# RealmJoin

> RealmJoin is the companion to Microsoft Intune, made by glueckkanja AG. It packages, patches and retires applications, gives helpdesk one screen per user, group and device, turns PowerShell runbooks into guarded self-service, manages local admin accounts and recovery keys, and reports what is installed and used, for Windows and macOS clients managed with Intune.

RealmJoin is a cloud-native SaaS hosted in Microsoft Azure in Europe (West Europe, with North Europe as backup), connected to a Microsoft 365 tenant with one admin consent and deployed in minutes. The sensitive parts run in the customer's own tenant and Azure subscription: runbooks in Azure Automation, local admin passwords in Key Vault, audit logs in Log Analytics. RealmJoin adds capabilities to Intune; it does not replace it.

## Key facts

- Clients: Windows 10 and 11 with the optional RealmJoin Agent; macOS apps through Intune as DMG or PKG; Azure Virtual Desktop and Windows 365 aware.
- Apps and patching: Package Store with 3,000+ maintained packages, packaging as a service (typically within five business days), organic packages from your own installer within minutes, delivery through Intune or the RealmJoin Agent, new versions detected within 15 minutes, Preview and Main channels with 0 to 90 days delay and a night window, an update group for outdated installs.
- Automation: 175 open-source runbooks (96 organization, 43 user, 22 device, 14 group; 34 schedulable) in the customer's own Azure Automation account, turned into forms with Graph pickers, permissions, schedules and a job log; Intune remediation scripts; self-service forms; a Hybrid Runbook Worker in preview.
- Helpdesk and operations: one page per device (18 views), user and group across Entra ID, Intune, Autopilot and Defender; warranty lookups for 7 vendors; remote actions; 6 Excel exports; 9 built-in roles and custom roles from 178 permissions.
- Privileged access: emergency, support and privileged local admin accounts per device, escrowed in a Key Vault dedicated to the tenant and checked every hour; SelfLAPS; Windows LAPS in Intune; BitLocker and FileVault recovery keys with rotation.
- Insights: software report from four inventory sources, optional usage metering with run counts, shadow IT, device telemetry, an audit log with 30 categories and 730 days default retention in the customer's Log Analytics workspace.
- Endpoint: the RealmJoin Agent checks in every 30 minutes, accepts only configuration signed with RSA-SHA512, holds the desktop until mandatory apps are installed, offers an App Catalog, desktop notifications, AnyDesk and BranchCache, with Canary, Beta and Stable release channels.
- Developers: a REST Customer API with OpenAPI docs, an MCP server with 6 read-only tools for AI assistants (60 requests per minute per tenant), a PowerShell module and open-source repositories.
- Partners: multi-tenant by design with tenant switching, shared templates, Microsoft Partner Center and CSP in the portal, GDAP visibility and isolation at the data layer.
- Security: TLS 1.2 or later, outbound HTTPS on port 443 only, separate app registrations per feature with a read-only mode and Administrative Unit scoping, 99.5% availability target, critical fixes within 24 hours, support Monday to Friday 08:00 to 18:00 CET in English and German; the development and operations team is ISO 27001 certified.
- Scale: organizations from 250 to 100,000+ users, 500,000+ managed seats; single- or multi-tenant enrollment; MSP licensing available.
- Licensing: per user in two editions, RealmJoin Apps and RealmJoin Enterprise, from 1,000 users, up to ten devices per user, monthly or annual (10% less), through Microsoft Marketplace or directly via cleverbridge.

## Pages

- [Home: what Intune leaves on your desk, the six modules, the app lifecycle, a runbook simulator, the local admin access check, usage, data flow, comparison, specifications, FAQ, the RealmJoin Unlocked vodcast and upcoming events](https://www.realmjoin.com/)
- [Apps & patching](https://www.realmjoin.com/platform/apps)
- [Automation](https://www.realmjoin.com/platform/automation)
- [Helpdesk & operations](https://www.realmjoin.com/platform/operations)
- [Privileged access](https://www.realmjoin.com/platform/access)
- [Insights](https://www.realmjoin.com/platform/insights)
- [Endpoint & self-service](https://www.realmjoin.com/platform/agent)
- [Security and trust: hosting, data flows, Microsoft Graph permissions, integrity, access control, operations, sub-processors, commitments](https://www.realmjoin.com/security)
- [Developers: Customer API, endpoints, MCP server, PowerShell module, log tables, open source](https://www.realmjoin.com/developers)
- [Partners: MSPs and CSP partners, and the partner program](https://www.realmjoin.com/partner)
- [Pricing: RealmJoin Apps and RealmJoin Enterprise, per user, with the editions matrix and pricing questions](https://www.realmjoin.com/pricing)
- [What's new: recent releases](https://www.realmjoin.com/changelog)
- [Get started: onboarding with a Global Administrator account](https://www.realmjoin.com/start-now)
- [Contact: book a demo, get a quote, become a partner or ask the security team](https://www.realmjoin.com/contact)
- [About: the team behind RealmJoin and the company glueckkanja](https://www.realmjoin.com/about-us)
- [Blog: guides on Microsoft Intune and the work around it](https://www.realmjoin.com/blog)
- [Documentation](https://docs.realmjoin.com/)
- [Feedback and roadmap](https://feedback.realmjoin.com/)
- [Service status](https://status.realmjoin.com/)

## Blog

- [Ivanti DSM End of Life: Start Fresh with Intune and RealmJoin](https://www.realmjoin.com/blog/ivanti-dsm-end-of-life): Ivanti DSM reaches end of life on December 31, 2026; what the risks of running it past that date are, why Microsoft Intune is the foundation of the replacement and what RealmJoin adds (3,000+ maintained packages, packaging on request, organic packages, staged updates, self-service, 175 runbooks, LAPS), a capability comparison of DSM, Intune and Intune with RealmJoin, the key decisions (catalog size, modernization versus lift-and-shift), ten migration steps from the assessment to decommissioning DSM, and why it is not too late: first pilot deployments in under eight hours, the rest in stages.

## Company

RealmJoin is a brand of glueckkanja AG (https://www.glueckkanja.com), a Microsoft partner with more than 260 professionals in Germany, Australia, Austria, Spain and Switzerland. glueckkanja was Microsoft Worldwide Partner of the Year winner or finalist in 2017, 2019, 2020, 2022, 2023, 2024 and 2025 and also builds SCEPman, RADIUSaaS, KONNEKT, Sendman, TerraProvider and Autopilot Monitor.

Contact: sales@realmjoin.com
YouTube: https://www.youtube.com/@realmjoinintune
X: https://x.com/realmjoin
GitHub: https://github.com/realmjoin