intune BYOD iOS and Android.

Posted by heartgoldt20@reddit | sysadmin | View on Reddit | 2 comments

Before we are going to implement Intune fully. I need to setup and testplan to see how the users interact with it. So what are the best practices to secure these devices with it still being BYOD and not interacting with personal data. Tell me your experience of setting it up for an hybrid environment.

Reply to Post

2 Comments

[-]

1hamcakes@reddit

[App Protection Policies](https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy) (APP) in Intune are going to be required. Allows you to protect company data on devices that aren't enrolled to Intune. Getting this bit right is critical. As another user posted, this is a part of Intune Mobile App Management. Make a clear distinction between devices the company owns and those it does not. Do not enroll devices into your MDM that your company does not own.

[-]

beritknight@reddit

It sounds like you want MAM. https://learn.microsoft.com/en-us/mem/intune/apps/app-management Manage just the business apps and data on the BYOD device, not the whole device.