Microsoft delivers two techniques to cope with mobile system administration: MDM for Business office 365 and Microsoft Intune.
The organization mobility sector has altered noticeably in the earlier handful of yrs. Cellular system administration (MDM) platforms this kind of as MDM for Business office 365 was the moment enough for most companies. As products this kind of as iPads, wearables and IoT products turned common in the organization, even so, numerous companies desired innovative administration abilities and a unified console. Unified endpoint administration (UEM) solutions this kind of as Intune entered the current market, which provided a way for IT admins to control a assortment of various products under a single console.
MDM even now has use instances these days, even so. MDM for Business office 365 supplies a constrained function set, but it is included in the price of numerous Business office 365 subscriptions. This built-in instrument delivers companies an built-in, economical way to control mobile products. Microsoft Intune, on the other hand, supplies a loaded function set and arrives with extra charges.
MDM for Business office 365 abilities
MDM for Business office 365 supplies a lightweight version of MDM that does not incorporate mobile application administration (MAM). It supplies companies with MDM guidelines and settings that will aid to control access to Business office 365 info for supported mobile products and apps. For stolen or missing products, it delivers the skill to remotely wipe the system to clear away corporate info.
MDM for Business office 365 supplies aid for the following platforms:
- iOS ten. or afterwards
- Android four.four or afterwards
- Home windows 8.1 (constrained to Trade ActiveSync performance)
- Home windows ten (requires the system to be Azure Lively Directory joined)
Supported access control eventualities
MDM for Business office 365 supplies a handful of eventualities that will prompt the person to enroll their system. When the user’s system would not comply with the policy, the person may possibly be blocked from accessing Business office 365 info, dependent on the policy configuration.
These are the following eventualities:
- Obtain to Trade by making use of the built-in mail application on iOS ten or afterwards
- Obtain to Trade by making use of the built-in mail application on Android four.four or afterwards
- Obtain to Business office and OneDrive for Small business by making use of the Outlook, OneDrive, Term, Excel or PowerPoint application on iOS ten or afterwards
- Obtain to Business office and OneDrive for Small business by making use of the Outlook, OneDrive, Term, Excel, PowerPoint or the Business office Cellular (phones only) application on Android four.four or afterwards
Individuals who are making use of mobile browsers to access Business office 365 info will not be prompted to enroll their products and will not be blocked.
Supported policy settings
With MDM for Business office 365, IT can allow certain settings as demands to access Business office 365 info. IT can use these settings in the supported access control eventualities to block buyers from accessing Business office 365 info. These settings are divided into the following groups:
- Stability – Call for password settings
- Encryption – Call for encryption settings
- Jailbroken – Call for non-jailbroken products
- Managed e-mail profile – Call for managed e-mail profile
MDM for Business office 365 also supplies a constrained set of guidelines that IT can use to configure settings on the user’s system, this kind of as guidelines to prevent info loss on products, access public clouds, make screen captures and access the keep.
Microsoft Intune abilities
Microsoft Intune is a UEM platform that supplies MDM and MAM performance and arrives with extra charges, as it really is not component of the various Business office 365 subscriptions. It requires an firm to have licenses that incorporate the rights for making use of Microsoft Intune. These licenses incorporate Microsoft Intune standalone, the Business Mobility + Stability and the Microsoft 365 subscriptions.
Microsoft Intune will help companies to supply MDM and MAM guidelines and settings that will aid with managing access to corporate info. This contains not just info in Business office 365, but nearly all corporate info that is available from apps that are uncovered via Azure Lively Directory (AAD). For stolen or missing products, Intune supplies the skill to remotely wipe the system or application to clear away corporate info. It supplies companies with a powerful technique to protected and control mobile products, apps and corporate info.
Microsoft Intune supplies aid for the following platforms:
- iOS and iPadOS eleven. and afterwards
- Mac OS X ten..twelve and afterwards
- Android five. and afterwards, like Android Business
- Home windows 8.1, like Home windows 8.1 RT
- Home windows ten, like Home windows ten Teams, Home windows ten IoT and Home windows Holographic for Small business
Supported access eventualities
Microsoft Intune supports numerous eventualities. The key distinction of MDM for Business office 365 vs Intune is that Intune is not constrained to Business office 365-associated eventualities. For most companies, the administration boundaries need to increase to incorporate all apps and info that can be uncovered via AAD and all apps on the products that can use modern-day authentication. Intune integrates effectively within just a Microsoft ecosystem, like Business office 365.
Microsoft Intune can do much more than just control access to corporate apps and info. IT can use Intune to verify compliance of products, deploy apps, assign innovative configurations like Wi-Fi configuration, push certificates and VPN configurations, supply stock information and much more. And that’s only mentioning MDM eventualities. Moreover that, it also supplies MAM eventualities, like the skill to limit access to corporate apps and info and the skill to accomplish a selective wipe of only the application.
Supported policy settings
Microsoft Intune supplies numerous policy settings and it really is nearly impossible to list all the possibilities. It supplies the policy settings that are available with MDM for Business office 365 and numerous much more. These policy settings are categorized to supply performance to deal with the supported access eventualities – for instance, guidelines to verify access demands, guidelines to verify compliance, guidelines to configure settings, guidelines to configure updates and the skill to deploy, configure and control apps.
MDM for Business office 365 vs. Microsoft Intune
The following desk supplies an overview of the key abilities of MDM for Business office 365 vs Microsoft Intune.
It really should be distinct that Microsoft Intune is the most rational option from a stability and administration point of view. That would not that mean there is no use circumstance for MDM for Business office 365. For smaller companies, or companies that only use Business office 365, this could be enough. That does involve powerful agreements with the personnel, even so, as MDM for Business office 365 only supplies simple stability for accessing Business office 365 info.
MDM for Business office 365 is a good starting off level for any firm starting to deploy MDM. To supply actual stability and administration abilities, even so, any firm really should eventually search at making use of Microsoft Intune when making use of much more than just Business office 365.
To aid a migration route from MDM for Business office 365 and Microsoft Intune, companies can operate both equally solutions along with each other. When a person will get a Microsoft Intune license, the enrollment system will automatically like the Microsoft Intune enrollment higher than the MDM for Business office 365 enrollment.