What I like most about Microsoft Intune Enterprise Application Management (EAM) is that it simplifies third-party application management by providing Microsoft-packaged apps, automated deployments, and automatic updates directly from Intune. This reduces packaging effort, improves security, and helps keep applications up to date with minimal administration. Review collected by and hosted on G2.com.

Generating response 

Copilot said:

Yes. One area where Microsoft Intune Enterprise Application Management (EAM) could improve is by expanding the Enterprise App Catalog to include more third-party applications and providing broader support for automated patching. Many organizations still need to package some applications manually because they are not available in the catalog.

Larger application catalog with more niche and business-specific apps. Review collected by and hosted on G2.com.

Unified app model — Win32, MSIX, LOB, and Store apps are all managed through one consistent policy engine, rather than relying on platform-specific tooling.

Declarative detection plus dependency/supersedence chains — this requires less custom scripting than SCCM detection methods and is easier to audit and maintain over time.

Enterprise App Catalog — Microsoft maintains packaging and updates for common third-party apps (Chrome, Zoom, Adobe, etc.), which significantly reduces the amount of repackaging work you have to do. Review collected by and hosted on G2.com.

Enterprise App Catalog coverage still feels thin. It’s great when the app you need is included, but the catalog doesn’t come close to covering the breadth of what most enterprises actually run. As a result, you’re still stuck packaging a large chunk of your portfolio manually. Review collected by and hosted on G2.com.

The biggest strength of Microsoft Intune Enterprise Application Management (EAM) is how dramatically it reduces the packaging and ongoing maintenance burden for common Win32 apps while making it far easier to keep them current and secure. Review collected by and hosted on G2.com.

its limited catalog coverage, the constraints around auto-update control, and the remaining operational gaps that keep it from being a complete solution for many environments Review collected by and hosted on G2.com.

I like Microsoft Intune Enterprise Application Management because of its cost-effectiveness and how easy it is to set up and work with. The technical options available are great and make working with the system straightforward. It's highly effective for managing policies, especially with its integration with Android Enterprise, which makes configuring phones to our requirements easy, including adding and removing apps. For Windows, it's fantastic because I can manage everything about the computers from one console, saving a lot of time and effort. Additionally, if something does break, it's extremely helpful in finding a solution. Review collected by and hosted on G2.com.

The enrollment process for Windows could be a bit easier. It's a bit confusing at times, especially with on-premise Active Directory when trying to attach users to Intune as well. It's something we're working out, but it would be nice if there was an easier way to accomplish the same goal. Also, the initial setup was complicated, and things could be named better even though once the initial config was done, it wasn't too hard. Review collected by and hosted on G2.com.

I liked Microsoft Intune Enterprise Application Management's real-time tracking of updates, allowing us to track deployed software versions and easily identify when a newer version is available. Our admin team can update software with a single click, which makes the process very efficient. Additionally, being able to create a catalog of applications for our different organizations and groups has made management much easier than it used to be. Also, the guided setup process ensured there were no issues during the initial setup. Review collected by and hosted on G2.com.

Sometimes there are better alternatives available but due to limitations, we are unable to add them to the catalog. We often face compatibility issues with Mac and Linux OS. Review collected by and hosted on G2.com.

What I like most is how Intune turns complex application management into a secure, automated, and user-centric process. The tight integration with Azure AD for conditional access is awesome, as it helps ensure that only compliant and secure devices can access sensitive corporate applications and data. On top of that, having endpoint protection policies and firewall rules in one place makes it possible to manage the entire organization more effectively from a single console. Asset management and compliance are also major benefits I’ve gained through Intune. End of the day it's quite eased to implement and operate. Review collected by and hosted on G2.com.

Intune is immensely powerful, but it also demands a lot of expertise and patience to use well. In my experience, the main drawbacks are the steep learning curve, troubleshooting that can feel opaque when error messages are vague, and the extra overhead that comes with packaging Win32 apps. Day to day, it often feels like you’re trading simplicity for deep control and tight integration. If you’re going to rely on it, plan to invest significantly in training, and accept that some tasks may still require digging through community forums and Microsoft documentation to get to a clear answer. Also, as of now, it supports only a limited set of Linux operating systems, such as Ubuntu 22.04/24.02. Review collected by and hosted on G2.com.

