This is similar to the MDM features Microsoft recently added to Office 365, which are actually powered by Intune and also give administrators the option to lock down the Office apps on devices. But with Intune you can set up conditional access for other apps and use the new containers to secure apps and files. "We are offering app wrapping with support for iOS and Android," Conway said. Companies can deploy line-of-business apps with Intune, which can be used to control what users can open, save and whether they can cut, copy or paste, Conway said.
You can also combine that with the device settings already in Intune and the new integration with the Apple Configurator. "You can do a lockdown on an iOS device using supervisor mode," Conway said. "You can set policy to turn an iPad into a kiosk that only runs one app; you can't rotate the screen, you can't change the volume. It literally just has the app on it."
One thing Intune doesn't have at this stage is management for Windows 10-specific security features, including the per-file encrypted containers for business documents. Microsoft has promised that Intune will be able to manage those features, but they aren't in the current technical preview. A preview version of System Center Configuration Manager to support Windows 10 and Windows Server vNext will be available in the first half of 2015 and that's a likely timescale for Intune support as well.
Sign up for CIO Asia eNewsletters.