What is Mobile Device Management (MDM)?

Mobile Device Management: definition

The more employees work on the go, the more devices with company data are out and about beyond the office. Without central management, every device is set up by hand, updates pile up, and in the event of loss it is unclear which data is affected. On top of that, there is the risk of confidential data ending up on unprotected devices.

MDM solutions bring order to this. Today, they usually manage not only smartphones but also Windows and macOS computers; this is also referred to as unified endpoint management (UEM). Widely used solutions include Microsoft Intune, Jamf for Apple devices and Workspace ONE.

How MDM works

Devices are enrolled in the MDM—ideally automatically when they are first switched on, via programs such as Apple Business Manager or Android Zero-Touch. They then receive profiles with settings and policies directly from the cloud, without IT ever having to get its hands on the device.

IT can see at any time which devices are in use, whether they have the latest updates and whether security requirements are being met. Non-compliant devices can be automatically blocked from accessing company data.

• Automatically set up Wi-Fi, email, VPN and certificates
• Distribute and update company apps
• Make PINs, encryption and updates mandatory
• Maintain an inventory with device status and software versions
• Locate and lock lost devices or wipe their data

Benefits, limits and BYOD

MDM saves setup time, increases security and provides an overview of all devices. New employees receive a ready-to-use device, and if a device is lost, company data can be protected quickly. Providing proof to customers or auditors, for example regarding device encryption, also becomes easier.

When private devices are used for work (bring your own device, BYOD), a sensitive approach is required. In such cases, usually only a separate work area containing company apps is managed, while private data remains untouched. Since MDM fundamentally provides monitoring capabilities, data protection and, where applicable, the works council’s co-determination rights should be clarified early on. This article does not replace legal advice.

Real-world example: MDM during a device rollout

A company equips its field sales team with new smartphones. The devices are registered in Apple Business Manager right at the time of purchase. Employees unpack them, sign in and automatically receive email, VPN and the apps they need. If a device is lost, it is locked remotely and the company data is wiped. Updates for the operating system and apps are approved centrally and distributed on a schedule.

Nano Concepts sets up MDM solutions and combines them with IT rollouts and ongoing support—across Germany together with its IT service partners.