At Xylos, our consultants have been actively working with the Intune Suite since its launch. We've extensively tested the features, validated deployment scenarios, and developed best practices to help our customers get more value out of their endpoint environment. Now that Microsoft is integrating parts of the Suite into E3 and E5, we're happy to give you a clear overview of what to expect and how to prepare.

Organizations with a Microsoft 365 E3 license will soon get access to capabilities that until now required a separate Intune Suite license. These features make device management easier and strengthen security.

Intune Remote Help
A cloud solution for secure helpdesk connections, directly integrated with Microsoft Intune and Entra ID.

Intune Advanced Analytics
Provides in-depth insights into the health of end-user devices, such as battery performance, boot times, and reliability indicators. Ideal for proactive optimization.

Tunnel for Mobile Application Management
A lightweight VPN solution for personal mobile devices, providing secure access to on-premises applications without full device enrollment.

Specialty device management & firmware updates
Support for niche or ruggedized devices, combined with centralized firmware management through over-the-air updates.

E5 users receive all the features above, supplemented with additional security and automation capabilities.

Endpoint Privilege Management
Lets standard users (without admin rights) perform tasks that temporarily require elevated privileges. Just-in-time access significantly reduces the attack surface.

Enterprise Application Management
A Microsoft-managed application catalog that greatly simplifies packaging, updating, and deploying business applications.

Microsoft Cloud PKI
A cloud-based service that automates and secures certificate management. This lets organizations easily authenticate their users or devices for VPN or Wi-Fi.

Microsoft will start the rollout in 2026. Organizations will receive a notification in the Microsoft 365 admin center at least 30 days in advance.

This blog post was written by Michiel Raman, Senior IT Consultant Modern Workplace at Xylos.