Events
Microsoft 365 Community Conference
May 6, 2 PM - May 9, 12 AM
Skill up for the era of AI at the ultimate community-led Microsoft 365 event, May 6-8 in Las Vegas.
Learn moreTurn off Basic Mobility and Security
To effectively turn-off Basic Mobility and Security, you remove groups of people defined by security groups from the device management policies, or remove the policies themselves.
Remove groups of users by removing user security groups from the device policies you've created.
Disable Basic Mobility and Security for everyone by removing all Basic Mobility and Security device policies.
These options remove Basic Mobility and Security enforcement for devices in your organization. Unfortunately, you can't simply "unprovision" Basic Mobility and Security after you've set it up.
Important
Be aware of the impact on users' devices when you remove user security groups from policies or remove the policies themselves. For example, email profiles and cached emails might be removed, depending on the device. For more info, see What happens when you delete a policy or remove a user from the policy?
In your browser type: https://compliance.microsoft.com/basicmobilityandsecurity.
Select a device policy, and select Edit policy.
On the Deployment page, select Remove.
Under Groups, select a security group.
Select Remove, and select Save.
In your browser type: https://compliance.microsoft.com/basicmobilityandsecurity.
Select a device policy, and then select Delete policy.
In the Warning dialog box, select Yes.
Note
For more steps to unblock devices if your organization devices are still in a blocked state, see the blog post Removing access control from Basic Mobility and Security for Microsoft 365.
Additional resources
Training
Module
Understand Conditional Access policies using Microsoft Intune - Training
In this module, you'll learn about policy and security management using Microsoft Intune.
Certification
Microsoft 365 Certified: Endpoint Administrator Associate - Certifications
Plan and execute an endpoint deployment strategy, using essential elements of modern management, co-management approaches, and Microsoft Intune integration.
Documentation
-
Set up Basic Mobility and Security - Microsoft 365 admin
Set up Basic Mobility and Security to secure and manage your users' mobile devices by performing actions such as remotely wiping a device.
-
Manage device access settings in Basic Mobility and Security - Microsoft 365 admin
For devices, you can't manage with Basic Mobility and Security, block Exchange ActiveSync app access to email and use Microsoft Graph PowerShell to get details about org devices.
-
Manage devices enrolled in Mobile Device Management in Microsoft 365 - Microsoft 365 admin
Sign in to Microsoft 365 and set up Basic Mobility and Security to use the built-in mobile device management to secure and manage your users' mobile devices.