Getting Started with Intune
Are you just getting started with Intune? An implementation can be quite cumbersome and leave you not sure where to start? Well looks like you’ve found the right article.
To begin, let’s discuss the differences between Application and Device Management.
Mobile Application Management (MAM)
Enables limited control of security settings
- Application Control Access (PIN, Biometrics, etc.)
- Encryption verification (with App Pin or Device PIN verification)
- Data Loss Prevention (can limit copy-paste between unmanaged applications)
- Does not require Enrollment
Mobile Device Management (MDM)
Enables full device management
- Configuration Policies
(Wifi, Encryption, etc.) - Compliance Policies (Validation checks)
- Ability to Install Apps
- Full Device Wipe
- Requires Enrollment
Breaking down the above listing, the key points are that MAM provides protection of your M365 apps and data with minimal user involvement. If you’re company doesn’t need to
Is MAM Right for you?
So the big question, which solution is right for you? The big reveal comes down to a few points.
Does your company need to:
- Manage Windows, Macs, iOS and Android devices?
- Configure devices settings?
- Verify a device’s compliance before giving access?
- Fully wipe devices? Or is selective wipe okay? For those needing the full-wipe capability, this is only possible with full Device Management.
- Install Apps or control the license of Apps? If so, you’ll likely refer to MDM’s capability.
Other concerns will be if your company allows Bring Your Own Device (BYOD) or just corporate devices to connect? The earlier decisions will impact how you elect to treat them, but you may have different policies for each of these use cases. That is completely acceptable.
Another tip…Intune Management can always be accessed quickly via https://aka.ms/intune.