Is device policy app necessary?
With mobile device management (MDM) and application management in mind, organizations increasingly are looking to combine them with device policy. This creates the need for an app for managing policies on the device.
In a recent TechTarget.com/BYOD story, a reader asked if it's a good idea for an organization to also deploy the Microsoft Mobile Device Management App onto the Windows 10 devices.
"This will likely be a standard requirement when doing business with a large number of employees," the reader said. We reached out to the Microsoft Technical Evangelist for Windows 10, Brandon Watson, to find out what happens when Microsoft Mobile Device Management (MDM) is combined with device policy. Does having Microsoft MDM install create a conflict of interest between what company-owned and third-party apps can access? If so, how do organizations address this? First off, Watson tells us that Microsoft MDM is not installed by default on Windows 10, but you can manually enable it. "You can also turn off Windows Enterprise Mobility Center entirely by going to Start > Settings > System > Manage Mobility settings, where you can disable Windows Enterprise Mobility Center entirely."
"For device policy: If a user is already enrolled in policy management for another operating system, say, Windows 7 or 8, they will already be enrolled in that," he said. The only issue that comes up if this is possible is that these settings are global settings that apply to all device classes, according to Watson. As a result, a user who has both MDM and device policy applied, is not able to switch MDM off and keep their policies in place. So it's essentially a choice of one or the other.
"If your organization is choosing to use both device management and MDM for Windows 10, then they should enable MDM and disable their MDM policies (to allow individual users to choose their own policies, using those existing MDM policies)," Watson said. Microsoft says that one way around this would be to deploy Windows 10 onto the devices but still not enroll in any company MDM policy. "Once users boot to Windows 10 (for the first time), they will be automatically enrolled into the corporate MDM configuration," he said.
As long as Microsoft Mobile Device Management (MDM) is turned off, an employee can freely decide which application can access information about his or her Windows 10 devices.
Related Answers
What does Google Device Policy do to your phone?
Google Device Policy is a simple way to remotely block mal...
How do I find my Samsung phone from another phone?
Yes, I really have lost my phone. In this situation, do I ne...
How to switch from Google Apps Device Policy to Android Device Policy?
Google Device Policy allows you to specify if a device is permitted to...