With Microsoft Intune, you have the ability to manage the mobile apps that your employee’s may need to use in order to do their work. This functionality is in addition to managing devices and protecting your data. This is done with app protection policies, created and enforced by an admin. App protection policies are rules that ensure your organisation’s data remains safe or contained within a managed app.

A policy can be a rule that is only enforced when the user attempts to access or move secure data, or a set of actions that are restricted while a user is within that app. Apps can be protected with MAM if they have been integrated with the Intune App SDK (software development kit), or wrapped by the Intune wrapping tool (which can be used for apps that you did not develop yourself) but be mindful that you do require signing credentials in order to do this.

Intune’s mobile application management enables you to download required applications to an employees device, restrict and control access to company data, as well as remotely wiping any data on the device if it should be lost, or the user is no longer employed by the business. Overall, this allows for greater working flexibility for your employees, a reduced burden on your IT, maintains privacy for both your company data and emails, as well as your employees personal phone data.

Intune streamlines the device management process allowing you to manage PCs from the cloud with no infrastructure required. Alternatively, you can connect Intune to the configuration manager to manage all of your devices including PCs, Macs, and mobile devices from a single management console.

With enrolled devices, admins can perform a number of security functions like remotely reset passcodes, lock or wipe devices, encrypt data and prevent features like cameras or network roaming. Admins have a great deal of control across all users and devices, for more security and update management.

Admins can use Microsoft Intune management to control computers running any version of Windows and can configure anti-malware, firewall policies, and update virus definitions. The best part is that Intune can also manage Office mobile apps meaning admins can restrict actions such as copy and paste, even if a user is trying to paste something into a personal app that IT has no jurisdiction over.