What's included
Curated capability groupings first, then every remaining service plan Microsoft provisions with this SKU — together they're the complete list, nothing is hidden.
| Device Management |
|---|
| Intune Device Management Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Enroll, configure, and manage Windows, iOS, Android, and macOS devices: compliance policies, app deployment, and remote wipe. |
| Windows Autopilot Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Provision and configure new Windows devices out of the box, straight from the cloud, with no imaging. Autopilot itself has no separate license line item — it’s an Intune-dependent deployment workflow, mapped here to Intune Plan 1 as the plan that actually enables managing the enrolled device afterward. |
| BitLocker Management Cloud-based mobile device and application management — enroll, configure, and enforce compliance policies on company and personal devices. Centrally enforce BitLocker drive encryption policy and escrow recovery keys. BitLocker itself ships with Windows Pro/Enterprise; cloud-based policy and key escrow specifically need Intune, mapped here as the enabling plan since there’s no dedicated BitLocker-management license line item. |
| Other service plans |
| Microsoft Entra ID for Education |
| Microsoft Intune for Education |
| Windows Store Service |
Intune Device Management