AirWatch vs Microsoft Intune for iOS Device Management in Australia
Across the country, Australian organisations are running mixed-device fleets like never before. From construction firms in Perth handing out iPads on remote sites to boutique financial planners in Melbourne standardising on iPhones for their advisors, the pressure to manage Apple hardware at scale has intensified. State government departments in Canberra, mining operators in the Pilbara, and retailers along the Brisbane strip are all wrestling with the same reality: Apple devices are no longer optional, they are core productivity tools.
AirWatch, now folded into VMware's Workspace ONE, and Microsoft Intune, bundled with Microsoft Endpoint Manager, dominate the shortlist whenever IT leaders evaluate iOS device management. Both can push apps, configure settings, and wipe a lost phone from across the Tasman. Both promise strong posture management for corporate apps and bring-your-own-device programs. The differences show up once you look past the marketing into daily operations, licensing maths, and how each tool fits Australian workflows.
This comparison walks through platform capabilities, iOS-specific features, integration with the Microsoft stack most local enterprises run, security obligations under Australian privacy law, and the commercial reality of buying and supporting either solution here.
Platform Foundations and Architectural Approach
AirWatch began as one of the earliest dedicated mobile device management platforms and has matured into a broader unified endpoint management suite under VMware Workspace ONE. Its architecture rests on a single console that brokers identities through VMware's identity services, manages apps through an enterprise catalogue, and enforces policy across iOS, Android, Windows, and macOS. For Australian IT teams already invested in VMware vSphere or Horizon virtual desktops, the integration is genuinely tight.
Microsoft Intune is delivered as a cloud-native service bundled with Microsoft 365 plans, including Enterprise Mobility + Security and the E3 and E5 licences familiar to local IT buyers. Admins manage iPhones and iPads through the same Endpoint Manager admin centre used for Windows PCs, which keeps the learning curve gentler for shops already comfortable with Azure Active Directory. Local sysadmins in Adelaide and Hobart often note the console feels familiar on day one because it inherits patterns from the wider Microsoft 365 ecosystem.
Both vendors now market under the unified endpoint management banner, recognising that customers want one pane of glass. Workspace ONE leans into its mobility-first heritage, while Intune leans into its strength as part of the Microsoft cloud.
iOS-Specific Management Capabilities
On the Apple platform itself, both products handle the supervised mode basics: Apple Business Manager integration, App Store and custom app deployment, remote lock and wipe, and configuration profiles for Wi-Fi, VPN, and email. They diverge on depth.
AirWatch historically shipped granular iOS controls, including per-app VPN, Content Locker for file collaboration, kiosk mode for iPads in retail and healthcare, and compliance dashboards built around mobile endpoints. Australian aged-care providers have used kiosk profiles on shared iPads to restrict residents to a single communications app.
Intune covers those capabilities today, with iOS app protection policies that wrap corporate data inside managed apps without requiring full device enrolment. Conditional access policies tied to Azure AD identities work seamlessly with iOS, blocking Microsoft 365 access when a device falls out of compliance. Apple-specific features such as User Enrollment and Managed Open In are supported on both platforms.
Integration With Microsoft Environments
Most Australian enterprises of meaningful size run some flavour of Microsoft 365, and that is where Intune's value proposition hardens. Group-based deployment through Azure AD, integration with Microsoft Defender for Endpoint, and Intune alongside Configuration Manager for co-management create a coherent admin experience. For organisations already paying for E5 licences, Intune often arrives at no additional per-user cost, which simplifies procurement conversations.
AirWatch integrates with Microsoft tooling through connectors and identity bridges rather than native hooks. VMware's Identity Services can federate with Azure AD, and Workspace ONE UEM can ingest Azure AD groups for policy targeting. The result is workable, though not as frictionless as Intune's native story. Organisations running mixed Microsoft and VMware estates sometimes choose AirWatch because Workspace ONE extends the same control plane into their virtual desktop stack.
For businesses with deep Microsoft investments, particularly in financial services around Sydney's Macquarie Street or government agencies in Canberra, Intune usually wins on integration density. For shops with a VMware-heavy data centre footprint, AirWatch fits more naturally.
Security, Compliance, and Australian Privacy Obligations
Australian organisations must comply with the Privacy Act 1988, the Australian Privacy Principles, and the Notifiable Data Breaches scheme when handling personal information. Healthcare providers face additional obligations under the My Health Records Act, and APRA-regulated entities follow CPS 234 for information security. These local realities shape which platform a CIO will endorse.
