Microsoft Intune Plan 2 expands Intune management for organizations that need controls beyond conventional user-assigned endpoint administration. It includes specialty device management for dedicated-purpose hardware and Microsoft Tunnel for Mobile App Management (MAM), extending managed application access without requiring device-wide enrollment. These capabilities apply where shared or task-specific devices must reach approved business apps under centrally defined policy. Part number 92017E7C1-1Y provides the service as an annual subscription using nonprofit staff pricing. It applies to staff licensing rather than a physical appliance, cable, or endpoint device. The subscription supports eligible nonprofit organizations building Intune-based endpoint operations and needing the Plan 2 capability set across their staff environment. Plan 2 is differentiated within the Intune service family by its focus on specialty device administration and app-level Tunnel access for mobile application management. Specialty device support helps administrators bring purpose-built endpoints into management workflows, while Tunnel for MAM addresses application connectivity requirements for managed mobile apps. These capabilities make the service relevant to organizations operating shared, dedicated, or role-specific devices alongside conventional staff endpoints.