What is the difference between app protection and full enrolment?
App protection (MAM) only secures business apps. Full enrolment (MDM) manages the whole device.
Try this first
- 1MAM-only: only apps like Outlook and Teams fall under policy. Your phone stays yours; no control over camera, settings, or personal apps.
- 2Full enrolment: the employer sees the device, can enforce policy, and can wipe the whole device.
- 3Personal devices usually run MAM, company devices run full enrolment.
- 4Tell them apart: with MAM you only see a work badge inside Outlook/Teams. With MDM there is an MDM or work profile in Settings.
When to bring us in
Not sure which one applies to your device? Open Company Portal or ask us; we can see it in management.
See also
- Work and personal apps blur together on the same phoneAndroid Enterprise and iOS-with-Intune can enforce a work profile, isolating business apps in a separate container.
- Setting up Microsoft 365 on a new phoneOutlook, Teams, and OneDrive run smoothest if you install Authenticator first and sign the others in afterwards.
- Moving Authenticator to a new phoneMicrosoft Authenticator has built-in cloud backup. Run it before wiping the old device, otherwise everything has to be re-added by hand.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.