1. manage updates Centrally manage the deployment of the Microsoft updates and service pack that you choose to all PCs form the window intune console-freeing up your IT staff from routine management task
. 2.Protect PCs form malware Help safeguard your PCs from the latest threats with centralized protection built on the Microsoft malware protection engine and using the same trusted technology as Microsoft forefront Endpoint protection and Microsoft Security Essentials.watch phantom online
3.Set security policies Centrally manage update,firewall and malware protection setting across all of your PCs,even on remote machines outside the corporate network.