Device Management Technologies

Mobile devices can be managed by three different Microsoft technologies that offer a range of features depending on which technology is used, and often what type of device is connecting to the service.

Exchange ActiveSync in Exchange Server and Microsoft’s hosted Exchange Online service offers a limited range of options for configuring security policies on devices, including the ability to catalog devices, perform a complete device reset (wipe), require passcodes and mandate their complexity and expiration, and provide self-service password reset in the case of Office 365 and Exchange Online.

Office 365 now includes a basic tier of mobile device management (MDM), primarily to ensure that Office 365 content on devices remains secure. The Office 365 MDM service can force devices to meet compliance conditions, such as not being jailbroken or rooted, and some device policies, such as preventing the use of cameras or screen capture. Office 365 administrators can enforce policies at a user-group level and perform reporting of device compliance. The most comprehensive range of policy management that Office 365 MDM offers is for Apple iOS and Windows Phone 8.1.