Windows Intune is nothing about a System and Security Management application facilitated by Microsoft in Cloud. Lighter Version of SCCM or ConfigMgr in cloud !
With the Windows Intune cloud service, IT staff can remotely perform a number of security and management tasks. These tasks include management of updates, endpoint protection to help safeguard PCs from malware threats, and inventory management so IT and end users can remain productive from virtually anywhere. The only other thing required is an Internet connection.
AD integration is possible through Windows Intune. Once AD is integrated, we can use AD security groups to deploy applications through InTune.
What Is Windows InTune
Windows Intune is an integrated, cloud-based client management solution that provides tools, reports, and upgrade licenses to the latest version of Windows, and Windows Intune helps keep your computers up-to-date and secure. It’s basically Cloud (lighter) version of SCCM/ConfigMgr.