Managed Endpoint: Securely managing devices
Claranet takes care of the standardised operation of your endpoint management environment: from Microsoft Intune and Windows Autopilot, through policies, applications and updates, to Microsoft Defender for Endpoint. Four clearly defined service and consultancy packages, experienced Microsoft specialists and German-speaking support take the strain off your IT team when it comes to day-to-day device management.
Why should you have endpoint management provided as a managed service?
Modern workstations comprise different classes of devices, operating systems and usage scenarios. Windows, macOS, iOS, iPadOS and Android devices must be securely deployed, uniformly configured, regularly updated and managed throughout their entire lifecycle. The range of features may vary depending on the operating system, hardware and management platform used.
Increasing operational complexity
Microsoft Intune, Autopilot, Endpoint Security, compliance policies and mobile device management are constantly being developed. Without dedicated specialists, the administrative burden, complexity and operational risks increase.
Security and compliance risks
Out-of-date devices, faulty security policies or inadequately monitored compliance requirements can lead to security vulnerabilities and audit findings.
Shortage of specialists
Experienced specialists in modern endpoint management, Microsoft Intune and endpoint security are hard to find and retain in the long term. At the same time, demands regarding security, compliance and automation are on the rise.
Unclear responsibilities
Device management encompasses a range of processes, from deployment and configuration right through to updates and security policies. Without clear lines of responsibility, changes, faults and decisions are delayed.
Lack of transparency
Many organisations do not have a complete overview of device status, compliance status, software versions or security configurations. As a result, risks often go undetected for a long time.
Scaling as the business grows
New staff, additional sites and corporate acquisitions place greater demands on the provision, management and governance of end devices. Without standardised processes, operational costs rise disproportionately.
This is where Claranet’s Managed Endpoint service comes in: with Microsoft specialists, advice on further developing your environment, clearly defined responsibilities set out in writing, and regular reporting.
An overview of managed endpoint service and consultancy packages
Four steps to managed endpoint operations
Consultation and assessment
Claranet analyses your existing endpoint management environment, assesses its current operational status and identifies opportunities for improvement. In addition, Claranet takes into account your requirements regarding the scope of services, responsibilities and add-ons, and recommends the most suitable service package.
Service Design and Contract
The scope of services, responsibilities and operational processes are set out in writing. Additional service modules and individual requirements are taken into account where necessary and governed by contract.
Onboarding and Transition
A structured handover of operations, including full documentation of your endpoint management environment. Claranet sets up the necessary service processes and carries out an initial audit.
Stability and optimisation
Operation in accordance with the agreed scope of services, including regular service reviews and specific recommendations. Claranet provides information on relevant platform changes, new features and opportunities for improvement.
The benefits of choosing Claranet as your Managed Endpoint Service Provider
Specialists in Intune, Autopilot and Defender
Experienced specialists in Microsoft Intune, Windows Autopilot and Microsoft Defender for Endpoint look after your environment. In addition, Claranet has direct access to Microsoft resources, technical information and product roadmaps.
Scope of services and responsibilities set out in writing
The scope of services, responsibilities and service processes are set out in the contract. This ensures that services and responsibilities are clearly defined.
Health checks and service reviews with specific recommendations
As part of its Health Checks and Service Reviews, Claranet assesses the security and compliance settings of your endpoint environment and identifies specific measures for improvement.
Compliance requirements implemented directly within the platform
Claranet implements your compliance requirements technically within the endpoint management platform and supports you in adhering to established security and governance guidelines.
Adjust the number of devices and the package whilst the system is running
The number of devices, the range of functions and the service level can be expanded or reduced whilst the system is running, without having to restart the operational process.
Reports on compliance, updates and device statuses
Regular reports and service reviews provide a clear overview of compliance status, update success, device statuses and measures implemented.
Talk to our endpoint experts
During a free initial consultation, we will analyse your current endpoint management environment and discuss which service package is best suited to your business. We are vendor-neutral and there is no obligation.
Managed Endpoint Service packages. Full details
SUITABLE FOR
IT teams with in-house endpoint expertise and a need for ad hoc support
ORIENTATION
- Support as required
- Advice on endpoint management and endpoint security
- Regular health checks
- No takeover of day-to-day operations
ENDPOINT MANAGEMENT
- Advice and support as required
- Support with complex configuration issues
- Ad hoc assessment of the endpoint management environment
EQUIPMENT & PROVISION
- Advice and support as required
- No ongoing device management
- No responsibility for enrolment and deployment processes
SOFTWARE & UPDATES
- Advice and support as required
- No ongoing software distribution
- No regular patch and update management
SECURITY & COMPLIANCE
- Advice and support as required
- Assessment of existing security and compliance configurations
- Recommendations for action as part of agreed audits
REPORTING & INSIGHTS
- Findings and recommendations arising from agreed-upon audits
- No ongoing reporting
SERVICE MANAGEMENT
By arrangement
LICENCE TERMS: No minimum requirement
BILLING: Quota-based
SUITABLE FOR
Organisations requiring stable, basic operation of their endpoint management environment
ORIENTATION
- Basic administration
- Standardised equipment operation
- Reactive support
- Stabilisation of operations
ENDPOINT MANAGEMENT
- Operation and administration of Microsoft Intune
- Management of configuration profiles and policies
- Management of enrolment and deployment profiles
- Implementation of defined standard changes