I really like that Microsoft Intune Enterprise Application Management solves real security problems without forcing full device control. It offers strong app-level security, which is especially important for BYOD, contractors, and partners where full device management is impractical. The security measures are lighter and more targeted, allowing users to maintain personal freedom with their apps, which enhances adoption and reduces resistance. The system is identity-driven and automatic, meaning app access follows the user, not the device, and it's incredibly valuable for IT teams because everything just works with Entra ID. Conditional Access combined with App Protection offers powerful controls like requiring MFA and encryption on personal devices. Its cloud-native architecture makes it easy to scale and handle remote and hybrid users effectively without maintaining infrastructure. There's a clear separation of responsibilities with Intune handling apps and data, making it more modular. It's deeply integrated with Microsoft 365 apps, which are consistently updated and well-documented, leading to better use of the platform. Review collected by and hosted on G2.com.

I find the limited protection for non-Microsoft apps a bit frustrating because the App Protection Policies (MAM) primarily work with Microsoft apps and a few third-party apps. This often leaves many business-critical third-party apps without proper protection. Also, the process of app wrapping can be quite cumbersome. It adds complexity, can break app functionality, and sometimes requires re-wrapping with updates. Troubleshooting policy issues can lack clarity as well, with root causes not always being obvious, fragmented logs, and vague error messages. This makes troubleshooting slower and leads to more support tickets. Sometimes the user experience can be confusing too. Users don't always understand prompts for app PINs or why their copy/paste features are blocked, which causes frustration and leads to helpdesk calls. Reporting feels functional but not very insightful. It's difficult to drill down into areas that cause user friction, which makes it more reactive than proactive. Additionally, I feel like the complexity in licensing can create confusion during procurement, which leads to unexpected feature gaps post-purchase. Review collected by and hosted on G2.com.

Microsoft Intune Enterprise Application Management makes application deployment and lifecycle management very smooth and effective. The best part is its centralized management and cloud-based control, which allows me to deploy, update, and retire applications across all devices without any manual intervention. I also like how seamlessly it integrates with M365, Azure Active Directory, and Defender, providing complete visibility into user activity. Review collected by and hosted on G2.com.

I would like to see improvements in application deployment speed and troubleshooting visibility. Some Win32 app deployments take a while to reflect or report an accurate status, which can delay diagnostics. The Intune admin center is powerful, but certain areas—like application logs and installation error details—could be more detailed to make it easier to understand what’s happening during installs and to troubleshoot issues faster. Review collected by and hosted on G2.com.

I like that Microsoft Intune Enterprise Application Management is a great cloud platform for managing both corporate and personal devices for work profiles. It secures company data and helps users access corporate data on both personal and corporate devices. It solves my problem of carrying a phone instead of a laptop by allowing me to use all work applications on my phone. I also appreciate the ability to manage the security of all devices and check their compliance status, ensuring that applications cannot be accessed on non-compliant devices. I like being able to use biometric access on my phone without needing additional passwords, unlike when using my laptop. The Microsoft Intune admin center was easy for me to understand and useful for checking device details. Review collected by and hosted on G2.com.

They can improve it for iOS devices by making some of the security things less strict. It's also difficult to remember and understand their licenses, including how many there are and what the prices are for the different licenses. Review collected by and hosted on G2.com.

Intune integrates with other elements of the MS platform, such as Defender and SIEM, which makes it easier to stay within a single ecosystem. There are also plenty of resources on learn.microsoft, and Copilot is a pretty helpful resource as well. Review collected by and hosted on G2.com.

The initial setup takes some time, and some features, when pushed out to endpoints, can take a while to apply without it being clear exactly when they become active. Licensing is also a challenge, as it is with much of Microsoft. Review collected by and hosted on G2.com.