Intune Managed
Environment
Retainer
Monthly policy management, new device onboarding, compliance monitoring, patch oversight, and a monthly Device Compliance Report. Konve IT keeps your device estate governed. You focus on practice.
Monthly Retainer Pricing
Four monthly activities. Patch oversight. All included.
This retainer is not a monitoring-only service. Konve IT manages policies, onboards new devices, investigates non-compliance, and produces a monthly report that documents the compliance state of your entire device estate.
Policy Management
Maintenance and updates to device compliance policies, device configuration profiles, and Conditional Access policies to reflect changes in your environment, your regulatory obligations, or Microsoft's platform requirements. Application deployment and removal policy management. Autopilot profile updates for new Windows device provisioning. Policy changes are documented and reported in the monthly Device Compliance Report.
Device Compliance Report
Delivered by the fifth working day of each calendar month, covering: total enrolled devices and compliance status; non-compliant devices identified during the month and the action taken; new devices onboarded during the month; devices removed from management; patch compliance status against the 14-day Cyber Essentials patching requirement; and any recommended policy updates. Formatted for management and board review.
Patch Management Oversight
Monitoring of Windows Update for Business policies to ensure devices are receiving critical security updates within the 14-day patching window required by Cyber Essentials. Where devices are consistently failing to apply updates, Konve IT notifies you with the specific devices affected, the updates outstanding, and the recommended remediation action. This oversight is evidence of patch management for Cyber Essentials purposes.
New Device Onboarding
When you notify Konve IT of a new device joining your environment, Konve IT manages the enrolment process — guiding the user through enrolment via remote session where required, verifying compliance, and confirming enrolment in the next monthly report. A monthly onboarding allowance is confirmed in your Statement of Work. Devices beyond the allowance are charged at £45 per device (standard) or £41 per device (volume rate).
Response and resolution commitments.
Service levels are measured during Business Hours — 09:00 to 17:30, Monday to Friday, excluding English public holidays — from the point at which Konve IT becomes aware of the issue through monitoring or notification from you.
Konve IT is not liable for compliance failures caused by the client or its users overriding device policies, Microsoft platform outages, the client's failure to maintain valid Microsoft 365 licences, or changes made to the Intune environment without Konve IT's knowledge.
This retainer covers the managed device governance layer only. Everything below is either available separately or falls outside the scope of this service.
- Helpdesk or end-user support of any kind
- Procurement or payment of Microsoft 365 licences
- Configuration or support of hardware or networking equipment
- Remediation of the underlying Microsoft 365 tenant configuration
- Major redesign of the Intune environment — subject to a written change order
- Device enrolment beyond the monthly onboarding allowance — charged at £45 or £41 per device
Per device per month. Adjusts as your estate changes.
The retainer is priced per enrolled device. When you notify Konve IT of device changes — new starters, leavers, device replacements — the fee adjusts from the following invoice. You are billed for the estate you actually have.
Intune Managed Environment Retainer
Retainer Terms
From the commencement date confirmed in the Statement of Work.
Renews for successive 12-month periods unless either party gives 30 days' written notice before the end of the then-current term.
Issued on the first working day of each calendar month. Payable within 14 days.
Fee adjusts from the first invoice following written notification of a device count change.
Typically 2 new devices per month. Additional devices above the allowance charged at £45 or £41 per device.
Konve IT may review the per-device rate annually with 30 days' notice.
Intune not yet deployed?
This retainer assumes that Microsoft Intune has been deployed and all devices are already enrolled. If Intune has not been deployed, the Intune Deployment and Device Enrolment engagement sets up the environment and enrols every device — after which the retainer begins.
Three steps to a running retainer.
If your Intune environment is already live and devices are enrolled — whether deployed by Konve IT or another provider — the retainer can begin immediately following signature of the Statement of Work.
Complete the onboarding form
Download and complete the Konve IT Client Onboarding Form. If already submitted for a previous engagement, you do not need to complete it again.
Complete the service questionnaire
Download and complete the Intune Questionnaire. Confirms whether Intune is already deployed, enrolled device count by type, and preferred reporting contact for the monthly report.
Review and sign the Statement of Work
Konve IT issues a Statement of Work within two working days. The retainer commences on the first day of the calendar month following signature, or from the commencement date confirmed in the SoW.