I'm seeking insights from anyone who has implemented Mobile Device Management (MDM) for employee-owned smartphones (both iOS and Android). Our goal is to protect corporate data (like email, Teams, and M365 apps) while being respectful of user privacy on personal devices. We're particularly interested in solutions that use app or container-level controls instead of full device lockdowns whenever feasible. If you've been through this process, I'd love to hear about:
- What worked well and what you'd repeat
- Lessons learned or unexpected challenges you faced
- Any user adoption or resistance issues and how you communicated about MDM
- Differences between iOS and Android that were surprisingly significant
- Privacy concerns from users and how you addressed them
- Policies you'd wish you'd set up sooner
- Anything leadership underestimated, like support load or edge cases
I'm really looking for real-world experiences rather than vendor pitches, so any 'scars and wins' you can share would be greatly appreciated!
3 Answers
Honestly, if maintaining privacy is a big concern, the best solution might be to provide them with work phones instead. This way, you won't have to worry about any privacy issues at all. I feel like companies that try to push BYOD just end up being cheap about it.
It's true! Some folks would prefer to ditch their corporate phone altogether if they didn’t have to deal with two devices. It's good that you're considering both sides of the argument!
From my experience managing MDM, one critical thing to keep in mind is how response times can be affected. Initially, we had everyone on call responding together, but after implementing MDM, it turned into just the on-call person handling it solo. Just a heads-up about those unexpected consequences!
Have you considered using MAM instead of MDM? MAM (Microsoft Mobile Application Management) is designed for situations like yours. It's much less intrusive while still allowing you to manage corporate data. Just curious why you’re leaning towards MDM instead!
I agree! MAM is definitely the better approach for personal devices.
We actually offer either to pay for a work phone or give a stipend. Some people don’t want to juggle two phones, which I totally get. It’s a tricky balance.