Welcome to Understanding MDM Authority Options. In this lesson, we’ll review the options available when setting up the MDM authority before enrolling devices, whether they are Androids or other devices.

When you setup the MDM Authority, which is also known as the Mobile Device Management Authority, you have a few configuration options to choose from. You have the Intune Standalone option, the Intune Co-Management option, you have Basic Mobility and Security for Microsoft 365, and you have Basic Mobility and Security for Microsoft 365 coexistence.

Intune Standalone is a cloud-only management option. This option provides all capabilities that Intune offers and can be setup in the Intune console. This can be used with all devices, including iPhones, iPads, Androids, and Windows devices.

Intune co-management is the integration of the Intune cloud solution and Configuration Manager.  However, this option is designed for managing Windows 10 and devices and later. Using the co-management option allows you to use Configuration Manager to manage PCs while leveraging Intune for security and modern provisioning.

The Basic Mobility and Security for Microsoft 365 option is the built-in option in Microsoft 365 for securing and managing mobile devices, including iPhones, iPads, Androids, and Windows phones. Using this option allows you to create and manage device security policies and to remotely wipe devices. It also allows you to view detailed device reports. If you want to switch from this built-in option to Intune, you need to buy Intune licenses.

Basic Mobility and Security for Microsoft 365 coexistence allows you to add Intune to your tenant even if you are already using Basic Mobility and Security for Microsoft 365. You can set the management authority to either Intune or to Basic Mobility and Security for Microsoft 365 in order to dictate which service will be used to manage their MDM-enrolled devices. 

The management authority for each user is then based on the license assigned to the user. So, for example, if a user only has a license for Microsoft 365 Basic or Standard, devices for that user would be managed by Basic Mobility and Security for Microsoft 365. On the other hand, if the user has a license that includes Intune, devices for that user would be managed by Intune. 

I should mention that if you add a license that includes Intune to a user that’s managed by Basic Mobility and Security for Microsoft 365, that user’s devices will get switched over to Intune management when that Intune license is assigned. That being that case, you need to be sure that you have Intune configurations assigned to your users BEFORE you replace Basic Mobility and Security for Microsoft 365. If you don’t, their devices will lose their Basic Mobility and Security for Microsoft 365 configurations but won’t get any replacement from Intune.

So, with that, you’ve been introduced to the MDM Authority options that are available.