I have MECM 2103, but I do not have the Endpoint Manager just the Configuration Manager. Likewise my company is not using Azure. My limited understanding is that Intune is needed to become a full blown MECM, but Intune needs Azure. Is this correct? I was recently asked to add USB client detection and protection, but I do not have the necessary console features to do this. Is there anyway it can be done without adding Intune?