1. Microsoft 365 Business Technical Fundamentals Series
Welcome to the Microsoft 365 Business Technical Fundamentals Series

2. iOS and Android management
IN this video we will be discussing the mobile application management capabilities that were introduced when Microsoft 365 Business was released, and then we will discuss the capabilities that were added with the April update.

3. Unified endpoint management with Microsoft 365 Business
Intune gives you the flexibility and control to secure your data on any device—even those you don’t manage.
Primary
Public Kiosk
Companion
Shared
Contractor
Information worker
Company-Managed
Employee-Managed
3rd-Party-Managed
Secure your data on virtually any device with Intune
The Mobile Application Management and Mobile Device Management capabilities of Microsoft 365 Business are delivered by Microsoft Intune.
It is a unified endpoint management solution that can help you managed your Windows, Android, iOS, and macOS devices from the cloud.
Starting on the top left hand side we can see that for company owned and managed devices, we really want to be managing the device from the device upwards.
As we start moving to the left, we have scenarios where we really only want to be managing data related to the user’s corporate identity, without having to take control over the device.
Mobile Device Management (MDM)
Mobile Application Management (MAM)
Enroll devices for
Provision settings,
Report & measure
Remove company
Publish mobile
Configure and
Report app
Secure & remove company
management
certs, profiles
device compliance
data from devices
apps to users
update apps
inventory & usage
data within mobile apps

4. iOS and Android
This means that we can take different approaches for the iOS and Android devices that are in use in the organisation, depending on whether the organisation or the individual own them.

5. Mobile Application Management – Personal Devices
Limited to managing company data within company managed apps
Simplified options through Device Policies in Microsoft 365 admin center
If list of managed apps needs to be expanded, use Intune in the Azure Portal
Allows remote removal of company data
Through the Microsoft 365 Business Admin Center we have a simplified approach to managing iOS and Android using identity within the different applications that are listed.
While the more frequently used Office mobile apps can be selected through this interface, there are more apps available for configuration through the Intune portal if that’s a deployment requirement.
Users are responsible for installing the apps onto their devices, there is no mechanism with mobile application management to assign the app to the device, instead we are configuring the installed app based on the sign in that is used.
The focus of the policies we can apply through the admin center are primarily around preventing data leakage.
When we use Mobile Application Management, we can wipe the work related data, but we cannot delete the user’s data or reset their device.

6. Mobile Device Management – Company Owned Devices
Managed through Intune in the Azure Portal
Can be used to deploy store or custom apps to users and devices
Includes ability to factory reset device remotely
MacOS can also be managed this way
In order to apply MDM policies to iOS and Android, we need to create these in the Intune blade of the Azure portal.
We can apply policies that restrict mobile operating system features that aren’t required, or configuring the settings that are required.
We can also start targeting the devices for application deployments from the Play Store or App Store.
Because we are managing at the device level, we can do a complete wipe or reset of the device if it is lost or stolen.
For those of you with environments with MacOS users, you can target those devices for policies as well.

7. Demonstration iOS and Android policies
Let’s switch over to the Microsoft 365 Business Admin center and then the Azure portal so you can see where these policies can be configured.

8. Thank you.
You’ve seen that there are different approaches that can be taken with managing devices depending on the requirements of the organization, and it’s easy to mix and match these approaches if we need to control company owned as well as personal devices.