Skip to content
English - United States
Schedule Consultation
  • There are no suggestions because the search field is empty.

What Is Mobile Device Management (MDM)?

Enforcing security on phones, tablets and laptops: encryption, passcodes, app control and remote wipe.

Mobile device management (MDM) is software that lets IT enforce security settings on phones, tablets and laptops, deploy apps and configurations, and remotely wipe company data if a device is lost, stolen or an employee leaves. It is how a business keeps control of data that lives on devices it does not physically hold.

What MDM does

  • Requires a passcode or biometric and enforces encryption.
  • Pushes Wi-Fi, email and VPN profiles so devices are configured correctly without a technician.
  • Installs and updates required apps, and blocks prohibited ones.
  • Checks device health (OS version, jailbreak status, encryption) before allowing access to company resources.
  • Locates, locks or wipes a device remotely.

MDM vs MAM

Mobile application management (MAM) controls only the company apps and data on a device, not the whole device. It is the right approach for personal phones: work email and files are protected and can be selectively wiped, while photos and personal apps are untouched. Full MDM is the norm for company-owned equipment. See what is BYOD.

What MDM can and cannot see

On a managed device IT can see model, OS, installed apps and compliance status. It cannot read personal texts, photos or browsing history, a concern employees raise often and one that a clear policy should answer directly.

Which platform

For Microsoft 365 businesses the usual answer is Microsoft Intune, included with Business Premium, which manages Windows, macOS, iOS and Android from one console. See what is Microsoft Intune. Intune also manages BitLocker disk encryption on Windows laptops.

Why insurers and frameworks ask about it

A lost unencrypted laptop is a reportable breach. Managed devices with enforced encryption and remote wipe turn that into a non-event.

Mobile device management, including MAM, selective remote wipe, device profile deployment and security configuration, is included in Mentis Group's Enhanced Cybersecurity services and supported through our Microsoft 365 support in Dallas.

Have a question about your own environment? Schedule a consultation with Mentis Group or call (866) 901-7808.