NHSmail Intune, provides two options for organisations who wish to manage their Windows devices via the service. This article provides an overview of the Windows offerings available with the aim of informing organisations on which offering is suitable for their organisation, as well as providing guidance on next steps in the form of technical pre-requisites and future provisioning activities.
Two options are available to onboard Windows devices depending on the organisation’s requirements. These options are:
- Cloud Track
- Cloud + Same Sign On Track
To manage devices via any of the Windows tracks, your organisation must be onboarded to the NHSmail Intune Service.
Organisations who have not already onboarded to the NHSmail Intune Service are required to register using the Intune Onboarding Registration Form.
The below provides a high-level overview of the functionality of each track.
| CLOUD TRACK | CLOUD + Same Sign On TRACK | |
| On-premises resource access (AD User Authentication) | ü | ü |
| Cloud-Deploy/Rebuild with NHSmail Intune Autopilot | ü | ü |
| ‘On-premises’- Deploy/rebuild with MECM (SCCM) | ü1 | ü1 |
| MECM ‘Co-manage’ device configuration with Intune | ü | ü |
| Device Compliance and Conditional Access | ü2 | ü2 |
| Intune App Deployment | ü | ü |
1 Requires additional Microsoft Endpoint Configuration Manager (MECM) configuration task sequences
2 Requires ‘Co-management workloads’ aligned to MECM OR Intune
‘Co-management’ is the configuration of an organisation’s Microsoft Endpoint Configuration Manager (MECM) or System Center Configuration Manager (SCCM) site to connect with the Enterprise Management and Security Intune service to share configuration workloads between Cloud and on-premises sources.
For more information on each of the options, please see the following articles:
| Last Reviewed Date | 09/08/2024 |
