Managing Intune has never been this simple
Windows, macOS, iOS and Android: pick a protection in plain language, click, it's deployed on your tenant. ISO 27001, NIS2 and GDPR compliance comes with it.
device_vendor_msft_bitlocker_requiredeviceencryption→Encrypt hard drivespasswordMinutesOfInactivityBeforeLock→Automatic screen lockcom.apple.softwareupdate_automaticdownload→Mandatory updatesSee it in action
From account creation to the compliance report: the full journey, in under a minute.
Entra ID SSO · no password
marie@acme-conseil.fr
Same protection. Two worlds.
On the left, the classic way. On the right, a Tuesday morning with AuPoint.
Before · console + scripts
PS C:\> Connect-MgGraph -Scopes "DeviceManagementConfiguration.ReadWrite.All"
PS C:\> New-MgDeviceManagementConfigurationPolicy `
-SettingInstance @{settingDefinitionId =
"device_vendor_msft_bitlocker_requiredeviceencryption"…
Invoke-MgGraphRequest : 400 Bad Request
Invalid settingDefinitionId for platform 'macOS'
# 2 heures plus tard…
PS C:\>
After · AuPoint
Zero lines of PowerShell. Promise.
Deploying an MDM has never been this simple
Mobile fleet, workstations, BYOD or a mixed estate: you choose who to protect, AuPoint handles the rest.
BYOD
Work data is protected inside Outlook, Teams and Office, without enrolling or touching your employees' personal phones.
Corporate devices
Company laptops and mobiles enrolled, encrypted and compliant: passcode, updates, antivirus, automatic lock.
Mixed estate
Both at once: every device automatically joins the right group and receives exactly the right policies.
The only solution on the market that deploys Intune on macOS
FileVault, Defender, updates, Entra SSO in Safari: your Macs are managed in Intune like your PCs, with no extra tool or dedicated console.
Three clicks, literally
From sign-in to deployment, without leaving your browser.
Connect your tenant
Secure sign-in via Microsoft Entra. No passwords stored, no secrets in the database.
Choose your protections
A plain-language catalog, aligned to ISO/NIS2/GDPR. See what is already covered.
Deploy and prove it
Assign groups, preview the impact, deploy. Compliance report ready to print.
A whole fleet, four platforms, one console
Every Intune setting, translated into plain language
Each protection is one clear sentence you switch on, not 40 screens of settings. ISO 27001, NIS2 and GDPR references included.
device_vendor_msft_bitlocker_requiredeviceencryption→Encrypt hard drivespasswordMinutesOfInactivityBeforeLock→Automatic screen lockcom.apple.softwareupdate_automaticdownload→Mandatory updatesDevice inventory
Enrolled devices, associated account, compliance and applied policies at a glance.
Detects what exists
We scan your tenant and flag what is already covered — no duplicates.
Multi-tenant (MSSP)
Manage several customer tenants, fleet view, members scoped per tenant.
Impact before deploy
See affected users and devices, exclude yourself to avoid any lockout.
Compliance reports
ISO/NIS2/GDPR posture, covered controls, activity — one-click PDF export.
Plain-language controls
Encryption, antivirus, passwords, auto-lock… in plain words, not CSP strings.
Automatic app patching
Chrome, Slack, Zoom, VS Code… New versions are detected, packaged and rolled out in waves (pilot then production) through Intune. Agentless.
Intune for humans
The Microsoft console can do everything, provided you give it your week. AuPoint turns its hundreds of settings into simple, deployable, reversible decisions. You keep control, we remove the pain.
Secure by design
Your tenant is your most valuable asset. We treat it that way.
Encrypted data
Database encrypted at rest (AES-256) and traffic encrypted in transit (TLS 1.2+). No passwords stored: sign-in exclusively through your Microsoft SSO.
Zero customer secrets
No Microsoft access token of your users is ever kept in our database. Access to your tenant is obtained on demand and never persisted.
European hosting
Application and database hosted in the European Union (Frankfurt). GDPR-compliant, documented sub-processors.
Continuous vulnerability testing
The platform is scanned continuously (OWASP, network, TLS) via HostedScan. State of the art, verified permanently, not once a year.
Simple pricing, no surprises
Test for free. Move to a plan when you are ready.
Solo
For a single organization, one Microsoft tenant.
- Every Intune setting, translated into plain language
- Plain-language controls
- Device inventory
- Compliance reports
Multi-tenant
Several Microsoft tenants: 5 included, fleet view, per-tenant members.
- 5 tenants included · then +€35/month per active tenant
- Multi-tenant (MSSP)
- Impact before deploy
- Compliance reports
Frequently asked questions
Everything we get asked before people take the plunge.
Who is AuPoint for?
Small and mid-sized companies up to roughly 500 people, on Microsoft 365 and without a dedicated Intune team. Beyond 500 seats, needs get too specific: a dedicated expert is the better call — write to us, we can point you in the right direction.
Can I keep making changes directly in Intune?
Yes, absolutely. AuPoint and the Intune console coexist without conflict: anything you change directly in Intune is picked up automatically by AuPoint at the next scan. You are never locked in.
What happens to my existing Intune policies?
Nothing is overwritten. The initial scan detects your existing policies and marks them as 'Already covered' with a direct link to Intune. AuPoint only creates new policies, prefixed [AuPoint].
Do I need to install an agent or a tool?
No. AuPoint is a SaaS: one Microsoft admin consent connects your tenant. No agent on devices, no extension, nothing to maintain.
Is a deployment reversible?
Yes. Every deployed policy is visible on the Deployments page and removable in one click: it is then deleted from Intune. You can also exclude yourself from a policy so you never lock yourself out.
Does BYOD respect my employees' privacy?
Yes. On personal phones, only work applications (Outlook, Teams, Office) are protected — the device is not enrolled, and you see neither photos, nor apps, nor location.
Where is my data stored?
In the European Union (Frankfurt), encrypted at rest and in transit. No password and no Microsoft token of your users is kept. Details are in our privacy policy.
Does it really work on macOS?
Yes — it is even our exclusive: AuPoint is the only solution on the market that deploys Intune on macOS (FileVault, Defender, updates, SSO) without an extra tool.
How much does it cost?
The trial is free, with several controls deployable for real without paying. Then: Solo at €149/month (one tenant), Multi-tenant at €499/month (5 tenants included, then +€35/month per active tenant). MSSPs have a dedicated page.
Ready to secure your Microsoft 365?
Connect your tenant and deploy your first protection in 15 minutes. No credit card required.
Start the free trial