Organization-owned devices enrolled in Intune.Here is an example of a tenant with Intune device and app management with the new elements highlighted. Common identity and device access policiesįor device and app management for your Microsoft 365 tenant, you have determined the Intune settings and policies to validate and restrict users, their devices, and their use of local and cloud productivity apps.Here is an example of the application of these settings and policies to validate and restrict users, their devices, and their use of local and cloud productivity apps like Microsoft Teams.įor device access and app management, use the configurations in these articles: Microsoft Entra ID Protection user risk policies.Microsoft Intune device compliance and app protection policies.Microsoft Entra Conditional Access policies.Microsoft provides a set of configurations for identity and device access to ensure a secure and productive workforce. Identity and device access configurations You might want to treat devices differently, depending on their uses. You'll also determine how you're going to manage personal devices and organization-owned devices. For example, you can use an MAM policy that requires a user to enter a PIN when accessing SharePoint on the device. In this scenario, you can protect your apps using MAM. But you still need to protect your organization's resources and data. Users with their own personal devices may not want to enroll their devices or be managed by Intune and your organization's policies. For example, you can install specific apps, create a password policy, install a VPN connection, and more. After a device is enrolled, it is a managed device and can receive your organization's policies, rules, and settings. MDM is when users 'enroll' their devices in Intune. You use Microsoft Intune to manage access to your organization using MDM or MAM. If you have Microsoft 365 E3 or E5, you should use Intune. For more information, see Capabilities of Basic Mobility and Security. Basic Mobility and Security, which is a subset of Intune services included with all Microsoft 365 products for managing devices in your organization.Microsoft Intune, which is a comprehensive device and app management solution for enterprises.

There are two options for device management: To help you secure and protect your organization's resources, Microsoft 365 for enterprise includes features to help manage devices and their access to apps. Here is an example of the validation and management of users, their devices, and their use of local and cloud productivity apps like Microsoft Teams. For example, you can prevent emails from being sent to people outside your organization or isolate organization data from personal data on your worker's personal devices. You can manage iOS, Android, macOS, and Windows devices to protect access to your organization's resources, including your data. Microsoft 365 for enterprise includes features to help manage devices and the use of apps on those devices within your organization with mobile device management (MDM) and mobile application management (MAM).

Manage apps and devices