MDM is the worst part of iOS. It undermines all of apple’s security claims, basically making iOS windows. Devices should not be able to be remotely controlled.
MDM is the worst part of iOS. It undermines all of apple’s security claims, basically making iOS windows. Devices should not be able to be remotely controlled.
MDM is designed for corporate owned phone environments where there's a great many good reasons to lock down a phone. If you're handing out company owned phones to employees you want the ability to remotely lock/wipe, install and remove apps, set a number of restrictions. If people want to do anything else they are completely welcome to do it on their own personally owned property.
For instance I have recently seen a very successful Apple MDM deployment in a school environment where the teachers and staff have access to a great depth and breadth of PII of a thousand children under age 16. You don't want all those phones to become a free-for-all of people doing whatever they want.
MDM enables enterprises to control how the phones they own behave. If anything it makes it more secure, if an enterprise were to only allow allowlisted apps to run on it.
The only issue is BYOD via MDM (when it's not via "Work Profile"), which is somewhat scary from a user perspective, especially from how hard it is to tell what permissions they might be able to spring on you at any time.
I assume they can spy on anything, that's why I refuse to do any kind of BYOD that requires MDM enrollment. It's also one IT mistake away from wiping out my personal data from my own property.
Company's Outlook, Teams, MS Authenticator and Slack on my personal phone? Ehhhh fine.
The second IT requires a profile it's the second I'm uninstalling anything company related from my phone. They can give me a company phone, or I will only access work related things from their laptop.
Happened twice to me, one time I got a company phone, the other, computer only.
And then some colleagues even paid out-of-pocket to upgrade their Android phones once IT dictated their OS were out of support. No way.
Your assumption is wrong.
How so?
Yeah, no - if I provide my employees $1000 devices, I most certainly would like to be able to exercise some sort of management over them.
> making iOS windows
Baseless claims.
$1000 is irrelevant. Corporate information, and clients information (sometime including PII) is worth millions.
It can be done all locally. How can an optional feature that's not even easy to use be the worst part of iOS?
MDM is not the default experience, while Windows doesn't really have a better experience to boast of.
Nonsense. MDM is usually for devices owned by the company or opt in by you personally. There is no way to attack or transparently MDM a personal phone that I know of.