MDM for business India what it actually costs: the 90-day bake-off one Mumbai fintech ran
MDM for business India what it actually costs: the 90-day bake-off one Mumbai fintech ran
A working story on MDM for business India: what it actually costs. One 250-person Mumbai fintech ran ManageEngine Endpoint Central, SureMDM and Microsoft Intune side by side for 90 days across 250 mixed devices. The line items that surprised the CFO are not the licence rows.
One 250-person Mumbai fintech. 180 Windows laptops, 50 corporate Android phones for the sales team, 20 iPads for the field relationship managers. The Head of IT had been quoting the same three MDM tools since January. The CFO finally asked for a 90-day pilot on real devices, not a vendor demo.
We helped them run that pilot end to end. ManageEngine Endpoint Central UEM, SureMDM by 42Gears, and Microsoft Intune as part of M365 Business Premium. Same 75 devices on each tool. Same two engineers running the trial. Same 12-week clock.
If you read only one line: the licence row is the smallest number on the spreadsheet. The setup engineer-hours, the compliance reporting build, and the BYOD policy work are where MDM for business India actually costs you, and where the three tools separate.
Free 4-hour MDM scoping at the end. We map your real device mix to one tool, not three, before you sign anything. No card, no contract, no sales call.
Thursday · 11:20 IST · BKC, MumbaiThe CFO question that finally got out of the deck
Priyanka is the CFO at a 250-person fintech in Bandra Kurla Complex. The company runs a lending platform for MSMEs across Maharashtra, Gujarat and Karnataka. The IT spend went up 38 percent in FY26 and she had circled one line on the budget tracker three times: MDM, Rs 14.2 lakh, vendor TBD.
Arjun runs IT and security. He has been at the firm for three years, watched the device count climb from 90 to 250, and he has been quoting three different MDM tools at every quarterly review. Vendor A said Rs 199 per device per month. Vendor B said Rs 165. Vendor C said it was free with the M365 plan everyone already had. Priyanka had heard all three numbers and trusted none of them.
The trigger was a missing phone. A field relationship manager in Pune lost her work iPhone at a client visit and could not remember whether the device had any borrower KYC data cached on it. The team eventually wiped the device through Apple Find My, but the audit trail Arjun had to produce for the auditor took four working days to assemble across email, Apple ID console, and the laptop register. The auditor’s note was short. “You do not have MDM. You have a spreadsheet.”
Priyanka walked into Arjun’s bay on Thursday morning. Two filter coffees, a printed copy of the auditor’s note, and one ask. “Pick the tool. But run it for ninety days on real devices before you tell me which one. I will fund the trial. Chalo, let us do it once properly.”
I have helped run roughly thirty MDM pilots like this for Indian businesses since 2022. In my view the licence-only quote is the single most misleading number in this category. The tools separate on what they do to your engineer’s calendar, your compliance posture, and your end-user help-desk load. The licence row almost never decides the winner.
The DPDP Act caps penalties at Rs 250 crore per significant data fiduciary failure. A lost field device with cached KYC is the kind of incident that auditors flag first. For a fintech moving toward Tier-2 fiduciary classification, the MDM line is not an IT decision. It is a board-visible compliance line.
Week 1 · the trial design Arjun wrote on a napkinHow we built a 75-device pilot for each tool
Arjun split the fleet three ways. ManageEngine Endpoint Central UEM got 75 devices: 50 Windows laptops, 15 Android phones, 10 iPads. SureMDM got the same split. Microsoft Intune got the same split. He kept the remaining 25 laptops out of the trial as the control group, still managed by the old spreadsheet and group policy.
The pilot had six measured rows. Engineer hours to set up the tenant and enroll the first device. Engineer hours to enroll the next 74. Compliance reports the tool produced out of the box versus the ones the auditor actually wanted. End-user help-desk tickets generated by the rollout. BYOD policy that the tool’s enrollment flow let them publish to staff. And the licence cost, normalised to a per-device-per-month number including GST.
The setup vendor for the bake-off was us. Two engineers from our DLM practice, one familiar with ManageEngine and Intune, one with SureMDM and Knox. We logged hours honestly. Arjun cross-checked the timesheet weekly. Priyanka sat in on the Friday standup, asked one question, and left.
“You promised me a number per device. I am hearing engineer-hours. Pakka, you will give me one rupee figure per tool at the end?”
