Personal IOS device gently remove MDM while switching to MAM

Question

We mistakenly allowed BYOD android and IOS devices to be enrolled into Intune. We have since blocked enrollment while enabling MAM. For the previously registered devices (especially iOS), what is the least disruptive way to remove the device from Intune MDM to switch to MAM? I believe deleting the personal iOS device will not affect data but the end user may need to reinstall company apps?

Answer 1

@mpls, Thanks for posting in Q&A. To remove a personal iOS device from Intune MDM to switch to MAM, the user can simply remove the device from the Intune portal. This will remove the device from MDM management, The next time the device checks in, any company data on it will be removed as Intune also retires a device when deleting it from the admin center. For iOS devices, apps that are pinned to the management profile, all app data and the apps are removed. These apps include apps originally installed from App Store and later managed as company apps unless the app is configured to not be uninstalled on device removal.

You can check what data is removed in the following link:

https://learn.microsoft.com/en-us/mem/intune/remote-actions/devices-wipe#effect-of-the-retire-action-on-data-that-remains-on-the-device

But the user will still be able to access company apps that are protected with MAM policies. However, the user may need to reinstall company apps if they were previously installed through MDM.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.