Integrations
AI for Microsoft Intune
Microsoft Intune holds every managed device’s compliance, encryption, apps and updates. Connected to Control Center, compliance and encryption are checked at every client each morning, patches and apps are held to your standard, and your team can ask about any device in Claude or ChatGPT.
Automations with Microsoft Intune
Work that runs on its own, across your tools. A person approves the steps that matter.
Known fixes run when a tech approves
For a repeat issue, the fix your team wrote in IT Glue runs through Intune, and the time lands on the ConnectWise PSA ticket.
With ConnectWise PSA and IT Glue
Failed backups handled overnight
When a Datto BCDR job fails, a ConnectWise PSA ticket opens with the error, the last good backup and the device’s health from Intune.
With Datto BCDR and ConnectWise PSA
Documentation that updates itself
Devices from Intune sync into IT Glue every night, with changes flagged.
With IT Glue
New clients onboarded on rails
A new client in ConnectWise PSA gets a checklist that tracks Intune agents, SentinelOne coverage and Datto BCDR jobs until every device is done.
With ConnectWise PSA, SentinelOne and Datto BCDR
Failed patches retried, then explained
Devices that fail patching in Intune get another try in the next window. If one fails again, a ConnectWise PSA ticket opens with the error and the device’s history.
With ConnectWise PSA
Software requests installed on approval
A software request in ConnectWise PSA installs through Intune once a tech approves it, and the ticket closes with what was installed.
With ConnectWise PSA
New devices set up to your standard
When a new device checks in to Intune, your baseline scripts run and the device is documented in IT Glue.
With IT Glue
Unused licenses reclaimed on approval
Microsoft 365 licenses nobody has used in 30 days are listed per client. A tech approves, and they’re removed.
Broken agents reinstalled
When an SentinelOne agent stops reporting, Intune reinstalls it with your script once a tech approves.
With SentinelOne
Standards checked in Microsoft Intune
Checked every morning, for every client. Fewer tickets, better security, and every gap is a project you can sell.
SentinelOne on every device
Devices in Intune without a healthy SentinelOne agent become a ticket.
With SentinelOne
Patches inside your window
Every device in Intune, against the patch window you set.
Supported operating systems only
Devices in Intune on Windows or macOS versions past end of support.
Every server backed up
Servers in Intune with no Datto BCDR backup, or none that finished in the last 24 hours.
With Datto BCDR
Microsoft 365 locked down
Legacy sign-in blocked, admin roles kept small and conditional access on.
Devices compliant in Intune
Compliance and encryption for every managed device.
Only approved software
Software in Intune’s inventory, checked against each client’s approved list.
No unapproved remote access tools
Remote access software in Intune’s inventory that isn’t on your approved list, at every client.
Licenses only on active users
Microsoft 365 licenses on disabled or unused accounts.
Every device documented
Devices in Intune that are missing from IT Glue.
With IT Glue
Reports from Microsoft Intune
Numbers from your tools, in the client’s language. Build a report from any data you connect.
The whole QBR, drafted
ConnectWise PSA, Intune, SentinelOne and Datto BCDR in one QBR, written in the client’s business terms for your vCIO to approve.
With ConnectWise PSA, SentinelOne and Datto BCDR
Patch compliance
From Intune, per device and per site.
Microsoft 365 licenses used vs. paid for
Unused and unassigned licenses at every client.
Devices by age and operating system
From Intune, per client and per site, with the devices due for replacement.
Software inventory
From Intune, with unapproved software called out.
A one-page monthly summary
Tickets, devices, security and AI work from ConnectWise PSA and Intune, on one page for the client’s owner.
With ConnectWise PSA
Ask about Microsoft Intune in Claude or ChatGPT
Questions your team asks in Claude or ChatGPT, answered from every tool and client. Any answer can become a report or an automation.
“Which devices at Northbridge don’t have SentinelOne?”
Answered from Intune and SentinelOne.
“What did we do for Meridian this month?”
Answered from ConnectWise PSA and Intune.
“Which clients have more licenses than we bill for?”
Answered from Microsoft 365 and ConnectWise PSA.
“What changed at Northbridge this week?”
Answered from ConnectWise PSA, Intune and SentinelOne.
“Which servers at Northwind are low on disk space?”
Answered from Intune.
“Which patches failed at Meridian last night?”
Answered from Intune.
“Which computers still have the old VPN client?”
Answered from Intune’s software inventory.
“Which devices haven’t checked in this week?”
Answered from Intune.
“Draft Northbridge’s QBR.”
Built from ConnectWise PSA, Intune and every other connected tool, for your vCIO to edit.
“Clean up the disk on Harbor’s file server.”
Drafted as a Intune script that a tech approves before it runs.
Billing with Microsoft Intune
Get paid for the AI work, through the tools you bill with.
Licenses matched to what you bill
Microsoft 365 licenses at every client against the ConnectWise PSA agreement, with missed billing flagged.
With ConnectWise PSA
What Control Center reads from Microsoft Intune
Devices, patching, scripts, software inventory and device compliance.
Control Center connects to Microsoft Intune through its public API. You add it once, then choose which clients it covers and which API operations it can use. The key goes in Control Center’s vault, never in a chat.
What you need: An Intune license and a Microsoft Entra app with Microsoft Graph permissions.
The examples on this page use a stack MSPs often run with Microsoft Intune: ConnectWise PSA, IT Glue, Datto BCDR and SentinelOne. Build your AI plan to see them with your own tools.
Connection details and what you need from Microsoft IntuneSee this example plan in the builder
Questions about Microsoft Intune and Control Center
Does Control Center work with Microsoft Intune?
Yes. Control Center connects to Microsoft Intune through its public API and uses devices, patching, scripts, software inventory and device compliance. You add it once, then choose which clients it covers.
What can an MSP automate with Microsoft Intune and AI?
With Control Center, 9 automations, including: known fixes run when a tech approves; failed backups handled overnight; documentation that updates itself; new clients onboarded on rails; failed patches retried, then explained; software requests installed on approval. A person approves the steps that matter.
Can I use Microsoft Intune with Claude or ChatGPT?
Yes, through Control Center MCP. Your team connects Claude or ChatGPT once and can ask about Microsoft Intune at every client, with the same roles and client scopes as their login. For example: “Which devices at Northbridge don’t have SentinelOne?”
What does it cost?
$1,750 a month for the Control Center platform plus $75 a month per billable workflow, with the first 90 days at no cost.