What mobile device management (MDM) is#

Mobile device management is a type of software that easily manages the devices that access your systems, such as:

• laptops
• mobile phones
• tablets
• desktops
• servers.

Depending on how you set it up, these can be school-owned devices or include student and bring-your-own-device (BYOD) devices as well.

Examples of MDM applications include:

Microsoft Intune for Education – used for managing most devices including Windows and Apple devices

Google admin console – used for managing Chromebooks and Android devices

Jamf – designed for managing Apple devices.

Microsoft and Google applications are funded by us.

Why managing devices is important#

Schools manage lots of devices, which makes them a target for hackers. MDM can efficiently make changes, implement controls and update software across all your devices. Device management can:

• make sure software is updated, anti-virus software is installed and controls like password to unlock the device are correctly configured
• manage control over unauthorised application (app) installations that provide access to inappropriate or harmful content
• help with remote troubleshooting, reducing how often information technology (IT) administrators need to be onsite or teaching time is interrupted
• protect students from harmful content by monitoring usage
• provide education support by restricting access to non-educational content
• put security and protection policies in place
• prevent unnecessary device purchases.

Implementing device management#

We recommend getting an experienced IT administrator to manage your MDM – either an IT service provider or an internal IT specialist.

Your IT provider can make suggestions for your specific school.

Types of things you can implement include:

• security configurations around Wi-Fi and VPN
• encrypting the device and needing a passcode to unlock it
• which apps are installed, and keeping the software up to date
• wiping data remotely if a laptop is stolen
• making sure security software updates are installed
• automating the installation of common software packages or apps
• managing local user and administrator accounts
• get centralised reporting for asset management and insurance purposes.

Decide which devices to manage#

We recommend managing all school-owned devices, including those bought for student use. Device management applications can apply different rules to different groups of people, for example, leadership and staff devices, or staff and student devices.

You should also consider managing student-owned devices. This can help manage wireless networks and make sure core security controls are in place on those devices. Student-owned BYOD Windows or Apple devices can be managed with a range of MDM solutions. Student-owned BYOD Chromebooks will need to be managed in a Google Admin console.

About ChromeOS device management: Chrome Enterprise and Education Help – Google