MDM vs MAM: What's the Difference for UK Businesses?

MDM (Mobile Device Management) manages the entire device — applying security policies, enforcing compliance, and enabling remote wipe at the device level. MAM (Mobile Application Management) manages only specific applications on a device, applying security policies to work apps (Outlook, Teams, SharePoint) without affecting personal apps or data. MDM is for company-owned devices; MAM is for personal (BYOD) devices.

Yes. Mobile Application Management (MAM) allows you to protect company data on personal devices by applying security policies specifically to Microsoft 365 apps, without enrolling the device in full management. Staff can use their personal phones for work email and Teams whilst keeping their personal apps, photos, and data completely private.

Microsoft Intune is the recommended MDM and MAM platform for businesses using Microsoft 365, and is included in Microsoft 365 Business Premium. Other MDM/MAM platforms (Jamf, VMware Workspace ONE) are available but are generally less tightly integrated with the Microsoft 365 ecosystem. AMVIA deploys Intune as the primary MDM/MAM solution for UK SMEs.

When an employee leaves, their Microsoft 365 account is disabled or removed from your tenant. This automatically revokes their access to Microsoft 365 apps. Intune MAM can also perform a selective wipe — removing all company data from the Microsoft 365 apps on their personal device — upon account removal. Personal apps, photos, and personal data on the device are unaffected.

When an employee leaves, their Microsoft 365 account is disabled or removed from your tenant. This automatically revokes their access to Microsoft 365 apps. Intune MAM can also perform a selective wipe — removing all company data from the Microsoft 365 apps on their personal device — upon account removal. Personal apps, photos, and personal data on the device are unaffected.