Intune MAM and MDM policies
I started looking at MAM policies and how they could better protect our company data if we go the BYOD direction. Reading through the documentataion it sounds like I have to pay attention to were I apply the policy either MDM or MAM
Is it possible to have both MDM and MAM policies applied to the same user at the same time, for different devices? For example, if a user could be able to access their work resources from their own MAM-enabled machine, but also come to work and use an Intune MDM-managed device. Are there any caveats to this idea?
If you apply a MAM policy to the user without setting the device state, the user will get the MAM policy on both the BYOD device and the Intune-managed device. You can also apply a MAM policy based on the managed state. So when you create an app protection policy, next to Target to all app types, you’d select No. Then do any of the following:
Apply a less strict MAM policy to Intune managed devices, and apply a more restrictive MAM policy to non MDM-enrolled devices.
Apply an equally strict MAM policy to Intune managed devices as to 3rd party managed devices.
Apply a MAM policy to unenrolled devices only.
https://docs.microsoft.com/en-us/mem/intune/apps/mam-faq
More Stories
Shrink PowerPoint files
Need to reduce the size of your PowerPoint file that contain a large number of pictures. Give this a try...
Setting the exchange online max send and receive size
Quick post today around setting exchange online max send and receive size. It can be set using the GUI in...
How to find your Microsoft Exchange build number
When documenting your environment, it’s important to keep track of the build number of your Exchange server. To get the...
Micrsoft Defender for Endpoints
We use Microsoft Defender for endpoints on our physical workstations. I'm now looking at it for our servers. The servers...
Sync Active directory user data with SharePoint
If you want to sync standard common attributes from active directory to sharepoint. Its easy, AD sync to Azure AD...
Microsoft graph API to access sharepoint
Recently I've had to setup a few different app registration using Azure AD to access sharepoint sites. Once you get...