Export (0) Print
Expand All

Requirements for Windows Intune

Updated: April 1, 2014

Applies To: Windows Intune

Use the information in this topic to learn what Windows Intune requires of your infrastructure and of devices that you manage.


Requirement types More information

Infrastructure requirements

  • Network infrastructure such as firewalls and proxy server configurations

  • On-premises infrastructure that you can integrate with your subscription

Device requirements

  • Supported mobile device and computer operating systems including minimum hardware requirements and versions

  • Required software and configurations for the Windows Intune client that you install on Windows computers

Web browsers requirements

  • Supported web browsers for administration and access to the company portal website

Windows Intune requires your network infrastructure to pass communications between the devices you manage and use to manage your subscription, and the websites on the Internet that the cloud-based service uses.

There is no requirement to use on-premises infrastructure (like a server where you must install software), but there are options to use on-premises infrastructure including Exchange and Active Directory synchronization tools.

To manage computers that are behind firewalls and proxy servers, you must set up firewalls and proxy servers to allow communications for Windows Intune.

Managed devices require configurations that let All Users access various services through firewalls.

The following table lists the domains and services that the Windows Intune client accesses.





Windows Intune and related services


80 and 443


80 and 443


80 and 443


80 and 443


80 and 443




80 and 443


80 and 443


80 and 443


80 and 443

Microsoft Update Services


80 and 443


80 and 443


80 and 443



80 and 443


80 and 443


80 and 443


80 and 443


80 and 443

DNS lookup requests



Documentation, Help, and support


80 and 443


80 and 443











1 This domain is required for JQuery support when you use the company portal website.

To manage computers that are behind a proxy server, consider the following:

  • The proxy server must support both HTTP and HTTPS because Windows Intune clients use both protocols.

  • Windows Intune supports unauthenticated proxy servers.

You can modify proxy server settings on individual client computers, or you can use Group Policy settings to change settings for all client computers that are located behind a specified proxy server.

You can also use a proxy server that caches content to reduce network bandwidth use by Windows Intune clients. For more information, see Reduce network bandwidth use in the What to know before setting up Windows Intune topic.

The following table identifies on-premises infrastructure you can use with Windows Intune.


Infrastructure More information

On-Premises Exchange Connector

Use the On-Premises Exchange Connector to synchronize data from Exchange Server:

  • If your instance of Exchange Server is on-premises, you must download, install, and set up the Windows Intune On-Premises Connector on a computer in your infrastructure. This connector can also connect to Exchange in the cloud.

  • If your instance of Exchange Server is hosted in a cloud-based service, you can install and configure the On-Premises Exchange Connector, or you can configure the built-in Service to Service Connector which does not require an on-premises server to host the connector.

Before you can use either connector to connect Windows Intune to your Exchange Server, you must set up Active Directory synchronization so that your local users and security groups are synchronized with your instance of Azure AD. For information see Task 3: Add users and assign licenses for your subscription.

Proxy server

If you manage clients that access the Internet through a proxy server, see Requirements for proxy servers .

You can also use a proxy server that caches content to reduce network bandwidth. For more information, see Reduce network bandwidth use in the What to know before setting up Windows Intune topic.

The following table lists the requirements for the computer where you install the On-Premises Exchange Connector.


Requirement More information

Operating systems

Windows Intune supports the Exchange Connector on a computer that runs any edition of the following operating systems:

  • Windows Server 2008 SP2 64 bit

  • Windows Server 2008 R2

  • Windows Server 2012

  • Windows Server 2012 R2

The connector is not supported on any Server Core installation.


The computer where you install the connector requires the following minimum hardware:

  • 1.6 GHz CPU

  • 2 GB ram

  • 10 GB of free disk space

Additional software

The following must be installed on the computer that hosts the connector:

  • Full installation of Microsoft .NET Framework 4

  • At a minimum, Windows PowerShell 2.0

The connector is not supported on a computer that runs an Exchange Server role.


The computer where you install the connector must be in a domain that has a trust relationship to the domain that hosts your Exchange Server.

The computer requires configurations to enable it to access the Windows Intune service through firewalls and proxy servers over Ports 80 and 443. Domains used by Windows Intune include:

  • manage.microsoft.com

  • *manage.microsoft.com

  • *.manage.microsoft.com

The Service to Service Connector supports only cloud-based Exchange and has no requirements for on-premises infrastructure.

However, to use this connector, the following must be true:

  • You have an Office 365 subscription that has an Exchange Server 2013 tenant. So long as the tenant is Exchange Server 2013, the connector supports Exchange Server 2010 in that same environment.

  • The user account that you use to install the Exchange Connector must be a tenant administrator for Windows Intune and be an administrator in the Exchange tenant with a license to use Exchange Server 2013.

The following sections identify requirements for mobile devices and computers that you plan to manage with Windows Intune.

The requirements to manage a mobile device and the level of management you have depend on whether you manage the device directly or use Exchange ActiveSync:

Operating Systems:
You can install the Windows Intune client on computers that run the following operating systems:


Operating system System architecture

Windows Vista

  • Business

  • Enterprise

  • Ultimate

x86, x64

Windows 7

  • Professional (with no service pack, or with SP1)

  • Enterprise (with no service pack, or with SP1)

  • Ultimate (with no service pack, or with SP1)

x86, x64

Windows 8

  • Pro

  • Enterprise

x86, x64

Windows 8.1

  • Pro

  • Enterprise

X86, x64

The following are minimum hardware requirements for installing the Windows Intune client:


Requirement More information


The client requires the computer to have Internet connectivity and access to the domains defined in the Network infrastructure section of this topic.

Processor and Memory

Refer to the processor and RAM requirements for the computer's operating system.

Disk space

200 MB available disk space before the client software is installed.

The following are software requirements for installing the Windows Intune client:


Requirement More information

Administrative permissions

The account that installs the client software must have local administrator permissions to that computer.

Windows Installer 3.1

The computer must have, at a minimum, Windows Installer 3.1.

To view the version of Windows Installer on a client computer:

  • On the computer, right-click %windir%\System32\msiexec.exe, and then click Properties.

You can download the latest version of Windows Installer from Windows Installer Redistributables on the Microsoft Developer Network website.

Remove incompatible client software

Before you install the Windows Intune client software, you must uninstall the following client software from that computer:

  • Any version of System Center 2012 Configuration Manager

  • Any version of Configuration Manager 2007

  • Any version of Systems Management Server

The following web browsers are supported.


Platform Minimum browser version

Mobile device platforms

The Windows Intune company portal is supported on web browsers for the following mobile device platforms:

  • Windows Phone 7

  • Windows Phone 8

  • Google Android 2.3.4 and later versions

  • Apple iOS 5.0 and later versions

Windows computers

The following web browsers are supported for use with the Windows Intune account portal, Windows Intune administrator console, and the Windows Intune company portal website:

  • Internet Explorer 8

  • Google Chrome 19

  • Mozilla Firefox 5

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft