This article is your guide to everything you need to know about enterprise mobility management and related topics. If you’re new to EMM, you can learn the basics. If you’re already familiar, bookmark this to find key resources. And if you want to know our world-view on anything, we’ve got that, too.
This article gets updated every few months, most recently on August 20, 2018. For daily EMM news and opinions, head to the BrianMadden.com homepage, our RSS feed, my Twitter account, or our Friday Notebook series.
What is MDM, MAM, EMM and BYOD?
In 2018, we don’t need to convince anybody that enterprise mobility management, mobile device management, mobile app management, and BYOD are a real thing—they’re all here, established, and mature. I wrote a book on this all the way back in 2013, but I don’t have plans to write a new one at this time, so for now, here are articles that describe our worldview.
Recent articles on the state of enterprise mobility:
- It’s 2018—Every company already ‘does mobility,’ no matter what
- Even basics like email and Wi-Fi can make doing MDM worth it
- Android BYOD should be easier in 2018 (and in 2019, and in 2020...)
- BYOD & privacy: Don’t settle for less than Android Enterprise in 2018
- The state of Android Enterprise in 2018
- Mobile device management products aren’t a commodity, despite past predictions.
- Apple’s iOS management protocol needs to get better for BYOD. Here’s why and what they could do.
- Corporate devices are getting all the love these days, but BYOD challenges remain.
- Are we too focused on typical office workers? The rise of the extended enterprise.
Essential articles on mobile app management:
- The complete guide to mobile application management: Why exactly is MAM so challenging?
- The complete guide to mobile application management: Understanding different MAM techniques.
- The complete guide to mobile application management: How to pick MAM for different use cases.
- Video: Cut through the confusion and choose the right mobile app management technique.
- Infographic: When to use MDM, MAM, and other EMM techniques.
- PSA: Every IT shop should be testing the iOS 12 beta
- Do you let your BYOD users choose between MDM enrollment and MAM-only?
- Evaluating MAM SDKs and wrappers is still hard. What can we do?
What comes after enterprise mobility management?
- Just what is a "workspace"?
- Two augmented reality and wearable device use cases that made me say “Ah-ha!”
- Machine learning hype is growing, but there’s no need for IT to worry.
- Will digital assistants be a security nightmare like BYOD?
- Are digital assistants ready for serious enterprise use yet?
For community support and commiseration, check out the MobilXperts Slack group.
If EMM applies to the mobile part of the “mobile/cloud era,” identity and access management is one of the most important technologies for dealing with the cloud part (at least from the end user perspective). See:
Mobile security and mobile threat defense
Mobile devices have a completely different threat model than desktop operating systems. See:
- Mobile Threat Defense is finding its groove - Part 1 - The landscape;
- Part 2 - The technology
- Part 3 - The market
- Apple’s iOS 11 security white paper (PDF)
- Android.com security overview
- Google’s Android 2017 Security Year in Review (Blog post | complete PDF)
- Fortnite will require Android users to allow unknown sources. Time to rethink MTD and EMM policies?
- Mobile threat defense vendors are taking on phishing, a rising concern on mobile devices
Apple and iOS MDM resources
Most of Apple’s official iOS and macOS MDM documentation is pretty easy to find these days:
- iOS Deployment Reference, macOS Deployment Reference, and Apple TV management overview
- Apple device configuration profile key reference (PDF)
- Over-the-air profile delivery and configuration
- Mobile device management protocol reference (PDF) This is newly-public, it used to be vendor-only! And here’s a Github project that tracks changes.
- Device Enrollment Program, Volume Purchase Program, Apple School Manager, and Apple Business Manager
- Apple Configurator (Free in the Mac App Store.)
- Apple WWDC 2018: Here are the new iOS 12 MDM features
- Ground Control is a third-party product that’s useful for dealing with large numbers of DEP-enrolled and supervised devices.
- You should follow SimpleMDM on Twitter—even if you’re not a customer, their blog posts offer clear and informative coverage of Apple MDM concepts.
- MacAdmins on Slack is a great community resource, too.
Google and Android MDM resources
We all know the Android MDM story: Originally, Android didn’t have great MDM capabilities, so OEMs like Samsung added their own. Then in 2014 and 2015, Android for Work came along, and now it’s just called Android Enterprise (and as of 2018, the E in Enterprise is capitalized).
- Android Enterprise homepage: Main marketing-oriented site, introduces concepts, lists supporting vendors and devices.
- Android Enterprise blog: The official blog from Google.
- Android Enterprise demo
- Android Enterprise help page
- Managed Google Play help page
- Google Developer site for Android Enterprise and Android Developer site for Android Enterprise: dig down into features and implementation.
- Google Play API for EMM (EMMs use this to deploy apps from Managed Google Play.)
- Test device policy controller: Essentially a generic freestanding EMM agent you can play with.
- Features by version: Android 5 Lollipop; Android 6 Marshmallow; Android 7 Nougat; Android 8 Oreo; and Android 9 Pie.
- Android Management API: A Google service that can act as middleware between a management platform and Android devices. Here’s the client Device Policy Controller app.
- You can also check out Android Enterprise guides (plus other guides and blog posts) from Jason Bayton.
Samsung Knox provides EMM features that can be used on top of (and underneath) Android Enterprise. See:
Windows 10 MDM and Unified Endpoint Management
Windows 10 brought Modern Management and support for MDM, and now a new trend (and confusing acronym): Unified Endpoint Management. Here are some recent blog posts:
- How Windows 10 co-management works with SCCM and Intune/MDM, and how third parties can use it, too
- Put your Windows 10 deployments on AutoPilot
And here are shortcuts to Microsoft’s documentation:
IoT and other platforms
- IoT and IT/OT convergence.
- EMM-managed IoT versus 3-tier IoT.
- Brian Madden (yes, Brian!) popped back up in the industry recently and gave a great session on IoT and how it relates to EUC at Igel Disrupt—here’s a video.
- Chrome Enterprise: Google’s service for managing Chromebooks. It integrates with third-party EMM
- Alexa for Business management coming to Citrix within 90 days: Alexa has MDM APIs, and they include features for BYOD Amazon Echos (so have fun with that!). Citrix was the first EMM to offer support.