Mobile Device Management - Lesson 1.3 | CompTIA A+ Core 1 Notes

Introduction to Mobile Device Management (MDM)

MDM (Mobile Device Manager) is specialized software used to centrally manage mobile devices in an organization.
Allows management of both company-owned and personally owned (BYOD) devices.
Provides system administrators with control over device policies, security settings, and application management.

Policy Enforcement: Set rules for device usage, such as allowed/disallowed applications and disabled features (e.g., camera, GPS).
Data Partitioning: Creates a separate, secure area on personal devices for corporate data while keeping personal data private.
Security Policies: Enforces requirements like screen locks, PINs, or biometric authentication.
Application Management: Controls which apps can be installed, blocks unauthorized apps, and can push required apps automatically.
Remote Configuration: Automatically configures settings like email, Wi-Fi, and VPN without user intervention.
Device Monitoring: Tracks device status, OS version, security settings, and network usage.
Data Synchronization: Manages how and when data (e.g., emails, contacts, calendars) syncs over Wi-Fi or cellular networks.
Lost Device Management: Enables remote wipe or lock of corporate data if a device is lost or stolen.

Employees use their personal devices for work purposes.
Benefits: Convenience for employees (no need to carry two devices), cost savings for organizations.
Challenges: Balancing corporate security with user privacy.
MDM solutions create a partitioned workspace on personal devices to separate work and personal data.
Policies define what happens to corporate data if the device is lost, upgraded, or traded in.

The company purchases and owns the device but allows personal use.
Provides full control over the device while still offering flexibility for employees.
Similar to how organizations manage laptops or desktops, with strict policies on data storage and security.
Company determines what happens to data if the device is lost, replaced, or reassigned.

Employees select a device from a pre-approved list provided by the organization.
Combines flexibility for users with standardized management for IT teams.
Reduces compatibility issues while still offering some user choice.

Centralized Dashboard: View and manage all devices, including device name, platform, user, email, and IMEI (unique identifier).
Device-Specific Settings: Configure restrictions such as disabling the camera, FaceTime, Siri, or voice dialing.
Security Controls: Enforce two-factor authentication (2FA), multi-factor authentication (MFA), and encryption.
Over-the-Air (OTA) Synchronization: Manage backups, restores, and data sync settings (e.g., Wi-Fi vs. cellular).
Granular Sync Settings: Specify which data types (e.g., mail, contacts, calendars) sync and under what conditions.
Application Deployment: Push required business apps (e.g., Outlook, cloud storage) to devices automatically.