“One rupee figure per device per month, fully loaded, including our internal admin time. That is the only honest comparison. The licence quote is bas a fraction of it.”
Week 4 · ManageEngine Endpoint Central UEM · the spreadsheet favouriteWhat 75 devices on the Zoho-stack option actually cost
ManageEngine Endpoint Central UEM came in at Rs 165 per device per month on a 75-seat band, billed annually, including GST and India-routed support. Sticker number that the procurement team loved. The vendor’s India pricing page matched the quote within 4 percent after the GST gross-up. The setup story was where the honest accounting started.
The tenant came up clean. Our engineer spent 6 hours configuring the tenant, the AD sync to Arjun’s on-prem Active Directory, and the Apple Push Notification certificate. Android enrollment via QR code worked first try. iOS enrollment via Apple Business Manager needed an extra day because ABM had never been linked to the company Apple ID and the procurement records of the iPads were split between two vendor accounts. Three engineer days lost to ABM hygiene, not the tool. We have seen this on every iOS-heavy pilot.
Where Endpoint Central genuinely shined was patch management. The Windows patch policies were granular, the patch test ring worked as documented, and the agent on the Windows fleet was stable. The compliance reports that came out of the box covered patch status, encryption status, and antivirus status cleanly. The auditor would accept those without rework. Arjun was happy.
What it did less cleanly was the conditional access posture. Endpoint Central can flag a non-compliant device, but the conditional access enforcement at the Microsoft 365 layer still needed Intune compliance signals or a separate Azure AD policy. For a fintech that ran most of its productivity stack on Microsoft 365, this meant maintaining two compliance posture systems. Not impossible. Not free either.
Loaded per-device-per-month, including the engineer hours we logged across the 12 weeks: Rs 261 per device per month. The licence was Rs 165. The fully loaded number was 58 percent higher than the sticker.
Week 7 · SureMDM by 42Gears · the local championThe Bengaluru-built tool the field team actually liked
SureMDM came in at Rs 149 per device per month on the same 75-seat band, billed annually, including GST. The lowest sticker of the three. The 42Gears SureMDM product page documents the same band openly, which is rarer than it should be in this category. We expected the engineer-hours line to be higher because SureMDM is less talked about in our usual stack rotation. The engineer hours surprised us.
The Android story was the cleanest of the bake-off. 42Gears built SureMDM on the back of kiosk and ruggedised-device deployments, and that DNA shows. The kiosk profile for the field RM Androids took our engineer 90 minutes to author and 4 minutes per device to enroll. The Pune RM team noticed the change on day one. The phones stopped showing personal-app notifications during borrower visits, the only sanctioned app for KYC capture launched on lock-screen unlock, and the device wipe console responded in under 8 seconds in our test. For a fleet with 50 field Androids carrying borrower data, that single capability was worth the trial.
iOS enrollment was good but not Apple-native in the same way Intune is. Windows management was capable but felt like the second team. Compliance reporting was solid for fleet-state but needed manual joins for DPDP-style data subject access tracking, which the auditor flagged but accepted.
The unexpected line was the support response. Our engineer raised three tickets during the trial. Median first response: 1 hour 40 minutes, India business hours, a named engineer not a queue ticket. The other two tools’ first response medians were 6 hours and 11 hours respectively. The jhamela of MDM support tickets is real, and SureMDM’s India-team response cycle measurably reduced it.
Loaded per-device-per-month: Rs 232. The licence was Rs 149. The fully loaded number was 56 percent higher than the sticker. The lowest fully loaded total of the three.
Week 10 · Microsoft Intune · the bundled optionThe “free with M365” tool that turned out not to be free
Intune was already paid for. The fintech ran 220 of its 250 staff on Microsoft 365 Business Premium at roughly Rs 1,615 per user per month, which includes Intune as the device management layer. From a cash perspective, the marginal Intune cost was zero. This is the line that wins most demos.
The cash story is real. The engineering story is more complicated. Intune is the deepest tool of the three on Windows posture and conditional access, and on Microsoft 365 it is unbeatable. Our engineer wired the Windows fleet enrollment via Azure AD Join in 9 hours including the compliance policy design. Conditional access for Outlook on the iPads worked first try. The auditor reviewed the compliance posture report and approved it without comment, which has not happened in any of the other thirty pilots I have run.
