We use cookies on our website to analyze website usage and to help secure the website against misuse. Advertising and functional cookies are not used in our site or our web application products.
By clicking “Accept Essential Cookies Only”, you consent to us placing these cookies.
For most managed service providers (MSPs), Microsoft Intune has become an essential tool for endpoint management. It is helpful in securing and managing Windows, macOS and mobile devices.
However, the problem with this approach arises when MSPs deal with clients whose businesses scale into complex environments. Intune is great for endpoint management but can’t track many functions that MSPs must manage. In a nutshell, MSPs can't use Intune as an IT Asset Management tool. Here's some of the functions we will need which are not provided by Intune:
The above is almost a "todo list", and while you might not need all of them, almost all MSPs need many of these functions.
Strategically the right approach is to let Intune do its job - endpoint management - and use other tools like xAssets ITAM to leverage Intune data and build a full lifecycle IT Asset Management system with Intune as the base.
It is rare for clients to operate in perfectly managed conditions. These unmanaged assets create messy tech environments: equipment gets lost, obsolescent servers remain powered on but undocumented, cloud solutions are deployed without proper documentation, and entire device categories never even interact with Intune. This responsibility of managing an environment with hidden endpoints is an operational risk for MSPs.
This article explains why Intune alone can't deliver the solution MSPs are looking for and how utilizing a unified IT Asset Management (ITAM) lifecycle is a more effective approach. Using an advanced ITAM platform like xAssets provides better asset visibility, excellent time to value, efficient tracking, and reporting.
Intune is excellent at managing enrolled devices - but in reality, these make up just one piece of the puzzle. Realistic IT environments contain:
In addition, although Intune collects data on some software titles, it does not provide a comprehensive view of all software installations on a PC - only those titles which it manages. Using a discovery tool such as xAssets Network Discovery as part of an ITAM solution uncovers all installed software, including unauthorized or unlicensed applications that may pose security risks.
These asset categories are often undiscovered by Intune – meaning Intune cannot provide procurement, warranty or lifecycle data. MSPs trying to manage these kinds of endpoints using Intune alone have a difficult time, resulting in inconsistent reporting and operational inefficiencies.
Intune naturally integrates with apps like Entra, 365, Defender, SCCM, Teams, Windows Update, and other apps, but only where needed to provide it's core functions. Those integrations are not used to provide a comprehensive inventory, and that's what you need to create a central asset repository. As well as a good discovery tool, a competent ITAM system needs connectivity to MS apps including Entra, AutoPilot, etc, and also Purchasing, Accounts, Discovery Tools, Monitoring tools, Microsoft System Center, MDMs, and other sources of data.
Properly architected ITAM solutions integrate to all the apps and cloud services you have which store useful asset inventory data. For example, xAssets integrates to these applications, centralizing data from all the apps you have into a centralized "single pane of glass":
This is where Advanced ITAM comes in – filling the gaps that Intune cannot address. It is essential that every asset, enrolled or not, is discovered and accounted for. This requires a combination of agentless discovery, solutions for remote and mobile devices, and the ability to track equipment that Intune cannot reach.
Adopting a system that ties together discovery information with procurement records, warranty data, support contracts, lifecycle stages and disposal history allows you to make sense of your data since it’s all in one place.
| Capability | Microsoft Intune | Advanced ITAM | Value for MSPs |
|---|---|---|---|
| Device enrollment management | Core endpoint mgmt | ||
| Agentless discovery | Finds hidden assets | ||
| CMDB | Normalized, enriched data | ||
| Multi-tenancy | Limited | MSP operational model | |
| Procurement & lifecycle | Full asset history | ||
| Contract/warranty mgmt | Cost savings | ||
| Workflow automation | Limited | Standardization |
Advanced ITAM platforms add a set of capabilities complementing the limitations met when using Intune alone:
The approach for high-performing MSPs is to use ITAM in conjunction with Intune, filling the gaps in data while still utilizing Intune’s core features.
The process starts with discovery, using both agentless and efficient agent scans to capture a wide range of asset data, as well as importing data from Intune. Once devices have been discovered, the Configuration Management Database (CMDB) normalizes and cleans the data: duplicate records are removed, each device recorded by a unique identifier, and every asset has one complete record including purchase details, warranty info, servicing, licensing, location data etc.
