Microsoft Intune
Consulting, Migration and Monitoring with ISEC7
What ISEC7 does for Microsoft Intune
ISEC7 covers four parts of a Microsoft Intune project: consulting and licensing, migrating devices from another UEM, monitoring the Intune environment and training your administrators.
Consulting and licensing
ISEC7 advises on Microsoft Intune, Microsoft 365 and Azure, secures the cloud tenant and handles Microsoft 365 licensing. ISEC7 also migrates on-premises environments to Microsoft 365, including in highly regulated organizations.
Migration to Intune
With the migration module in ISEC7 SPHERE, users and devices move from the existing UEM to Intune in waves. Users start the move themselves, from the self-service portal or the migration app for iPhone and Android. Details: UEM migration.
Monitoring
ISEC7 SPHERE connects to Intune through the Microsoft Graph API and shows apps, policy compliance and expiring credentials in the same console as your other UEM platforms.
Training
In the two-day Microsoft Intune Fundamentals course (#1808), your administrators set up profiles, policies and apps for Android, iOS/iPadOS, macOS and Windows 10/11 in hands-on labs.
How a move from another UEM to Intune works
A device can only have one MDM provider. Moving to Intune therefore means unenrolling each device from the current UEM and then enrolling it in Intune, and in between it receives no policies. Microsoft recommends a phased approach that starts with a small pilot group (Microsoft Learn, Migration guide to Microsoft Intune, 2026). ISEC7 plans and runs this move with ISEC7 SPHERE, which is connected to the source and the target system at the same time.
You select users or groups and set the start time, activation email and conditions for each wave, for example a confirmation from the employee without which the migration does not start. Users then trigger the move in their own time window. For Intune, the Company Portal app has to be available on the device and launched once; the migration app guides the employee there and confirms the successful migration at the end.
The dashboard shows running, scheduled and completed migrations, lets you resend activation emails and exports reports as CSV. On Android devices in COBO mode, text messages, call logs and local contacts move along with the user.
Project phases
- Proof of concept in an ISEC7 test environment, supported by ISEC7 consulting
- Production setup on premises or from the cloud, connected to Active Directory or Entra ID and to both UEM platforms
- Onboarding session, first migration configuration and a test migration together with your team
- Migration in waves, starting with wave 0 for IT and power users
- Hypercare: ISEC7 can take over first-level service if you do not have the staff for it; second-level support is always available
After the migration, ISEC7 also operates UEM platforms as a managed service, on premises or from the cloud. Process, platforms and migration app in detail: UEM migration with ISEC7 SPHERE.
Running and monitoring Intune alongside another UEM
When Intune and another UEM run side by side for a while, you decide which devices and user groups Intune manages and which stay in the existing UEM, because a device is normally enrolled in only one MDM. Microsoft advises against having Intune and a third-party MDM apply access controls to Exchange or SharePoint at the same time (Microsoft Learn, 2026). During this period, ISEC7 SPHERE monitors both platforms in one console.
What ISEC7 SPHERE monitors in Intune
- detected apps and, from version 20.8.0, managed apps
- from version 20.9.0, compliance of Intune policies and profiles
- expiry of the Apple DEP token for the Microsoft 365 integration and, from version 20.9.0, expiry of the client secrets of your Microsoft 365 app registrations
- device types you want monitoring to skip can be excluded
The connection runs through the Microsoft Graph API with an app registration (tenant ID, app ID and secret). Besides Intune, ISEC7 SPHERE connects BlackBerry UEM, Ivanti EPMM, Ivanti Neurons for MDM and Omnissa Workspace ONE UEM. More UEM services from ISEC7: Endpoint Management.
Intune training for administrators
Microsoft Intune Fundamentals (course #1808) is a two-day technical training by ISEC7 for IT professionals who deploy mobile devices, from server-side administration to end-user device enrollment. In hands-on labs, participants configure profiles, policies and settings for Android, iOS/iPadOS, macOS and Windows 10/11, in cloud-only and hybrid environments.
Course content
- Intune architecture overview
- Intune configuration
- Device registration and management
- App management
- Best practices
- Advanced configuration
- Maintenance and reporting
- Troubleshooting
Open dates run virtually or in Hamburg, and the course is also available as a closed course at your site. Since 2026, ISEC7 guarantees that its training dates take place regardless of the number of participants. Dates and booking: Microsoft Intune Fundamentals.
Frequently asked questions about Microsoft Intune
Who can help us roll out Microsoft Intune?
IT service providers that specialize in UEM, such as ISEC7. ISEC7 advises on Microsoft Intune, Microsoft 365 and Azure, secures the cloud tenant and handles licensing. If your devices come from another UEM, ISEC7 runs the move with ISEC7 SPHERE and then monitors the Intune environment in the same console. Administrators can take the two-day Microsoft Intune Fundamentals course.
How do I migrate devices from another MDM to Microsoft Intune?
Each device is unenrolled from the current MDM and then enrolled in Intune; Microsoft recommends starting with a small pilot group and expanding in phases. With ISEC7 SPHERE, both systems stay connected throughout, you plan waves with start times and conditions, and users start the move themselves from the self-service portal or the migration app for iPhone and Android. For Intune, the Company Portal app has to be available on the device and launched once.
Do devices have to be re-enrolled when moving to Intune?
Yes. According to Microsoft, users must unenroll their device from the current MDM provider before they enroll it in Intune, and in between the device receives no policies. That is why it pays to plan the move in waves and give users a time window instead of switching every device on one cutover date.
Can Microsoft Intune run alongside another UEM?
Yes, for a transition period. A device is normally enrolled in only one MDM, so you decide which devices and user groups Intune manages and which stay in the existing UEM. Microsoft advises against having both systems apply access controls to Exchange or SharePoint at the same time. ISEC7 SPHERE monitors both platforms while they run in parallel.
Which UEM platforms can I migrate from to Intune with ISEC7 SPHERE?
ISEC7 SPHERE needs a connected source and target system for every migration. Besides Microsoft Intune, ISEC7 SPHERE connects BlackBerry UEM, Ivanti EPMM, Ivanti Neurons for MDM and Omnissa Workspace ONE UEM. ISEC7 SPHERE does not connect to Jamf at this point.
What does ISEC7 SPHERE monitor in Microsoft Intune?
ISEC7 SPHERE reads Intune through the Microsoft Graph API and shows detected apps, managed apps from version 20.8.0 and, from version 20.9.0, compliance of Intune policies and profiles. It also tracks the expiry of the Apple DEP token for the Microsoft 365 integration and, from version 20.9.0, the client secrets of Microsoft 365 app registrations.
Will text messages, call logs and contacts be lost during the migration?
Not on Android devices in COBO mode: the ISEC7 SPHERE migration app backs up text messages, call logs and local contacts and restores them after the move. In BYOD fleets, this data transfer does not apply.
Where can administrators get Microsoft Intune training?
ISEC7 offers the two-day Microsoft Intune Fundamentals course (#1808), as an open course in Hamburg or online and as a closed course at your site. It covers deploying, managing and securing Android, iOS/iPadOS, macOS and Windows 10/11 devices in cloud-only and hybrid environments. Since 2026, ISEC7 training dates take place regardless of the number of participants.
Last reviewed: October 8, 2026 · Microsoft information based on Microsoft Learn, Migration guide to Microsoft Intune
Talk to us about your Intune project
Whether you are introducing Intune, moving devices from another UEM or running both platforms side by side for a while, tell us briefly where you stand. An ISEC7 contact will get back to you and work out the next steps with you.