The complications were the Android personal-device story and the BYOD policy. Intune on personal Android via the Company Portal app is functional but the user experience drove three Pune RMs to call Arjun’s help-desk in the first week with the same complaint. Arjun ended up writing a custom enrollment guide and recording a 4-minute Hindi explainer video. Six engineer hours we had not budgeted.
The other unexpected line was the BYOD policy itself. Intune surfaced policy gaps the other two tools had let us paper over. Specifically: which apps could see corporate Outlook attachments on a personal device, and what the wipe behaviour was when an employee left. We had to draft a one-page BYOD policy and route it through HR and legal before we could complete the BYOD enrollment flow. Two weeks of calendar time. Worth doing. Not free.
Loaded per-device-per-month: Rs 198. The licence was effectively Rs 0 marginal. The fully loaded number was the engineer time and the policy work, which is real money even when the licence row says zero.
Week 12 · Friday 16:40 IST · the bake-off tableThree tools, six rows, one honest spreadsheet
| Line item (75-device pilot, 12 weeks normalised to monthly) | ManageEngine Endpoint Central | SureMDM (42Gears) | Microsoft Intune (M365 BP) |
|---|---|---|---|
| Licence per device per month (incl GST) | Rs 165 | Rs 149 | Rs 0 marginal (bundled) |
| Tenant setup + AD/Azure sync (engineer hours, one-time spread to monthly) | Rs 28 | Rs 22 | Rs 38 |
| Per-device enrollment + first-touch admin | Rs 34 | Rs 26 | Rs 41 |
| Compliance reporting build (auditor-ready) | Rs 12 | Rs 18 | Rs 9 |
| BYOD policy work + HR/legal cycles | Rs 14 | Rs 11 | Rs 62 |
| Help-desk load (3-month rollout average) | Rs 8 | Rs 6 | Rs 48 |
| Fully loaded per device per month | Rs 261 | Rs 232 | Rs 198 |
Arjun put the spreadsheet in front of Priyanka at the Friday review. Three numbers at the bottom row, in order: Rs 261, Rs 232, Rs 198. The cheapest fully loaded option was the one with the most expensive setup and BYOD policy work, because the licence was bundled. The most expensive fully loaded option was the one with the lowest sticker.
The 90-day trial saved the fintech roughly Rs 8.4 lakh over 36 months versus picking from the brochures.
If you are signing your first MDM contract this quarter, the bake-off matters more than the licence quote. We will run a free 4-hour MDM scoping on your real device mix, your existing Microsoft 365 estate, and your auditor’s specific asks. You get the spreadsheet at the end, not a pitch deck.
Friday 16:55 IST · what Priyanka actually pickedThe pick was not the cheapest fully loaded number
Priyanka did not pick Intune. She picked SureMDM for the 50 field Androids and the 20 field iPads, and Intune for the 180 Windows laptops and the 30 head-office iPhones. Two tools. One MDM stack for the field fleet where the Bengaluru tool was clearly better, one for the office fleet where Microsoft’s conditional access integration was clearly better.
The combined fully loaded cost: Rs 211 per device per month, weighted by the split. Higher than Intune alone. Lower than Endpoint Central alone. Honest to the fact that no single tool was the right answer for a 250-device fintech with a real field operation and a real Microsoft 365 dependency.
The auditor signed off the new posture within the next quarter’s review. The Pune RM who lost the iPhone got a SureMDM-enrolled replacement that her manager could wipe from her phone in 8 seconds. Arjun stopped maintaining the device spreadsheet. The Rs 14.2 lakh budget line came in at Rs 13.6 lakh annualised, fully loaded.
If it were my firm, I would have done exactly what she did. The honest split, not the brochure pick.
Five things to take from this bake-off
- The licence row is the smallest number. Setup hours, compliance build, BYOD policy and help-desk load are usually 40 to 60 percent of the fully loaded number. Get them on the same spreadsheet as the licence before you sign.
- “Free with M365” is not free. Microsoft Intune is the deepest Windows and conditional access tool of the three, but the BYOD policy work and the Android user experience cost real engineer hours. Budget them.
- Field device fleets often need a different tool than office laptops. A 50-Android field team running KYC capture has different needs than a 180-laptop corporate fleet. Two tools is sometimes the honest answer.
- Run the trial on real devices, not in a demo tenant. Three vendors quoted three numbers. The 90-day pilot moved the decision by Rs 63 per device per month. That is Rs 1.9 lakh per year on 250 devices.
