Microsoft 365 Business Technical Fundamentals Series Welcome to the Microsoft 365 Business Technical Fundamentals Series

iOS and Android management IN this video we will be discussing the mobile application management capabilities that were introduced when Microsoft 365 Business was released, and then we will discuss the capabilities that were added with the April update.

Unified endpoint management with Microsoft 365 Business Intune gives you the flexibility and control to secure your data on any device—even those you don’t manage. Primary Public Kiosk Companion Shared Contractor Information worker Company-Managed Employee-Managed 3rd-Party-Managed Secure your data on virtually any device with Intune The Mobile Application Management and Mobile Device Management capabilities of Microsoft 365 Business are delivered by Microsoft Intune. It is a unified endpoint management solution that can help you managed your Windows, Android, iOS, and macOS devices from the cloud. Starting on the top left hand side we can see that for company owned and managed devices, we really want to be managing the device from the device upwards. As we start moving to the left, we have scenarios where we really only want to be managing data related to the user’s corporate identity, without having to take control over the device. Mobile Device Management (MDM) Mobile Application Management (MAM) Enroll devices for Provision settings, Report & measure Remove company Publish mobile Configure and Report app Secure & remove company management certs, profiles device compliance data from devices apps to users update apps inventory & usage data within mobile apps

iOS and Android This means that we can take different approaches for the iOS and Android devices that are in use in the organisation, depending on whether the organisation or the individual own them.

Mobile Application Management – Personal Devices Limited to managing company data within company managed apps Simplified options through Device Policies in Microsoft 365 admin center If list of managed apps needs to be expanded, use Intune in the Azure Portal Allows remote removal of company data Through the Microsoft 365 Business Admin Center we have a simplified approach to managing iOS and Android using identity within the different applications that are listed. While the more frequently used Office mobile apps can be selected through this interface, there are more apps available for configuration through the Intune portal if that’s a deployment requirement. Users are responsible for installing the apps onto their devices, there is no mechanism with mobile application management to assign the app to the device, instead we are configuring the installed app based on the sign in that is used. The focus of the policies we can apply through the admin center are primarily around preventing data leakage. When we use Mobile Application Management, we can wipe the work related data, but we cannot delete the user’s data or reset their device.

Mobile Device Management – Company Owned Devices Managed through Intune in the Azure Portal Can be used to deploy store or custom apps to users and devices Includes ability to factory reset device remotely MacOS can also be managed this way In order to apply MDM policies to iOS and Android, we need to create these in the Intune blade of the Azure portal. We can apply policies that restrict mobile operating system features that aren’t required, or configuring the settings that are required. We can also start targeting the devices for application deployments from the Play Store or App Store. Because we are managing at the device level, we can do a complete wipe or reset of the device if it is lost or stolen. For those of you with environments with MacOS users, you can target those devices for policies as well.

Demonstration iOS and Android policies Let’s switch over to the Microsoft 365 Business Admin center and then the Azure portal so you can see where these policies can be configured.

Thank you. You’ve seen that there are different approaches that can be taken with managing devices depending on the requirements of the organization, and it’s easy to mix and match these approaches if we need to control company owned as well as personal devices.