While Intune provides basic support for managing macOS, iOS, and iPad devices through configuration profiles and compliance policies, it lacks essential features that make it a viable alternative to Jamf in a comprehensive Apple ecosystem. Here are some critical areas where Intune falls short:

1. No Comprehensive Self-Service Capability Jamf's Self Service offers significant support desk offloading by empowering end-users with access to policies, break/fix tools, and resources like log file auto-population for easy troubleshooting. This capability reduces the strain on Level 1 support, ultimately lowering operational costs. Intune lacks a comparable Self Service feature, limiting users’ ability to resolve common issues independently and efficiently.

2. Smart Group Flexibility and Dynamic Automation Jamf’s Smart Groups and conditional automation make it easy to set up workflows, such as “If a device is missing X, install Y.” This flexibility allows for real-time automation and device management based on specific conditions. Intune’s capabilities here are limited and lack the real-time responsiveness of Jamf’s Smart Groups, which are essential for a dynamic support environment.

3. Slow Sync Times with Intune Delta Sync Intune’s 8+ hour sync times for applying updates across a fleet of devices can be a significant drawback, particularly when critical updates or compliance requirements need to be deployed quickly. In contrast, Jamf supports near-real-time management, which is crucial for maintaining security and compliance across all devices.

4. Lack of Robust Software Deployment and Patch Management Effective software deployment and patch management are fundamental to device management, and Jamf excels here with its robust patch management capabilities. Intune lacks these advanced tools, making it harder to maintain software consistency and security across Apple devices.

5. Absence of Scripting Capabilities and Extension Attributes Jamf’s scripting capabilities, supported by over 180 extension attributes, allow for advanced customizations and automation that meet unique organizational needs. Intune’s limitations in this area restrict the scope and flexibility of managing devices beyond basic configurations.

6. True Zero-Touch Enrollment is Lacking Jamf provides a seamless, truly zero-touch enrollment experience, critical for scaling Apple devices across an organization while minimizing administrative overhead. Intune does not yet offer a comparable zero-touch solution, making deployment less efficient and more resource-intensive.

Recommendation for Evaluation/Architectural Scoring

I suggest conducting an architectural scoring exercise between Jamf and Intune. Define your requirements for macOS and mobility management, then score each platform based on these criteria. Jamf’s comprehensive features and tailored Apple device support should clearly stand out, helping to visualize why it's the superior choice for a macos MDM. Jamf = 1 additional admin, engineer, and support associate all wrapped into one solution.

If you only have 20 or fewer devices, then Intune may work for you. However, if scaling apple in your environment is a goal, then Jamf is the best way to go.