How to classify MDM,MAM and Security policies?

Question

Hello,

As there are plenty of policies to be managed, it's lil confusing often which policy comes under which area? Can you please share how can I classify MDM,MAM and Security ? Which policies comes under which area ? Are all security policies comes under MDM/MAM ? Or MDM or MAM has it's own security policy and Microsoft 365 Security policies are totally another different area?

How can I identify that policy is a part of MDM/MAM/Security? can anyone please clarify?

Thanks,

Answer 1

MDM and MAM are managed by management solutions such as Intune. Azure Security Center allows you to use both built-in and custom policies to ensure compliance for your organization.

Intune MDM and MAM policies are separate from security center policies, and Intune also has endpoint security policies.

The difference between MDM and MAM is that MDM is about the control of devices such smartphones and tablets, whereas MAM is focused on specific corporate applications. MAM also controls device data but also allows for more granular control at the application level. The differences are covered in this Microsoft overview, Differences between MDM and MAM.

I've re-tagged this under "Intune" as this is more related to Intune than Azure Security Center.

Answer 2

Thank you @MarileeTurscak for your response!

I see there is an "App Protection/Security Policy" - which sounds like part of "Security and Protection" but it also comes under "Intune" so it could be part of MAM ? which is the base of MDM ? And therefore It's often confusing to categorize/understand the purpose of the policy based on it's name.

There are security/protection/compliance policies in Intune/End Point Manager, then there are some in "Security and Compliance" center, there are some in Exchange Admin Center etc.

Can you please clarify, how can I identify that "any" policy is a part of "MDM/MAM/Security/Protection/Exchange" ? (I assume device compliance would come under protection so I have not mentioned word "Compliance")

Thank you for your understanding!

Regards,