MDM

Andybtsn · 15 May 2017 at 16:15

Hi all,

Presumably a lot of you have this in place in your working place, I'm just wondering from admin perspective how much visibility of someones phone you can actually see?

Thanks,

Rroff · 15 May 2017 at 16:16

Not an area I know much about but you'll probably need to provide more information - is this a company phone that is managed through such a system?

Myshra · 15 May 2017 at 16:20

I'm a part of the process that designs what Vodafone re-sells in this area (Apple DEP, GfE, VSDM-Airwatch, BES and others). It's easier to assume everything can be monitored if it's phone-security layer (like airwatch). Less if it's application encapsulation (GfE). Its possible to some of these solutions to force-deploy apps onto the phone that can spy as much as they like.

Andybtsn · 15 May 2017 at 16:42

Rroff said:
Not an area I know much about but you'll probably need to provide more information - is this a company phone that is managed through such a system?

Essentially can be a personal phone, enrolled in MDM and then certain things are restricted. I'm more wary of what is visible to the admin, i.e I know the phone can be wiped remotely but in terms of viewing of messages, call records, apps installed etc, I'm not sure?

Rroff · 15 May 2017 at 17:07

As Myshra said once they have any executable code on there ostensibly can do just about anything - I wouldn't personally enrol a personal phone that I used for anything other than business.

Myshra · 17 May 2017 at 08:53

Andybtsn said:
Essentially can be a personal phone, enrolled in MDM and then certain things are restricted. I'm more wary of what is visible to the admin, i.e I know the phone can be wiped remotely but in terms of viewing of messages, call records, apps installed etc, I'm not sure?

This is the minimum level for most MDM suites. I highly advise everyone to never use their personal device as a business tool. If your business wants you to be in contact 24/7 they should provide you a handset. I have had to witness the absolute worst kinds of abuse of this tech in countries where the law is less strict than the UK and you don't want to be on the recieving end of it, ever. If this is is something you must do, at best I'd only use Good for Enterprise or another encapsulation system as the admin can only wipe the app, not the handset.