Microsoft & IGEL

IGEL OS offers a great digital workspace experience for users accessing AVD, W365, or any Microsoft solutions. It is a next-gen endpoint operating system that enables easy, smart, and secure management and control of virtual desktops and cloud workspaces. It is also the first Linux-based OS that Microsoft has validated and certified for AVD access.

IGEL OS specifically suits organizations looking to:

Protect their endpoint devices from malware
Streamline with multi-session Windows 10 virtual desktops
Move to Windows 10 or 11
Join together and standardize all endpoints into one management and control platform
Reduce the excess costs and time associated with maintaining windows on individual endpoints
Streamline with multi-session Windows 10 virtual desktops.

Question: My Customer uses Intune… Can IGEL do something similar?

Organizations that use INTUNE are looking to help secure and manage the endpoints connecting to Microsoft Solutions in the hybrid cloud.

(picture taken from learn.microsoft.com )

The IGEL OS is designed from the ground up to help secure and manage endpoints connecting to Microsoft services delivered from the cloud or data center.

To ensure your customers are comfortable with the transition to IGEL as the lightweight OS to connect to Microsoft services. Please review the comparisons below regarding endpoint management.

Function	Microsoft Service	IGEL Service
Asset Management	Microsoft Endpoint Management (MEM)	Universal Management Suite (UMS)
Device Deployment	Windows Autopilot	UMS + COSMOS OnBoarding Service (OBS)
Endpoint Configuration	MEM Intune	Universal Management Suite (UMS)
Performance Analytics	Endpoint Analytics	Insights
Desktop Environment	Azure Virtual Desktop / Windows 365	Azure Virtual Desktop / Windows 365
Device Protection	Microsoft Defender	Read-Only OS
Device Maintenance	Windows Autopatch	UMS + COSMOS App Portal (APP)

A Breakdown of Services:

MICROSOFT SERVICE	IGEL SERVICE
Configuration Manager For on-premises endpoint management and Windows Server, including deploying software updates and managing data centers You can use Intune and Configuration Manager together in a co-management scenario, tenant attach, or both. With these options, you can benefit from the web-based admin center and other cloud-based features in Intune.	IGEL UMS (Universal Management Suite) Can help deploy patches and manage configurations remotely without a VPN through a web console. The UMS allows administrators to configure parameters, set up profiles and scheduled jobs, and administer IGEL OS updates and application patches. Additionally, the UMS offers secure shadowing capabilities, enabling IT and help desk personnel to troubleshoot remote or work-from-home endpoints without requiring a VPN.
Windows Autopilot For modern OS deployment and provisioning, With Windows Autopilot, you can provision new devices and send these devices directly to users from an OEM or device provider. You can re-image existing devices using Windows Autopilot and deploy the latest version.	IGEL Onboarding Service The new Onboarding Service provided by IGEL allows customers to provision a new endpoint easily. This service deploys all the necessary information and certificates to the device, automatically bringing it under the management of the customer's IT department. To ensure security, authentication via a preconfigured Identity Provider is prompted, ensuring that only devices belonging to the company are controlled. The Onboarding Service enables quick and secure onboarding of new endpoints, reducing the dependency on IT support and leaving a positive impression on new employees.
Endpoint analytics For visibility and reporting on end-user experiences, including device performance and reliability Endpoint analytics can help identify policies or hardware issues that slow down devices. It also guides you to help you proactively improve end-user experiences and reduce help desk tickets.	IGEL Insight Generates proactive recommendations based on telemetry data collected on the IGEL endpoints. This data optimizes the usage of IGEL's product portfolio. The service provides per-device insights and creates reports specific to each environment, identifying outdated apps or devices that may not meet hardware requirements for deployed unified communication solutions.
Microsoft 365 / Azure Virtual Desktop / Windows 365 for end-user productivity Office apps, including Outlook, Teams, Sharepoint, OneDrive, and more Using Intune, you can deploy Microsoft 365 apps to users and devices in your organization. You can also deploy these apps when users sign in for the first time.	Microsoft 365 / Azure Virtual Desktop / Windows 365 IGEL offers secure and easy-to-manage access to Microsoft 365 solutions by providing centralized management, consistent policies, and security measures across diverse endpoints and leveraging technologies like Citrix, VMware, AWS, and Microsoft.. This ensures streamlined access and enhances security for Microsoft 365 applications and services.
Microsoft Defender for Endpoint To help enterprises prevent, detect, investigate, and respond to threats In Intune, you can create a service-to-service connection between Intune and Microsoft Defender for Endpoint. When they're connected, you can create policies that scan files, detect threats, and report threat levels to Microsoft Defender for Endpoint. You can also create compliance policies that set an allowable level of risk. When combined with conditional access, you can block access to organization resources for devices that are noncompliant.	IGEL OS The operating system incorporates various integrated security features and mechanisms to enhance system integrity and deter attackers. It supports multi-factor authentication and single sign-on technologies, providing access control through smart card readers and biometric solutions. IGEL OS is designed as a modular, read-only, and tamper-proof firmware base, minimizing the attack surface and protecting against breaches. The OS also features a chain of trust for end-to-end system integrity verification during boot-up. IGEL's security focus, combined with encryption and real-time configuration management, reduces the chances of compromise.
Windows Autopatch For automatic patching of Windows, Microsoft 365 apps for enterprise, Microsoft Edge, and Microsoft Teams Windows Autopatch is a cloud based service. It keeps software current, gives users the latest productivity tools, minimizes on-premises infrastructure, and helps free up your IT admins to focus on other projects. Windows Autopatch uses Microsoft Intune to manage patching for Intune-enrolled devices or devices using co-management (Intune + Configuration Manager).	IGEL UMS IGEL's patch management capabilities prioritize efficiency and security. Updates and patches for IGEL OS are small in size and frequency compared to Windows. They are distributed using a network-friendly "buddy update" technique, minimizing bandwidth consumption. IGEL OS updates can be easily executed via a console drag-and-drop, allowing for quick deployment on endpoint devices. IGEL OS verifies the update process at each endpoint to ensure a secure process. These capabilities streamline the patching process, reduce the burden on IT staff, and protect user endpoint devices from threats.