What is Intune for Education?

Microsoft Intune for Education is a cloud-based mobile device management (MDM) service for schools. It helps your teachers and students stay productive on classroom devices and keeps school data secure.

By using Intune for Education, you can:

• Manage the desktop and mobile devices students use to access classroom data.
• Configure and assign the apps students use in the classroom.
• Control how students and teachers access and share classroom information.
• Apply school security requirements to devices and apps.

The Intune for Education portal includes only the settings and workflows you need to manage iOS and Windows school devices. From the portal, you can view and take action on your device, user, and app inventory. Intune for Education also supports the Take a Test app, which lets teachers securely administer online assessments from classroom devices.

Sign up for Intune for Education

If you don't already have an Intune for Education account, learn how to get started. The article is for system administrators who are ready to sign up their school for an Intune subscription.

Manually add users to Intune subscription

If you don't use the Microsoft School Data Sync (SDS) service to import student and teacher records, you must manually add users to your Intune subscription. SDS automatically creates groups for each school and creates student and teacher groups from your school's roster data. If you don't use SDS, you can add students and teachers through the Microsoft Intune admin center or through the Microsoft 365 admin center. You should also grant admin permissions at user-setup time.

Supported OS and browsers

Intune for Education supports school devices running:

• Windows 11
• Windows 11 SE
• iOS/iPadOS

The full Microsoft Intune management service supports devices running Android, iOS, macOS, and Windows. To view a complete list of Intune-supported web browsers and operating systems, see Supported operating systems and browsers in the Microsoft Intune documentation.

Enroll devices

Before you can manage devices in Intune for Education, you need to enroll them. Enrollment connects each device to your Intune subscription so you can apply settings, deploy apps, and monitor activity. The best enrollment method for your school depends on factors like your district size, the number of devices you're managing, and the staff you have available. For an overview of enrollment options, see How should I enroll devices?

Organize users and devices into groups

Intune for Education uses groups to organize the users and devices in your school. A group is a collection of users, such as a class of students, or devices, such as a set of shared classroom PCs. Groups are organized in a hierarchy, so settings you apply to a parent group are automatically inherited by its subgroups. For example, settings you apply to "All students" also apply to "Grade 5 students."

For more information, see Settings inheritance and What are group settings?

Set up groups quickly with Express Configuration

Express Configuration is a guided setup in Intune for Education that walks you through applying the most commonly used school settings to a group. Settings are preconfigured with Microsoft-recommended values, but you can adjust them to match your school's policies. Express Configuration is the fastest way to get your school's devices ready to use.

For more information, see Express Configuration in Intune for Education.

Configuring your Intune for Education tenant

Tenant refers to your organization's instance of Intune for Education. Settings at the tenant level affect your organization's Intune subscription. Intune for Education has both General settings and iOS Device Management tenant settings.

General settings

The General tenant settings page collects your school's IT contact and resource information. Most of this information is optional, but it's useful to provide an IT point of contact for students and faculty. For more information about editing general settings, see Edit general tenant settings.

iOS device management settings

iOS Device Management settings require information about your Apple accounts. Configure these settings if your organization wants to manage iOS devices in Intune. Until you configure device management for iOS, you can't see or manage iOS-related settings in Intune for Education.

For more information about setting up iOS device management for your school, see Set up iOS device management.

Only delegated admins in Intune for Education can view and change tenant settings.

Does Intune for Education work on shared devices?

Intune for Education works with shared devices and supports managing multiple users on a single device. Students who share a device can have different apps and settings targeted to them. When students sign in to a device, they see only the apps and settings assigned specifically to them.

Manage devices remotely

If you're in a different location than a device or its user, you can use remote actions in Intune for Education to help troubleshoot. Available actions include locking a device, restarting it, or wiping it to factory settings.

For more information, see Manage devices remotely.

View reports

Intune for Education provides reports that show current device, app, settings, and health inventory for your school. You can review reports in the admin center or download them to share offline.

For more information, see View and download reports.

Compatible resources and tools

You have access to other Microsoft management tools such as:

• Microsoft Intune admin center, the full device, app, and user management experience
• Microsoft Entra ID, the identity and access management system
• Microsoft School Data Sync
• Microsoft 365 Education

Use Intune for Education with Microsoft Education tools such as:

• Set up Microsoft 365 for business
• Windows for Education
• Minecraft: Education Edition