Last updated: 7 November 2026
Mobile device management (MDM) lets your IT team enforce security on phones, tablets and laptops: passcodes, encryption, updates and remote wipe. For staff using personal devices (BYOD), app protection policies in Microsoft Intune can secure company data inside apps like Outlook and Teams without taking control of the whole phone.
Company device or personal device?
| Company-owned (full MDM) | Personal device (BYOD with app protection) | |
|---|---|---|
| Who controls the device | Your business | The owner; you protect only company apps and data |
| Enforced settings | Passcode, encryption, updates, apps | App-level PIN, copy and paste limits, encryption of work data |
| Remote wipe | Whole device | Company data only |
| Staff privacy | Lower | Higher |
| Best for | Laptops, shared and field devices | Staff phones and tablets |
Lost phone, no panic
Wipe company data remotely so a lost phone is not a breach.
Updates enforced
Devices that fall behind are blocked from company data.
Conditional Access
Only compliant, managed devices reach Microsoft 365.
Leavers handled
Remove access and company data the day someone leaves.
Cyber Essentials and BYOD
Personal devices that access company data are normally in scope for Cyber Essentials, so they need supported operating systems, updates, passcodes and malware protection. MDM makes that provable.
How ABCOM helps
We set up Microsoft Intune, Conditional Access and a short, fair BYOD policy. See our Intune overview.
Quick answers
Can we wipe an employee’s personal phone?
With app protection policies you can remove only company data and leave personal photos and apps untouched, which is fairer for staff and easier to agree in a BYOD policy.
Do we need MDM for a small team?
Yes, if phones or laptops access company email or files. The risk is the same whether you have 5 or 500 devices, and Intune is included in Microsoft 365 Business Premium.
Need a simple BYOD policy and device controls for your team? We can set it up.
Related answers and guides
- What is Microsoft Intune?
- What is Conditional Access?
- What is Zero Trust?
- Can my PC run Windows 11?
- All ABCOM FAQs
Sources and further reading
Want this sorted for you?
Talk to our Burgess Hill team about Microsoft 365 support. Free, friendly and no obligation.