Extend Microsoft Intune administration for student users with advanced endpoint-management capabilities. Microsoft part number 588779418F2D provides Intune Plan 2 for Students, including Microsoft Tunnel for Mobile Application Management and specialty device management. It applies to education environments that need to manage application access and device types beyond standard user-assigned Windows, macOS, iOS, or Android endpoints. Microsoft Tunnel for Mobile Application Management supports protected access from managed mobile applications without requiring full device enrollment. This is relevant when an institution needs app-level access controls for student-owned mobile devices while keeping personal device management separate from organizational application policy. Specialty device management addresses endpoints with focused operational roles, including shared, dedicated, or purpose-built devices that require Intune administration. Intune Plan 2 for Students fits within a Microsoft cloud endpoint-management environment where administrators already use Intune policies, app protection controls, and device-management workflows. Its distinction within the Intune family is the addition of mobile application tunnel capability and specialty device management rather than basic endpoint enrollment alone. Use this education-specific subscription where those Plan 2 functions are required for student users or student-managed endpoints.