations with many macOS users, configuring these settings with Workspace ONE can alleviate some burden for users and admins, saving time for both. Workspace ONE offers these macOS device management features that Intune doesn’t.
• Supports .dmg files, which are more commonplace than .pkg files; Intune supports only .pkg files for MAM
• Supports Enterprise Wipe of devices
• Allows changes to several settings
9. If you need an intelligence solution that integrates with third-party security vendors and supports all your devices.
Workspace ONE Intelligence has been designed to understand all the supported operating systems of UEM management, tightly integrated with conditional access. It can ingest data from the Trust Network of partners to automate the prevention of unhealthy devices from connecting to all corporate applications. For instance, if NIST releases a CVE that affects your Windows 10 devices, Intelligence automation instantly alerts the admin, provides quarantine controls for the affected devices, and generates appropriate service desk tickets. Microsoft focuses on its own technology disregarding macOS, iOS, and Android. Workspace ONE Intelligence is any device type we support.
10. If you need to provide an integration with Dell Command for more security.
Workspace ONE offers these management features for integrating Windows 10 with Dell Command:
• Enables BIOS-level changes on Dell devices
• Allows toggling of TPM Chip status (useful for Bitlocker)
• Allows changes to Secure boot settings
• Allows changes to Virtualization settings
• Disables Bluetooth at BIOS level
BONUS – In addition to the above use cases, you will also be able to manage MacOS, Windows, Android and iOS as efficiently and effectively as possible. Principle Technology’s testing shows the following time savings over Microsoft Intune when managing various devices.
The results are in.
Workspace ONE addressed more use cases, supports more endpoint devices and saves more time than Microsoft Intune.
“If you use Intune, or have considered it, but want to offer greater platform flexibility to your employees and customers, shorten endpoint management time, and reduce user downtime, consider moving to Workspace ONE.”
Principled Technologies
To learn how Principled Technologies came to some of these conclusions, download the report here. To clarify other items on the list where Workspace ONE shines, download the FAQ here.
What are you waiting for? Try Workspace ONE for all of your endpoint management needs today!
The post Top 10 Reasons Why You Need Workspace ONE appeared first on VMware End-User Computing Blog.