The short answer
Managed Intune costs roughly $4 to $12 per device per month to have someone run it for you. The Intune licence itself is almost always already in your Microsoft 365 plan, so that is not the number people are really asking about. The number that matters is the cost of the work: keeping the policies, the apps, the updates and the security right every month.
EndKeep runs it at $6 per enrolled device per month, minimum $300 a month, month to month, with no lock in. Getting a tenant into a state worth managing in the first place is a one off, from a $250 Health Check up to a Hardening project that most small firms land between $2,500 and $6,000. The rest of this page explains where those numbers come from.
The licence is not the service
This is the part that confuses most budgets. Microsoft Intune is a licence, and for most small firms it is already paid for. It comes inside Microsoft 365 Business Premium, and inside Microsoft 365 E3 and E5. On its own it is around $8 per user per month. So when a provider quotes you a price for "Intune", the first question is whether they mean the licence or the management.
The licence on its own does nothing. It gives you an empty console. Someone still has to design the compliance policies, set up enrolment so new laptops configure themselves, package the applications so they install silently, build the update rings, switch on the security controls, and then watch all of it every month as Microsoft changes things underneath you. That ongoing work is the service, and it is where the real cost sits.
What the market charges
There is no single price because providers scope the work differently. These are the common models and the rough ranges we see.
| How it is billed | Typical range | Good for |
|---|---|---|
| Per device, per month | $4 to $12 | Ongoing management, predictable cost that scales with devices |
| Per user, per month | $10 to $30 | Firms where people carry several devices each |
| Hourly | $80 to $200 / hour | Ad hoc fixes, no ongoing commitment, hard to budget |
| Fixed project | $2,500 to $15,000+ | Building or migrating Intune, with a defined end |
| Dedicated engineer | $3,000 to $8,000 / month | Large estates that need someone most days |
EndKeep sits at the low end of the per device model, at $6, because the team works from Islamabad, uses the same Microsoft admin centres a local provider uses, and only sells fixed scopes we have delivered many times before. You still get a named engineer. The full price list is here.
What should be included for a monthly fee
Price means nothing without scope, so this is the checklist to hold any provider to. For a monthly managed Intune fee you should be getting all of this, not a subset.
- A documented baseline of every policy, app, ring and enrolment setting, so drift can be measured rather than guessed at
- A monthly drift and compliance review against that baseline, with conflicts and stale assignments fixed
- The application catalogue kept current, so Company Portal never offers a version from last year
- Update rings and Windows Autopatch operated and watched, with patch compliance as a number you can see
- A monthly report plain enough for a director or an insurer to read
- Small changes inside the fee, with larger projects quoted separately before they start
- A named engineer who knows your tenant, not a ticket queue, with agreed response times
What usually costs extra
An honest monthly fee has edges. These are normally scoped and quoted as projects, not folded into the per device price, and a provider who pretends otherwise is either going to cut corners or surprise you later.
- Standing up Intune from nothing, or migrating off SCCM or another MDM
- Rolling out a new platform, such as adding Macs or Android when you only had Windows
- Large application packaging waves, as opposed to keeping the existing catalogue current
- Onsite work, hands on hardware, and end user training
What it costs to get there first
If your tenant was set up once and never looked at again, management is the second step, not the first. The first step is finding out what state it is in and fixing it. Those are fixed prices too.
| Step | What it is | Price |
|---|---|---|
| Security Health Check | A two day, read only look at the settings that matter most, with one page of findings. | $250 |
| Full Security Assessment | The whole tenant scored against Microsoft best practice and the CIS benchmark, with a priced roadmap. | $750 |
| Hardening and Build | Implementing the roadmap in an agreed order with a defined end. | $2,500 to $6,000 |
| Managed Intune | Running it month to month once it is in good shape. | $6 / device / month |
The $250 Health Check comes off the Full Assessment if you go on to it within thirty days, and the $500 onboarding baseline is waived after a Hardening project. So the path from "we are not sure what we have" to "it is managed" has no wasted spend built into it.
How EndKeep prices it
Managed Intune is $6 per enrolled device per month, minimum $300, invoiced monthly in advance on the device count on the invoice date. No initial term, stop any month after paying the invoices already approved. Everything we configure belongs to you, so there is nothing to unwind if you leave. Why it is roughly half of a comparable US or UK provider: the team is in Islamabad, the tooling is the same Microsoft consoles, and we only sell fixed scopes we have run many times. You get a named engineer either way.
See what Managed Intune includes Book a 15 minute call
Common questions about the cost
Is Intune free if I have Microsoft 365 Business Premium?
The Intune licence is included in Business Premium, and in Microsoft 365 E3 and E5, so you are not paying extra for the licence. What costs money is the work: designing the policies, enrolling the devices, packaging the apps, and keeping it right every month. A licence with nobody running it is where most of the problems we see come from.
How much does it cost to outsource Intune management?
Across the market, managed Intune runs roughly $4 to $12 per device per month depending on how much is included and who is doing it. Some providers charge per user instead, some bill hourly, and most quote projects separately. EndKeep runs it at $6 per enrolled device per month, minimum $300 a month, month to month.
Per device or per user, which is cheaper?
It depends on how many devices each person carries. Per user is simpler to forecast and often cheaper when people have two or three devices each. Per device is fairer when most people have one laptop and some have none. We price per enrolled device because that is what the work actually scales with, and you only pay for devices that are really under management.
Is there a minimum?
Yes, $300 a month. Below about fifty devices the per device price would not cover a named engineer and a proper monthly cycle, so the minimum sets a floor. There is a one off onboarding baseline of $500 for the first cycle, waived if you have had a Hardening project or a Full Assessment with us in the last ninety days.
Do we pay for Microsoft licences through you?
No. Licences stay billed by Microsoft or your existing reseller. We do not take a margin on licences. We do tell you which ones you are paying for and not using, which on most tenants we look at covers our fee on its own.