Intune manages your Macs.Orchard keeps them compliant.

Intune covers deployment and configuration across platforms, but Mac-specific patching, enforcement and remediation often fall to hand-built scripts. Orchard packages that specialist work into a maintained service, reducing reliance on custom engineering and individual expertise.

Orchard discovers supported applications installed across your Mac estate and automatically brings them into your patching policy. As users install new software, your coverage adapts without administrators continually reviewing inventories or maintaining application lists.

Orchard adds enforcement around the outcome. Set the timeframe and Orchard helps ensure applications are actually updated across the estate, while clearly identifying devices that have fallen behind.

Intune's macOS update policies set the intent. Orchard monitors the resulting state of each Mac and, where devices remain behind, progressively enforces the update requirement, including restricting administrator selected applications once the deadline has passed.

Orchard monitors macOS security controls against the CIS benchmark and automatically remediates controls that can be enforced locally, giving IT another layer of assurance that security controls remain in their intended state.

Orchard reporting is built around one simple question: are our Macs compliant? See application patching, macOS update and security control compliance across the estate, with devices requiring attention immediately visible.