this post was submitted on 25 Mar 2025
750 points (98.3% liked)
Technology
68244 readers
4237 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
In my last job I installed Outlook on my personal phone to access my work calendar conveniently. Found out from a colleague that if the admin for an Outlook server you're signed into on any device fucks up badly enough you could end up having that device completely wiped so I promptly uninstalled it.
Yeah, you're talking about MDM (Mobile Device Management) solutions/tech. I'm not an IT employee myself, but I am familiar with these things from work (similar situation as yours), and also because I'm a nerd and like researching these things.
On some phones, like Samsung's ("Secure Folder"), you can have [essentially] a second, containerized instance of Android running. Or you can think of it like a virtual second user that ultimately you have control of. So what I did was install Outlook in that. Because the MDM permissions (e.g. wipe the phone) would only affect that container.
Otherwise, for everyone else -- yeah don't install work apps/accounts on your personal devices.
Just to expand on this. There is an Exchange specific wipe feature. I think it is quite old school and not really used. Have seen it, but never tested it myself. As per documentation it can perform device wipe, but only if native mail client using ActiveSync is used not Outlook. And it probably does not work with all native mail clients, depends if app has device admin permissions.
Current Intune MDM model always uses separate Android storage so any operation including wipe will affect only this storage not your personal space so employer can not see nor delete your personal data.
In Intune there is another option without a need of enrolling device (MDM) where you can manage supported apps. It's called MAM. If wipe is initiated it affects only data in all apps that support MAM.
In short, companies / schools cannot really wipe your device if we are talking about Intune MDM. Other MDM solutions probably can.
Now, that's a name I've not heard in a long time. A long time.