For organisations that supply users with work devices, this degree of control is often required, regardless of the size of the organisation. This means that a large range of MDM policies can be applied to the device to make it meet the corporate requirements. Now that MDM capabilities are included, it means that corporate owned iOS and Android devices can be managed at the device level. What can be remotely removed from the device are work email profiles and work related documents, for example.įigure 1: Existing Android MAM policy settings in the Microsoft 365 admin center. This means that you don’t have to be concerned about an admin doing a remote device wipe, and you losing any personal data that hasn’t been backed up or synchronised. For BYOD scenarios, this is a great solution, as it means your device isn’t being managed by your employer, instead they only have management capabilities of the work profile within the supported mobile apps. Up until this update for Microsoft 365 Business, iOS and Android devices could not be managed directly, but Azure Active Directory based identity and Microsoft Intune’s MAM capability allowed the management of Office mobile apps through the Admin Center. Let’s take a look at the iOS and Android enhancements first. The other big benefit for those that already know Intune or the Azure portal is that you don’t have to think about whether or not you are using Microsoft 365 Business within the boundaries of its Intune licensing which was originally the case. You also get MacOS MDM support, important for those managing mixed environments. The main technical difference is now you are also licensed for iOS and Android Mobile Device Management (MDM), rather than only having Mobile Application Management (MAM) on those platforms. This post is a little different to the previous ones in this series, because it’s focused on the additional capabilities that are now licensed with the included Microsoft Intune.

Controlled folder access intune