We use MDM for a lot more than that, though we don't block any apps. And it isn't all about security either.
Some of the things
- Auto app installs: We have a lot of apps people need for work, like the VPN, Outlook, Teams etc. And apps they need for their specific location or job role. The MDM takes care of installing those so the user doesn't have to figure all this out.
- Autoconfiguration: There's a facility called AppConfig where you can push config settings to apps that support it, making things easier on the end user.
- Network (and other settings) configuration: Pushing all the certs people need to connect to our wifi. And we push Per-app-vpn settings for the apps that need it.
- Security validation: Do people not have outdated company apps or OS? Do they have the security app (Lookout)?
- Security settings management: Make sure people have their phone encrypted and a pincode set so important data is not lost in a taxi.
In fact wiping is one of the things that happens very rarely. Especially as we enforce encryption and a decent PIN, it's not as much of an issue anymore to wipe a phone as soon as we can. A lot of users get hung up over our ability to do this, but on Android we can only wipe the work profile anyway (and even on Apple we don't normally wipe the whole device, just the company apps). Unless they call us and ask us to wipe it because they lost it :P But a lot of them seem to think we're just sitting there all day wiping phones for fun.
Some of the things
- Auto app installs: We have a lot of apps people need for work, like the VPN, Outlook, Teams etc. And apps they need for their specific location or job role. The MDM takes care of installing those so the user doesn't have to figure all this out.
- Autoconfiguration: There's a facility called AppConfig where you can push config settings to apps that support it, making things easier on the end user.
- Network (and other settings) configuration: Pushing all the certs people need to connect to our wifi. And we push Per-app-vpn settings for the apps that need it.
- Security validation: Do people not have outdated company apps or OS? Do they have the security app (Lookout)?
- Security settings management: Make sure people have their phone encrypted and a pincode set so important data is not lost in a taxi.
In fact wiping is one of the things that happens very rarely. Especially as we enforce encryption and a decent PIN, it's not as much of an issue anymore to wipe a phone as soon as we can. A lot of users get hung up over our ability to do this, but on Android we can only wipe the work profile anyway (and even on Apple we don't normally wipe the whole device, just the company apps). Unless they call us and ask us to wipe it because they lost it :P But a lot of them seem to think we're just sitting there all day wiping phones for fun.