EQUIPMENT & PROVISION
- Enrolment of Windows, macOS, iOS, iPadOS and Android devices
- Windows Autopilot
- Management of existing devices
- Assignment of existing configurations, policies and applications
- Remote actions such as wipe, reset and lock
- System-level decommissioning of devices
SOFTWARE & UPDATES
- Operating system and security updates
- Management of update policies and deployment configurations
- Monitoring of update and rollout status
- Management and distribution of existing applications
- Mobile application management and app protection policies
- Updating and packaging of applications on a quota or cost basis
SECURITY & COMPLIANCE
- Basic endpoint security with Microsoft Defender for Endpoint Plan 1
- Management of endpoint security policies
- Attack surface reduction
- Firewall and application protection
REPORTING & INSIGHTS
- Basic reports on device, update and policy status
- Provision of existing reports on request
- Annual health check
SERVICE MANAGEMENT
By arrangement
LICENCE TYPE: M365 Business Premium or M365 E3
BILLING: Price per managed endpoint
SUITABLE FOR
Organisations focusing on security, compliance and enhanced management of their end devices
ORIENTATION
- Comprehensive support
- Advanced endpoint security
- Compliance and governance
- Ongoing development
ENDPOINT MANAGEMENT
Everything from Bronze and
- Advanced features from Microsoft Intune Plan 2
- Enterprise Application Management
- Endpoint Privilege Management
EQUIPMENT & PROVISION
Everything in bronze and
- Management of compliance policies
- Support with the integration of conditional access
SOFTWARE & UPDATES
Everything in bronze
SECURITY & COMPLIANCE
- Microsoft Defender for Endpoint Plan 2
- Advanced security and compliance features
- Device Control
- Management of compliance policies
- Support for Conditional Access
REPORTING & INSIGHTS
- Advanced reporting and analytics
- Reports on update compliance and security status
SERVICE MANAGEMENT
- Monthly reporting & regular meetings
- Advice on the further development of the endpoint environment
LICENCE TYPE: M365 E3 + M365 E5 Security
BILLING: Price per managed endpoint
SUITABLE FOR
Organisations with particularly demanding, bespoke or regulatory requirements
ORIENTATION
- Tailored services
- Special regulatory issues
- Strategic development
ENDPOINT MANAGEMENT
Everything in silver
EQUIPMENT & PROVISION
Everything in silver
SOFTWARE & UPDATES
Everything in silver
SECURITY & COMPLIANCE
Everything in silver
REPORTING & INSIGHTS
Everything in silver
PERSONALISED SERVICE SUPPORT
- Erhöhte Health-Check-Frequenz
- Strategie-Review & individuelle Themen
- DORA, NIS2, BaFin, ISO 27001
- Begleitung reg. Sonderprüfungen
LICENCE TYPE: M365 E3 + M365 E5 Security
BILLING: Price per managed endpoint
Frequently Asked Questions about Managed Endpoint
-
‘Managed Endpoint’ means that Claranet takes over the operation of a company’s endpoint management environment. This includes the administration of Microsoft Intune, Microsoft Defender for Endpoint, device provisioning, policy management, software distribution, patch and update management, and defined lifecycle processes for managed endpoints. The managed service provider handles incidents, changes and service requests, and provides regular reports on the status of the environment. This relieves the internal IT team of recurring operational tasks.
-
The three packages differ in terms of the scope of endpoint management features, the depth of security and the level of personalised support. Bronze covers the basic operation of Microsoft Intune, including device management, software deployment and patch management. Silver extends the scope of services to include additional security, compliance and reporting features such as Microsoft Defender for Endpoint Plan 2, compliance policies and conditional access. Gold includes all the services from Silver and adds bespoke support services as well as guidance on regulatory requirements and specialist topics.
-
For the Bronze package, we recommend at least Microsoft 365 Business Premium or Microsoft 365 E3. For Silver and Gold, we recommend Microsoft 365 E3 in combination with Microsoft 365 E5 Security or comparable licensing models. Claranet can assist you in selecting the appropriate licensing.
-
Yes. We regularly review together whether the agreed scope of services still meets your current needs. Adjustments will be made if necessary.
Provided that the Microsoft 365 licences are also procured through Claranet, the licences will be invoiced based on your current licence requirements for each billing period.
-
The Managed Endpoint Advisory package provides a block of hours for ad hoc, on-demand support from Claranet experts, without any ongoing operational responsibility. Operational responsibility remains entirely with the client’s in-house IT team.
The package is aimed at organisations with in-house endpoint expertise who wish to draw on external specialist knowledge from time to time, for example for security reviews, best-practice assessments, architectural issues or complex configuration tasks.
-
The Managed Endpoint Service supports Windows, macOS, iOS, iPadOS and Android devices, provided that these are technically supported by the relevant manufacturers and management platforms. The range of available functions may vary depending on the operating system and manufacturer. The technical capabilities of the respective platform are decisive.
-
Microsoft provides support exclusively for the underlying platform. A managed service provider such as Claranet also takes care of day-to-day operations and configuration within the customer’s environment. This includes device configurations, security policies, software deployment, patch management, compliance requirements and lifecycle processes. In the event of platform-related issues, Claranet handles coordination and escalation with Microsoft. The customer has a single point of contact for day-to-day operations.
-
Yes. The management of Microsoft Defender for Endpoint is included in the Managed Endpoint Service. The specific scope of functionality depends on the service package selected and the existing licensing. However, active handling of security incidents, SOC services or incident response services are not included in the standard scope of services.
-
Yes. The service covers the management of existing applications, software allocation and the technical deployment of applications via Microsoft Intune. Depending on the service package, regular updates to existing applications and the packaging of new applications may also be possible. Technical application testing and approval remain the responsibility of the client.
-
Yes. It is possible to switch packages whilst the service is running, without having to draw up a new contract. When upgrading to a higher-tier package, additional workloads and security features are incorporated as part of the defined onboarding process.
