Intune MAM vs MDM: What's the Difference?

This video describes (at a high level) the difference between Mobile Application Management and Mobile Device Management in Intune. No slides, only demos. Here's a link to the documentation for Intune, use this to get started in your journey! docs.microsoft...

[@prasadfalke376]

Probably the first top-notch video for me on MAM and MDM that explained what the Intune components are using demo and a very simple explanation. Kudos to Matt. Looking forward to more content.

[@incognito8477]

Awsome content thank you very much, on a side note, just improve the sound quality, keep up the great work you are doing for the community.

[@igottmituns]

Matt, I work at a particularly large VAR and cover Microsoft Security exclusively. Very familiar with you and your peers and have to say your videos are very informative and well done. Thank you for all that you do!

[@TheKojootti23]

Does MAM model block user for adding organisation user to non-managed application for example non-managed mail app?

[@rajivsharaf99]

With O365 MDM is available. Can we achieve the objective of whitelisting personal devices ?

[@nguyenthanhminh8850]

Why don't I find the Intune tab in Azure Portal console?

[@msmacthankQ]

Perfect just what I needed. Very clear information thank you

[@matheuslima6882]

Man, your channel is great!!

[@Nonoloki]

Dear Matt when you enrollment your iphone for test you could select the device property (I own this device "Personal", Contoso own this device "Corporate") where i can set this to ask user in enrollment proccess?

[@troller4jesus]

How can the user be prompted to add company portal app for management?

[@thamizh6514]

HI thr, Really enjoyed. Thanks a lot. :)

[@jorgeblandon1406]

Matt, in ios i have noticed that i dont need company portal installed to access teams with an app protection policy. But in android, im being asked to download the company portal. If this is MAM, i should not need company portal correct ?

[@229Mike]

Out of curiosity at 14:20 seconds I noticed you skipped the fourth * where you got to put in your Apple ID... Is there a generic one for a corporate need for something?

[@MattSoseman]

An Apple ID is required, most orgs will create a “service account” for it - but maybe I don’t fully understand your question.

[@229Mike]

@@MattSoseman you know Matt, I was convinced you weren’t gonna respond ha ha... also that fast! Actually, you did answer my question- sorry for a 101 question. Thanks!

[@RabbitJnr]

Thanks Matt.

[@MattSoseman]

You're welcome!

[@lexiewong85]

Great video, thanks a lot for putting this together!

[@nadimziade20]

Very good information thank you for sharing, is it possible to get a presentation for Microsoft Intune?

[@stephen5453]

Great Video!

[@shadabhussain283]

Great video for beginners

[@jayvilla5985]

If we setup outlook as a managed protected app, could they still login using the native mail app?

[@MattSoseman]

Yes. So you would have to configure AAD Conditional Access to block the native mail app by selecting "Require Approved Client App" under "Grant".

[@jayvilla5985]

@@MattSoseman thank you. I’ve seen a lot of intune videos online and yours is by far one of the easiest to understand. Good stuff.

[@ThiagoBeier]

Thanks Matt. #appreciate!! #subscribed!!

[@chrisbessler165]

Great video and very helpful explanation. When you performed the Selective Wipe in MAM, can't the user just reconnect and type in their credentials again and download the org data again since the wipe command will have already been completed?

[@MattSoseman]

Yes but in a true offboarding scenario (ie employee termination) you would also disable their AAD account which will deny access when they try to log back in to the app.

[@chrisbessler165]

@@MattSoseman Thank you so much for the quick reply Matt. If you disable their AAD account at the same time as you request the Wipe, would they still be able to receive the wipe request since they can't connect with the service? Secondly, when you say "disable their AAD account", do you mean Block Sign in under their AAD User Profile?

[@incognito8477]

Really helpful indeed, thanks

[@Nsadheo]

Thanks man. #appreciate!! #subscribed!!