Setting the foundations for your mobile device management

Android devices can be enrolled through Android Enterprise mainly via the following enrollment modes:

• Fully managed device (a.k.a. device owner) mode is intended for managing the entire device owned by your company/organization. This management method requires you to factory reset the devices during enrollment. There are various enrollment options: QR code, NFC, DPC token, Android for Enterprise Zero Touch and Knox Mobile Enrollment.
• Work profile (a.k.a. Profile owner) mode enables you to secure company data on a personal (employee-owned) device without risking the user’s privacy. The work profile is a container, which isolates work data and apps from personal use on an Android device. You can download, configure and deploy applications from the Google Playstore with Android Enterprise and deploy a series of restrictions to the work profile.
• Fully managed with work profile (a.k.a. Android COPE) is the best option for managing devices that are owned by your organization and used for both work and private use. It is possible to enforce a wide range of company policies, while device users can rest assured that their data, like installed applications, remain private. An important difference to the profile owner mode is that the device can be enrolled after a factory reset and that the device user cannot unenroll the device. Please note that all data will be wiped when you perform a factory reset.

To start managing your Apple devices in Miradore, you need to take the Apple Push Notification service into use. This service is used for secure communication between Miradore and managed Apple devices.

Apple devices can be managed

• by creating an MDM profile
• via the Apple Automatic Device Enrollment (formerly known as ADE)

With an MDM profile on iOS devices, you can deploy apps, e-mail accounts, configuration profiles and ensure that professional data is treated separately from private data. With Apple ADE, iOS devices can be added automatically to your Miradore site. You also have more functionalities at your disposal, such as Black- and Whitelisting for applications, wallpaper changes, etc.

The same enrollment methods apply also to macOS devices; however, there might be slight differences in functions and features. Additionally, you can use scripts (bash) executed in a system context.

Miradore supports two management methods for Windows devices:

• Management through Miradore Client software (also referred to as Light)
• Management through Miradore Client & MDM profile work account (also referred to as Full)

The Light mode installs a client for patch management and application deployment, as well as an inventory for hard- and software.

The Full mode offers the same functions, and additionally the option to wipe or restart a device remotely.

Additionally, you have the possibility to use scripts (Powershell and Command) executed in a system context.