image
Understanding MDM Authority Options
Start course
Difficulty
Beginner
Duration
30m
Students
137
Ratings
5/5
Description

In this course, we review the enrollment options available and processes to follow for enrolling Android devices in Microsoft 365.

Learning Objectives

  • An overview of the many enrollment options available for Android devices
  • Learn the prerequisites needed before enrolling Android devices in Microsoft 365 via Intune 
  • Cover Android Enterprise, Android Device Administrator, and Android Open Source Project enrollment options

Intended Audience

This course is intended for those who wish to learn about Enrolling Android devices in Microsoft 365.

Prerequisites

You will require a basic understanding of Mobile Device Management in Microsoft 365.
Transcript

Welcome to Understanding MDM Authority Options. In this lesson, we’ll review the options available when setting up the MDM authority before enrolling devices, whether they are Androids or other devices.

When you setup the MDM Authority, which is also known as the Mobile Device Management Authority, you have a few configuration options to choose from. You have the Intune Standalone option, the Intune Co-Management option, you have Basic Mobility and Security for Microsoft 365, and you have Basic Mobility and Security for Microsoft 365 coexistence.

Intune Standalone is a cloud-only management option. This option provides all capabilities that Intune offers and can be setup in the Intune console. This can be used with all devices, including iPhones, iPads, Androids, and Windows devices.

Intune co-management is the integration of the Intune cloud solution and Configuration Manager.  However, this option is designed for managing Windows 10 and devices and later. Using the co-management option allows you to use Configuration Manager to manage PCs while leveraging Intune for security and modern provisioning.

The Basic Mobility and Security for Microsoft 365 option is the built-in option in Microsoft 365 for securing and managing mobile devices, including iPhones, iPads, Androids, and Windows phones. Using this option allows you to create and manage device security policies and to remotely wipe devices. It also allows you to view detailed device reports. If you want to switch from this built-in option to Intune, you need to buy Intune licenses.

Basic Mobility and Security for Microsoft 365 coexistence allows you to add Intune to your tenant even if you are already using Basic Mobility and Security for Microsoft 365. You can set the management authority to either Intune or to Basic Mobility and Security for Microsoft 365 in order to dictate which service will be used to manage their MDM-enrolled devices. 

The management authority for each user is then based on the license assigned to the user. So, for example, if a user only has a license for Microsoft 365 Basic or Standard, devices for that user would be managed by Basic Mobility and Security for Microsoft 365. On the other hand, if the user has a license that includes Intune, devices for that user would be managed by Intune. 

I should mention that if you add a license that includes Intune to a user that’s managed by Basic Mobility and Security for Microsoft 365, that user’s devices will get switched over to Intune management when that Intune license is assigned. That being that case, you need to be sure that you have Intune configurations assigned to your users BEFORE you replace Basic Mobility and Security for Microsoft 365. If you don’t, their devices will lose their Basic Mobility and Security for Microsoft 365 configurations but won’t get any replacement from Intune.

So, with that, you’ve been introduced to the MDM Authority options that are available.

About the Author
Students
90123
Courses
89
Learning Paths
56

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.