Microsoft Intune is Microsoft's mobile-device-management and endpoint-management platform. It is strong on Windows / iOS / Android management, configuration policies, application deployment, and conditional access integration with Entra ID.
Intune is an endpoint-management platform rather than a security platform. EDR, GRC, breach detection, helpdesk, and remote support usually come from Defender, Microsoft Compliance Manager, Sentinel, other Microsoft add-ons, or third parties; check Microsoft's documentation for what your licence includes.
Technicians get browser-based remote control, a background admin workspace, and a remote shell on Windows and Mac, scripting on Linux, and ad-hoc support for computers without the agent, with end-to-end encrypted sessions available. Lavawall can run on its own as your RMM, or be installed through Datto RMM, NinjaOne, ConnectWise, Kaseya, Intune or any tool that runs a script, while you move over.
Where Lavawall® wins for MSPs
Multi-tenant management for MSPs: onboarding a tenant in minutes rather than days. Microsoft Lighthouse partially addresses this, but Lavawall® is multi-tenant by default and includes per-client billing, white-label reporting, and tenant isolation as native concepts.
GRC framework breadth across CMMC 2.0, CPCSC, NIST, SOC 2, HIPAA, PCI DSS, ISO 27001, CIS, the Canadian privacy bundle, BC E-Health Act, Alberta HIA, NERC CIP, CIRO, CPA Canada, and the Australian Essential Eight is broader than Microsoft Compliance Manager covers natively.
Linux servers in the MSP fleet get the same agent as Windows and macOS for patching, scripts, and monitoring. Check Microsoft's documentation for Intune's Linux coverage.
Per-named-agent helpdesk, browser-based multi-tenant remote support, and curated SaaS / shadow-AI discovery are MSP-tuned capabilities built into Lavawall®.
Where Microsoft Intune wins
Intune is the right tool for Microsoft-tenant device management, configuration policy, application deployment, and conditional-access integration with Entra ID. For organizations standardizing on Microsoft, Intune goes deepest on policy.
iOS and Android device management is a Microsoft strength Lavawall® does not compete with directly.
MSPs running both Lavawall® and Intune typically use Intune for MDM policies and Lavawall® as the RMM for patching, security, GRC, helpdesk, and remote support.
Feature comparison
| Feature | Lavawall® | Microsoft Intune |
|---|---|---|
| MDM / endpoint management | Endpoint management without full MDM certification and lighter on policy-templating | Yes: certified MDM for Microsoft and Windows |
| Multi-tenant for MSPs | First-class | Microsoft Lighthouse (heavy) |
| Cross-platform coverage (Windows, macOS, Linux) | Windows, macOS, Linux | Windows, macOS, iOS, Android |
| Compliance framework mapping (CMMC, NIST, SOC 2, HIPAA, ISO, etc.) | 70+ frameworks with auditor-ready System Security Plan (SSP) and remediation plan (POA&M) | Compliance Manager (Microsoft frameworks) |
| M365 / Entra / Azure breach detection | Native, multi-tenant identity threat detection and response (ITDR) | Defender XDR add-on |
| Google Workspace breach detection | Native | No |
| Administrator elevation and execution prevention (no kernel driver) | Native | WDAC / AppLocker integration |
| Curated SaaS / shadow-AI discovery | 1,277-app catalogue | Defender for Cloud Apps add-on |
| Replacement prioritization (battery / TPM / SMART / RAM / age) | Multi-factor scoring | Lifecycle data |
| Smart helpdesk (per-named-agent unlimited tickets) | Native | No |
| Multi-tenant browser-based remote support | Native | Check Microsoft's documentation |
Who should pick which?
Pick Lavawall® if…
MSPs serving many client tenants who need multi-tenant security, GRC, patching, helpdesk, and remote support from a single console.
MSPs whose fleet includes Linux servers and macOS endpoints that need patching, monitoring, and compliance evidence from the same agent as Windows.
Pick Microsoft Intune if…
Organizations standardizing on Microsoft 365 with iOS / Android device management as a primary need.
MSPs serving Microsoft-centric clients that already own Intune licences and need policy-driven device management.
Frequently asked
- Can Lavawall® and Intune coexist?
- Yes. Many MSPs run Intune for MDM and Lavawall® as their RMM, with security, GRC, helpdesk, and remote support. Lavawall® is aware of Intune-managed devices and surfaces gaps where a device is missing from one or the other.
- Does Lavawall® do MDM?
- No, not full MDM. Lavawall® manages Windows, macOS, and Linux endpoints with patching, scripting, configuration assessment, and remote support. iOS / Android MDM is not in Lavawall®'s scope; Intune, Jamf, Kandji, or Mosyle handles that.