Both AirWatch and Intune offer the device-level controls needed to satisfy those obligations: encryption enforcement, jailbreak detection, remote wipe, certificate-based authentication, and integration with conditional access gateways. AirWatch brings mature mobile threat defence partnerships and a long track record with regulated industries. Intune pairs with Microsoft Defender for Endpoint and Microsoft Purview compliance tooling, giving security teams a unified story when briefing their boards.
Data residency matters for some buyers. Microsoft's Australian data centres in Sydney and Melbourne host Intune services, keeping operational metadata onshore. VMware's Workspace ONE can be configured with regional cloud instances, though local IT teams should confirm specific service availability with their account team before committing.
Pricing, Licensing, and Local Support Realities
The commercial models differ enough that side-by-side cost comparisons often require a spreadsheet rather than a glossy PDF. Intune is licensed per user through Microsoft 365 and EMS plans, with no separate fee per managed iOS device. For organisations already on E3 or E5, the marginal cost of adding iOS management can be effectively zero on the licence line, which plays well with procurement teams in Parramatta and the Sydney CBD.
AirWatch is licensed per device or per user, depending on the chosen Workspace ONE edition, and pricing scales with the feature tier selected. Larger deployments attract volume discounts, and VMware's channel partners in Australia, including local system integrators, can structure multi-year agreements that bundle professional services.
Local support coverage is strong for both. Microsoft offers 24/7 support through its Australian support hubs and an extensive partner network. VMware maintains a Sydney presence and a partner ecosystem with onshore capability. The practical difference for most mid-market customers comes down to which partner relationship is already in place.
Operational Fit for Australian Workforces
Field-heavy industries tell a useful story. A civil contractor in Western Australia managing 250 iPhones across regional depots needs reliable offline policy enforcement and easy re-enrolment when devices return to capital-city offices. AirWatch's mature mobile workflows were built for this kind of challenge. A national retailer with 180 stores stretching from Darwin to Hobart leans on the Microsoft ecosystem already embedded across head office and benefits from Intune's familiar interface for store-level IT champions.
Evaluating a unified endpoint management strategy before signing contracts helps Australian IT leaders avoid expensive course corrections later, since both platforms handle the basics well but reward careful alignment with existing investments.
| Capability | AirWatch (Workspace ONE) | Microsoft Intune |
|---|---|---|
| iOS supervised mode and Apple Business Manager | Supported | Supported |
| Per-app VPN and content collaboration | Mature, native Content Locker | Supported via app protection policies |
| Identity and conditional access | VMware Identity Services, Azure AD federation | Native Azure AD integration |
| Windows PC co-management | Available via Workspace ONE | Native via Configuration Manager co-management |
| Data residency in Australia | Regional cloud instances available | Sydney and Melbourne data centres |
| Licensing model | Per device or per user, tiered | Per user through Microsoft 365 / EMS |
| Best fit for | VMware-heavy estates, mobility-first shops | Microsoft 365-centric organisations |
Recommendations for Choosing Between AirWatch and Intune
- Choose Intune if your organisation is already paying for Microsoft 365 E3 or E5 and you want iOS management without a new licence line.
- Choose AirWatch if you run a substantial VMware footprint, particularly with Horizon or vSphere, and want one console across mobile and virtual endpoints.
- Audit your compliance obligations first, then map platform features to the Privacy Act, APPs, and any sector-specific rules before negotiating price.
- Pilot each platform with a representative slice of iPhones and iPads, including supervised and BYOD scenarios, before committing to a multi-year deal.
- Confirm Australian data residency and support coverage in writing, particularly for regulated workloads in healthcare, finance, and government.
- Engage a local partner with proven deployment experience rather than relying on direct vendor support for a complex rollout.
- Plan a phased migration that retires legacy MDM tools in stages, reducing risk while staff adjust to the new console.
When you are ready to evaluate either option in your environment, the most reliable next step is a structured proof of concept with real devices, real users, and the apps your team actually relies on. Start a trial of AirWatch through the 30-day evaluation programme, or book a Microsoft Intune pilot with your existing Microsoft 365 tenant. Either path will give your team the hands-on evidence needed to make a confident, long-term decision for iOS device management across your Australian operations.