Intune for a small company: staff laptops without manual setup

I set up device management with Microsoft Intune: a new laptop configures itself at first sign-in, disks are encrypted, updates are under control, a lost device is locked remotely.

What Intune takes care of

A new employee gets a laptop out of the box, signs in with the work account, and Windows Autopilot installs apps, policies and settings by itself.
BitLocker on Windows and FileVault on Mac are on everywhere, recovery keys are stored in the tenant.
Windows and macOS updates on a schedule, with a delay for checking.
Password and lock-screen requirements, local admin rights, USB drives.
A lost or stolen laptop: remote lock and wipe.
Staff phones: work mail and Teams in a protected container, with no access to personal data.

How I roll it out

A pilot on one or two devices first. Policies, groups and scripts follow a single naming standard so that a year later it is still clear what is what, and every change has a description and a rollback.

Then in stages: new devices first, then the ones already issued. Staff need a one-screen guide, nothing more.

What I need from you

A licence that includes Intune: Microsoft 365 Business Premium or an Enterprise plan.
A list of devices and who uses them.
A decision on personal devices: allowed in a container, or corporate devices only.

Questions and answers

Do I need Active Directory or a server?

No. Intune and Entra ID run from the cloud, no on-premises domain is needed. If you already have one, a hybrid setup is possible.

What about laptops already issued?

They can be enrolled without reinstalling: the user adds the work account, the device registers, policies apply. Autopilot kicks in at the next reinstall.

Are Macs supported?

Yes: macOS, iOS and Android are managed from the same console, within what each platform allows.

Can staff still install software themselves?

That is the company's call: keep admin rights, deliver apps through Company Portal, or combine the two.

Tell me roughly how many devices you have and which kinds: Windows, Mac, phones. I'll suggest a rollout order.

hello@miraops.io