Blog Post

Microsoft Intune Blog
2 MIN READ

Microsoft Intune announces device-only subscription for shared resources

Mayunk_Jain's avatar
Mayunk_Jain
Icon for Microsoft rankMicrosoft
Nov 01, 2018
The meaning of “devices” has evolved in the modern workplace, with IT expected to support not only corporate PCs and bring-your-own (BYO) devices, but also manage kiosks, shared single-purpose devices, phone-room resources, collaboration devices such as Surface Hub, and even some IoT devices. Microsoft Intune is the most comprehensive unified endpoint management platform to manage and secure this proliferation of endpoints in your organization. We are excited to share a licensing update today that further lowers your total cost of ownership (TCO).
 
Microsoft Intune is pleased to announce a new device-only subscription service that helps organizations manage devices that are not affiliated with specific users. The Intune device SKU is licensed per device per month. 
 
It is worth noting that device-based subscription does not allow you to take advantage of any user-based security and management features, including but not limited to email and calendaring, conditional access, and app protection policies. Device SKU also cannot be used for shared device scenarios where the device is managed through the user(s) on the device. Shared devices that are not affiliated with any user identity can leverage this license, for example, certain Android Enterprise purpose-build devices and kiosks as well as Windows kiosks. This license may provide compelling value for devices using enrollment methods such as Windows Autopilot self-deploying mode, Apple Business Manager or Google zero touch enrolment, where the devices are not associated with a user and no user targeted features are required, such as user-based enrollment, Intune Company Portal, conditional access, and such. 
 
For more information, please contact your Microsoft representative and review the Microsoft Licensing Terms
 
(Updated 12/20 to clarify the self-deploying use-case for Windows Autopilot)
Updated Apr 02, 2020
Version 7.0
microsoft intune
Unified Endpoint Management
  • Per Larsen's avatar
    Per Larsen
    Brass Contributor
    Dec 21, 2018

    Please make the auto MDM enrollment from AAD P1 a part of this license - so we can use Autopilot to provision KIOSK devices.

     

  • Peter Lay's avatar
    Peter Lay
    Brass Contributor
    Nov 02, 2018

    How can the Intune for Devices licenses be purchased through the Office/Microsoft 365 admin portal?

  • Mayunk_Jain's avatar
    Mayunk_Jain
    Icon for Microsoft rankMicrosoft
    Feb 12, 2020

    Hi Lynn Towle 

     

    Thanks for being an Intune customer and for sharing your feedback. 

     
    To clarify, if you already have sufficient M365 E5 or EMS/Intune user licenses to cover all your self-deploying devices, you may not need additional device-only SKU. This device license is useful when customers have, say, 100 kiosks that are not going to be associated with users but they only want to manage the device itself from Intune. If these kiosks will not have user-identity or apps such as Office 365 on them, some customers may save costs by choosing device-only subscription for these 100 kiosks instead of extending their full M365/ EMS. As mentioned above, if you do have user-association (i.e. AAD users login/ logout) on the devices, even if they are shared, then you still require the M365 or EMS/Intune licenses. 
     
    Hope this helps. Please feel free to contact your account representative if you have more questions, and we'll be happy to address them.   
     
    regards
    Mayunk
  • Nigel's avatar
    Nigel
    Iron Contributor
    Dec 02, 2018

    So this license can be used to for a self deploying autopilot Kiosk? I am in a project where we want to build a public use multi app Kiosk and self deploy with autopilot. 

  • tommygeusens's avatar
    tommygeusens
    Copper Contributor
    Sep 17, 2020

    Hi Mayunk_Jain 

     

    I have two questions:

     

    Q1:

    If you have Enterprise Mobility + Security Licenses, then do you need to purchase Intune Device Based licenses when you want to use Kiosk mode with Automatic Logon? 

     

    I ask this because I have scenario where I'm unable to use Autopilot Self-Deploying mode (due to lack off TPM 2.0). So I'd need to first sign into the device using an Azure AD user that has an Intune license. After a while the device will receive the Kiosk Device Configuration Policy, then it will reboot and automatically sign on using the local Kiosk account.   So in this scenario, would a user-based license be sufficient?

     

    Q2:

    If you're using Autopilot Self-Deploying mode to deploy Kiosks, and you only have User-based licenses (like EMS E3, Microsoft 365 E3, etc.), then how do you assign those licenses to those devices? Or is it sufficient to just have them in possession. And if it is sufficient, does that mean that you need to make sure that you "reserve" an activation for that device? For instance: you have one user who has licensed 4 Windows devices, and has 1 license left for a Kiosk device, then that person must make sure not to use the remaining license on another pc, correct?

     

    Thanks in advance.

     

     

    Sincerely,

    Tommy

  • Dennis Bensch's avatar
    Dennis Bensch
    Brass Contributor
    Nov 03, 2018

    Is it possible to describe the prerequisites for these subscription model? 

  • Nigel's avatar
    Nigel
    Iron Contributor
    Mar 25, 2019

    I have built and deployed self deploying autopilot kiosks without a device license assigned - is this expected   ?