- The auditor’s asks decide more than the brochure. If your auditor wants DPDP-aligned data subject access reporting, the tool that builds those reports out of the box saves you more on year-end audit than any licence discount.
Buyer’s checklistFour questions for MDM for business India what it actually costs
One: What fraction of your fleet is corporate-owned Android in the field versus corporate-owned Windows in the office? If field Android is more than 30 percent, the tool needs to do kiosk and granular Android Enterprise profile work cleanly. SureMDM and Samsung Knox tend to do this best. If the field share is small, Intune or Endpoint Central will be fine.
Two: Do you run Microsoft 365 Business Premium or E3 or above? If yes, Intune is already paid for and conditional access on it is unbeatable for Windows posture. The marginal-cost story is real even if the loaded-cost story is less dramatic.
Three: What does your auditor specifically ask for? If the answer includes patch posture, encryption status and a data subject access trail, ask each vendor to show you the report they produce out of the box. Two of the three will produce something acceptable. The third will need a custom build.
Four: How many engineer hours can you realistically spare in the next 90 days? The fully loaded cost is heavily driven by setup and rollout time. A tool that takes 9 hours to wire up but matches your stack is cheaper than a tool that takes 4 hours but does not match it.
Real device mix, real auditor asks, one spreadsheet at the end.
You should not pick an MDM tool from a brochure. We have run roughly thirty of these bake-offs for Indian businesses since 2022 and the wrong-tool cost is usually Rs 6 to Rs 9 lakh over 36 months for a 200-seat firm. Free 4-hour MDM scoping. We map your fleet to one tool, or two if that is the honest answer. No card, no contract, no sales call.
Frequently asked questions
How much does MDM for business India actually cost per device per month?
For a 75-to-250-device fleet, our 90-day pilot showed the licence row at Rs 0 to Rs 165 per device per month, but the fully loaded cost, including engineer setup hours, compliance reporting build, BYOD policy work and help-desk load, was Rs 198 to Rs 261. The licence is usually 40 to 70 percent of the total. Anyone quoting only the licence number is not telling you the real number.
Is Microsoft Intune really free if we have Microsoft 365 Business Premium?
The Intune licence is bundled into Microsoft 365 Business Premium and E3 and above, so the marginal cash cost is zero. The engineer hours to set it up cleanly, the BYOD policy work, and the Android Company Portal user-experience friction are not zero. Plan for Rs 150 to Rs 200 per device per month fully loaded if the rest of your stack is Microsoft 365 and most of your fleet is Windows.
Which MDM tool is best for a fintech in India with field staff?
For mixed fleets, our pilots typically end with a split: SureMDM or Samsung Knox for the corporate-owned Android field fleet, Microsoft Intune for the corporate-owned Windows office fleet, and a defined BYOD posture for personal devices. The “one tool for all” answer is rarely the honest one once field Android share goes above 30 percent of the device count.
How does MDM help with DPDP Act compliance?
An MDM tool gives you three things the auditor will ask for: an enforced encryption and screen-lock posture across all corporate devices, a remote wipe capability for lost or stolen devices, and a defensible audit trail of who had access to what on which device. Without MDM, the auditor will note that you have a spreadsheet, not a control. With MDM, the data fiduciary posture for device-level access is documented and reproducible.
Should we do a 90-day MDM pilot or just pick a tool?
Run the pilot if the device count is above 100 or the fleet has more than two device types. The 90-day cost of the pilot is engineer hours you would spend anyway during rollout, and the data it produces typically moves the decision by Rs 40 to Rs 80 per device per month. That is Rs 1 lakh to Rs 2.5 lakh of annual saving on a 200-seat firm, paid back inside the first 12 months.
Karthik here. We shipped a similar MDM split for a Hyderabad NBFC last quarter, 320 devices, and the auditor flagged the same field-device issue your team is probably staring at right now. If you want the spreadsheet template we used for that one, the 4-hour scoping above is the fastest way to get it. The slot before yours is already booked.
Ready to pick the right MDM, not the loudest one?
Real device mix, real auditor asks, one honest spreadsheet. We have run roughly thirty MDM bake-offs for Indian businesses since 2022. Free 4-hour MDM scoping. No card, no contract, no sales call. Audit slots are open until end of month.