A short definition
Mobile device management (MDM) is software that gives an IT team central control over an organization’s mobile devices. From one web console, the team can enroll new devices, push settings and apps, enforce security rules, find a lost device and wipe it if needed.
The word “mobile” is broader than it sounds. Besides phones and tablets, an MDM can manage rugged handhelds in a warehouse, a tablet mounted at a store counter, a screen in a hotel room or an Android-based radio used by a field team.
Why mobile device management exists
Twenty years ago, most company data lived on desktop computers inside the office. Today, a large share of daily work happens on mobile devices: sales reps take orders on tablets, technicians close work orders on phones, nurses check patient records at the bedside, and couriers scan parcels on handhelds.
That shift created three problems that manual management cannot solve:
- Scale. Configuring 500 tablets one by one is slow and error-prone. Doing it again after every app update is not realistic.
- Risk. Mobile devices leave the building. They get lost, stolen or left in taxis, often with company data on them.
- Visibility. Without a central system, nobody knows which devices exist, who has them, which OS version they run or whether they are still secure.
MDM grew out of these needs. It turns a scattered collection of devices into a fleet that can be managed with consistent rules.
The building blocks of an MDM
Every MDM product, whatever its brand, is built from the same four parts.
| Component | What it does |
|---|---|
| Management console | The web interface where administrators enroll devices, write policies, deploy apps and read reports. It runs on a server in the cloud or in the organization’s own data center. |
| Agent on the device | An app installed on each device with management rights granted by the operating system. It applies policies, installs apps and reports device status. |
| Communication layer | The secure channel between server and device. Modern MDMs keep a near real-time connection so commands such as “lock now” arrive within seconds. |
| Policies | The rules: password length, blocked features, allowed apps, Wi-Fi settings, kiosk mode and so on. Policies are assigned to groups of devices, not configured device by device. |
How these parts interact is covered in detail in how MDM works.
What you can do with MDM
The exact list depends on the product, but a mature Android MDM covers the following areas:
- Enrollment. Bring new or reset devices under management by scanning a QR code or tapping an NFC tag, with the right settings applied automatically. See device enrollment.
- Policies and restrictions. Enforce password rules and turn off the camera, USB file transfer, Bluetooth or factory reset. See policies.
- App management. Install, update and remove business apps silently, and block apps that should not be on work devices. See app management.
- Kiosk mode. Lock a device to a single app or a small set of apps, for counters, classrooms and vehicles. See what is kiosk mode.
- Remote support. View and control a device’s screen remotely to help a user without visiting them. See Live Control.
- Location and geofencing. See where devices are and get alerts when they leave a defined area. See location and geofencing.
- Security and compliance. Check device integrity, lock or wipe a lost device and act automatically when a device breaks the rules. See security and compliance.
- Messaging. Send notifications to one device, a group or the whole fleet.
- Content distribution. Push documents, forms and files to devices.
- Inventory and reporting. Keep an up-to-date list of hardware, OS versions, apps and usage, and export it for audits.
For a problem-by-problem view with industry examples, read what MDM is used for.
Who needs MDM
A useful rule of thumb: if your organization owns more devices than one person can keep track of, or if work data lives on devices that leave the office, you need MDM. Size matters less than risk.
Some typical examples:
- Public agencies and security forces issue phones and tablets that carry sensitive data and must follow strict rules. See government and defense and security.
- Field sales and distribution teams depend on one ordering app being installed and up to date on every device. See field sales and FMCG.
- Hospitals use shared tablets that handle patient data. See healthcare.
- Schools and universities need tablets that stay on learning apps, especially during exams. See education.
- Retail and logistics run handhelds and counter tablets that must do one job reliably. See retail and transport and logistics.
The benefits of MDM
Security. Every device follows the same baseline: screen lock, encryption, approved apps only. A lost device can be locked or wiped in seconds instead of becoming a data breach.
Lower cost. Remote setup and remote support cut the number of trips to the IT desk and site visits. Devices last longer when users cannot install whatever they like.
Productivity. New staff receive a ready-to-use device on day one. App updates reach the whole fleet at once instead of depending on each user.
Compliance. Inventory, policy reports and logs give auditors evidence that the organization controls its devices. This helps with internal security standards and data protection rules such as GDPR and KVKK.
MDM and employee privacy
A common worry is that MDM lets an employer see everything on a phone. What the organization can see depends on who owns the device and how it was enrolled.
- On a personal device with a work profile, the MDM manages only the work profile. It cannot read personal messages, photos, browsing history or the list of personal apps.
- On a company-owned, fully managed device, the organization has broader control. Depending on the product and the policy, it can see installed apps, network usage and location.
Whatever the model, good practice is to tell employees in writing what is collected and why, and to collect only what the purpose requires. Our guide on MDM and data protection covers this in more detail. The different ownership models are compared in device ownership models.
MDM, EMM and UEM
You will also see the terms EMM (enterprise mobility management) and UEM (unified endpoint management). EMM adds app and content management to device management. UEM extends the same idea to laptops and desktops. Today most products called MDM already include the EMM layer, so the difference is often one of marketing. The full comparison is in MDM vs EMM vs UEM.
How DeepManage does it
DeepManage is an Android EMM (enterprise mobility management) solution developed by Infoline since 2014 and used on more than 1,000,000 devices. It includes everything described above and adds app, content and identity management. It covers enrollment, policies, app management, kiosk mode, Live Control, location, security, messaging, content and reports in one console. You can run it in the cloud or install it on-premises, including in networks with no internet access. Pricing is per device, with every feature included: see pricing.
If you are planning a rollout, start with a short list of device groups and the rules each needs. Then request a demo and we will walk you through it on your own scenarios.