A vital component of an Advanced ITAM environment also relies on the system’s ability to connect and integrate with all your other tools: Remote Monitoring and Management (RMM), Intune, Active Directory, JAMF – this enables automated updates that can trigger tickets and alerts. MSPs can utilize this to set up customized processes for their clients:
Finally, an advanced ITAM approach is designed to give MSPs one clear view of all assets across each and every client. Dashboards, KPIs, and scheduled reports all rely on the precision of data from discovery and the proficiency of the CMDB in normalizing the data to produce accurate results – leading to a complete, detailed overview of each asset.
Successful MSPs do not deploy ITAM to their entire client base at once. Instead, they begin with a targeted pilot. They run a discovery scan, reconcile the results with Intune, import procurement information and create the first complete asset baseline the client has likely ever seen. Once the data is accurate, they define standard workflows for onboarding, offboarding and lifecycle transitions. Integrations with PSA and RMM follow, allowing service tickets and asset updates to remain in sync.
Within a single month, the MSP can generate its first meaningful win—often a license reclamation, a warranty risk report or a three-year refresh plan. That outcome becomes the template for repeatable ITAM implementation across the rest of the client portfolio.
This methodical, template-driven rollout is what transforms ITAM from a project into an operational discipline.
ITAM’s business impact thrives when asset lifecycle data is complete and reliable.
Here are some of the key benefits:
No two clients operate in the same way. A financial institution may require multi-step approvals for device disposal; a construction firm may need a simple, rapid onboarding process; a healthcare organisation may need strict tracking of devices used by clinical staff. Intune can’t accommodate these different client models because it isn’t designed to do so. Advanced ITAM platforms, however, can cater to these specific requirements.
Configurable workflows allow MSPs to embody each client’s operating model in a repeatable, auditable process. They enable consistency across technicians, reduce human error and support scaling without service degradation. For MSPs growing into larger, more regulated client environments, this becomes a competitive differentiator.
The shift from device management to asset lifecycle management naturally creates higher profit margins. MSPs introduce managed ITAM subscriptions that include continuous discovery, lifecycle tracking, and compliance reporting. They offer software licencing audits that identify unused subscriptions and overspend. They provide ongoing warranty oversight and coordinate replacements or renewals on behalf of clients. All these services enhance client value while giving MSPs the operational efficiency to preserve the MSP-client relationship.
Intune remains important, but fails to bring everything MSPs need to the table. It is only through the implementation of ITAM alongside Intune that MSPs can transform endpoint management to deliver full lifecycle services.
The best way to get started is by selecting a single client where you can test your ITAM setup alongside Intune. First, run a complete discovery of all devices including endpoints, servers, and any other hardware on your network, and import and existing intune data. Also switch on integrations to AD and Entra so you get clear user data. Check thoroughly that the asset records are accurate and as complete as possible including purchase details, warranties and licenses.
Next, you can test the workflows and integrations you plan to use – e.g. automated alerts or ticketing for devices ready for disposal. This will give you a good idea of how your processes work, and will raise any concerns before rolling-out on a bigger scale. Once everything is running as it should, you can start to apply the same approach to other clients, following the same steps as in the test run.
MSPs that combine Intune and Advanced ITAM platforms like xAssets, gain complete visibility over their assets, optimize workflow proficiency, delivering value through a tailored service to clients, regardless of the IT infrastructure they use.
xAssets also offers a consolidated instances alongside per-client instances, so MSPs can ask questions such as:
No - Intune works well as an endpoint management and security system, but doesn't support the necessary integrations, discovery attributes, or processes needed to run IT asset management effectively
Intune stores only the assets it manages. Network equipment, non-enrolled devices, and all non-network based equipment are not stored in Intune
MSPs need visibility across all clients, sites, and asset types. Intune only covers enrolled endpoints and does not include procurement, lifecycle tracking, contracts, warranties, software licensing, or financial data.
No, Intune does hold some applications, but discovery tools and SCCM store much deeper information on the software installed on an endpoint.
Intune does not support procurement or lifecycle workflows. It has no modules for ordering, receiving, stock management, refurbishment, storage, or controlled disposal.
Free instances are free forever and can show demo data or your data.
