MDM Policy Reviews
MDM policy reviews for Microsoft Intune, Jamf and other platforms. We check whether your mobile device management policies say the right things and whether your devices are doing what the policies say.
What is an MDM policy?
An MDM policy is the set of rules an organisation pushes to its phones, tablets and laptops through a management platform such as Microsoft Intune or Jamf. It says what a device must have before it can reach company data (encryption, a PIN or biometric lock, a supported operating system version), what it is not allowed to do (sideload apps, back up work data to a personal cloud) and what happens when it is lost or the user leaves (remote wipe, conditional access cut off).
An MDM policy review checks the rules that exist, the rules that should exist and do not, then whether the rules that exist are enforced on the devices in front of you. The gap between a policy written in the portal and a policy applied to a fleet is where most of the findings live.
What the Review Covers
An MDM review looks at the whole chain from policy to device. Enrolment profiles, compliance policies, configuration profiles, app protection policies and the conditional access rules that decide what a device can reach. Each MDM policy is compared with what it should enforce for your devices and your data, then checked against the fleet to see whether it is being applied. Phones, tablets and laptops are all in scope, whether they are owned by the company or by the person carrying them.
Where MDM Policies Fall Short
The policy exists but is assigned to the wrong group, so half the fleet never receives it. A compliance policy marks devices as non compliant and nothing happens, because conditional access was never set to block them. Encryption is required on Windows and forgotten on macOS. App protection allows data to be copied from a work app into a personal one. Personal devices are enrolled with full device management when only the work data needed protecting. Each of these looks fine in the portal. None of them protects anything.
Policy Versus Practice
What the portal says and what the devices do are two different things. Devices stop checking in, users find the setting they can switch off and an exception made for one director quietly becomes the rule. An MDM policy review checks both sides: what your mobile device management policy says and what is true on the devices themselves.
What You Get From the Review
Policies That Apply
Every policy checked for whether it reaches the devices it was meant for.
Enforcement That Works
Compliance rules tied to conditional access, so a device that fails them is cut off from company data.
Data That Stays Put
App protection settings that keep work data inside managed apps on company and personal devices.
Coverage You Can See
A clear count of which devices are enrolled, compliant and protected.
How the Review Runs
We agree the platforms and device types in scope, then arrange access to the devices, either remotely or on site. The review starts with enrolment: which devices are managed, how they were enrolled and which ones should be and are not. Compliance, configuration and app protection policies are then read in full and compared with good practice for each platform. Conditional access rules in your identity platform are checked to confirm that a device failing compliance is blocked rather than just flagged. Finally the policies are compared with what the fleet reports, to find the gaps between intent and reality. The review can be carried out remotely or on site and changes nothing on your devices.
At a Glance
Platform Review
Intune, Jamf or others: enrolment profiles and compliance policies.
Enrolment Coverage
Checking all expected devices are enrolled and within MDM controls.
Compliance Policies
PIN, encryption and operating system rules, plus whether failing them blocks access.
Data Protection Review
App protection policies, data sharing restrictions and remote wipe.
Report & Retest
Risk rated findings with prioritised recommendations for your IT team. Free retest included.
Findings appear in your client portal as we find them. Our day rate is published on the pricing page.
You May Also Be Interested In
Frequently Asked Questions
What is an MDM policy review?
A mobile device management (MDM) policy review assesses how effectively your organisation controls and secures its mobile devices through your MDM platform. We review your configuration policies, compliance rules, access controls and integration with identity platforms to identify gaps that could leave devices or data exposed.
Which MDM platforms do you review?
We review Microsoft Intune, Jamf and other MDM solutions. The review covers enrolment profiles, compliance policies, device configuration, app protection policies, conditional access rules and data protection settings. If you use a less common platform please contact us to confirm compatibility.
What are the most common MDM configuration issues?
Policies assigned to the wrong groups, so they never reach some devices. Compliance policies with no conditional access behind them, so failing devices keep their access. Encryption enforced on one platform and not another. Weak PIN requirements. App protection that lets work data be copied into personal apps. BYOD devices with no separation between work and personal data.
Is an MDM review relevant for GDPR compliance?
Yes. GDPR Article 32 requires appropriate technical measures to protect personal data, which includes securing the mobile devices that access it. An MDM policy review helps demonstrate that you have taken reasonable steps to protect data on mobile devices, which is particularly important for organisations handling sensitive client or employee information.