Hacker News new | ask | show | jobs
by drunken-serval 2523 days ago
MDM gets applied if you want to access your exchange server with the default iOS apps because those apps don't have remote management built in.

If you use the Microsoft apps, you don't need to have an MDM applied because those apps handle the remote management functionality themselves.
2 comments
RKearney 2523 days ago
No it does not (source: iOS device user and Exchange admin).

Adding an Exchange account to an iOS device optionally allows the Exchange client to enforce password and screen lock requirements, encryption, and allow for remote device wiping.

It does not have any access to device location, data, photos, contacts, or anything else you can think of outside of device passcode, encryption, and remote wiping.

An MDM profile is a completely separate thing from Exchange. Also, unless the iOS device is supervised (which has to be done at time of setup and would require wiping the device if you want to supervise one that's already setup) you're extremely limited in what you can do and see.

link
lunchables 2523 days ago
This guy MDMs (and is 100% correct).

Source: We provide employee's with iOS devices and use VMWare Workspace ONE (formerly AirWatch) along with their Secure E-Mail Gateway and also use Apple's Device Enrollment Program. This provides for as complete control over the device as you can get.

link
kryogen1c 2523 days ago
Thats kind of my point. MDM has an administrative and capital cost. The Outlook app is free for everyone and doesnt get IT involved in your personal phone.

The use-case for MDM is not to get email on personal phones - thats the right tool for the wrong job. MDM is for simplifying the deployment and management of corporate phones.

link