Intune assists in protecting your company's data in three ways:
Mobile Device Management (MDM) : Manage which devices have access to which data by controlling device settings. You can also delete data and remove gadgets from your system.
Management of Mobile Apps (MAM) : You protect the information on the devices rather than the devices themselves, such as company emails in the Outlook app.
Managing your desktop (Windows PCs and Macs) : Only secure and compliant PCs should be able to access your company's data. Maintain Windows updates, for example, and the proper system settings.
