Differences

This shows you the differences between two versions of the page.

--- organisationcloud/byod [2020_08_02 14:47] – jim
+++ organisationcloud:byod [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1
@@ Line 1: / Line 1: @@
-====== Bring Your Own Device ======
-===== 1 Overview =====
-{{:/organisationcloud:byod:steps:sme_1_overview.png}}
-Bring Your Own Device or BYOD as it is often referred to, refers to policies where employees may use their own smartphones, tablet devices and computers to access corporate data. This presents challenges for organizations who want to embrace the flexibility and cost savings of users using their own devices, but also want to ensure they still have "control". The SME File Fabric has support for controlling BYOD users of which an overview will be given in this Wiki section.
-Applicable to:
-  * SaaS hosted service
-  * IaaS service
-  * Enterprise on-premises Appliance
-===== 2 Managing User devices =====
-{{:/organisationcloud:byod:steps:sme_2_managing_user_device.png}}
-The Cloud Admin controls which devices and access clients that each user of the team can connect from. By default all devices and access clients are enabled.  \\ \\ The Cloud admin can entirely disable a user or just choose to disable access from any of the devices/access clients from the users settings. Clicking the checkbox next to the appropriate device blocks access to that device for that user. This means that if a device is lost even if login details are saved login will be denied.\\ \\ Blocked devices can easily be seen in the user summary.
-===== 3 Secure Access =====
-Our WebDAV implementation (see [[clouddav]]) supports the MobileIron Docs@Work application for accessing repositories.
-===== 4 Remote Wipe =====
-We often get asked about 'Remote Wipe', the ability for a device owner or corporate administrator to remove sensitive information without needing to physically access a device.
-==== 4.1 Corporate ====
-For a corporate administrator this typically means wiping corporate data and applications when an employee leaves or changes position. We recommend investing in one of many Mobile Device Management (MDM) solutions that support the remote removal of applications (and associated data).
-MDM solutions are available from operating system vendors and third-parties. Customers may use for example:
- * **iOS, MacOS:** [[https://www.apple.com/business/it/|Apple Business Manager]]
- * **Windows 10, Mobile:** [[https://www.microsoft.com/en-us/microsoft-365/enterprise-mobility-security/microsoft-intune|Microsoft Intune]]
-We have also had customers use third party solutions including:
- * [[https://www.oracle.com/partners/en/products/middleware/enterprise-mobility|Oracle Mobility]]
- * [[https://www.mobileiron.com|MobileIron]]
-==== 4.2 Owner ====
-For a device owner a remote wipe typically means removing all local data, credentials and applications. It's useful when a device has been lost or stolen, or even simply replaced, but is not physically available. In this situation options include: \\ \\
-  * **iOS, MacOS:** Remote wipe can be handled at a device level. All this is needed is that iCloud is enabled and [[http://itunes.apple.com/us/app/find-my-iphone/id376101648?mt=8|Find my iPhone (or iPad)]] is enabled. Remote wipe can then be executed from a web browser. \\ \\
-  * **Android:** If your user has Google Sync configured on an Android device with the [[http://support.google.com/a/bin/answer.py?hl=en&answer=1056433|Google Apps Device Policy]] app installed, you can use the Google Apps control panel to remotely wipe the device. \\ \\
-  * **Windows Phone:** For any Windows Phone device, launch [[http://www.windowsphone.com/|windowsphone.com]] on a desktop or laptop PC and sign in. Then click My Phone. From here, you can locate the phone with GPS, erase all the data, lock the phone and display a message, or change your password. \\ \\
-  * **BlackBerry:** Research In Motion offers [[https://appworld.blackberry.com/webstore/content/20844/|BlackBerry Protect,]] a free app that lets you find, lock, or wipe your BlackBerry from a remote location. \\ \\
-  * **WindowsOS:** Windows users might use software that allows remote login to a lost computer.
-==== 4.3 Containerisation ====
-Cotainerisation in mobile devices separates personal data from work data. \\ \\
-* **Android:** Android Apps can be containerised using the [[https://support.google.com/work/android/answer/6191949?hl=en|Android work profile]].
-\\ \\
-The prerequisite for Android work profile setup is an MDM-solution which can leverage the Android Enterprise platform.
-\\ \\
-An Android work profile setup method can differ depending on which software is being used.
-\\
-There are also Android Apps such as [[https://play.google.com/store/apps/details?id=com.oasisfeng.island&hl=en|Island]] which can enable individual users to activate and manage their own work profile to containerise Apps.
-\\ \\
-* **iOS:** * Apple's Unified Management Framework is built into iOS which means Companies don't necessarily need a separate agent MDM application. IT is able to control corporate Apps and data and configure, manage and secure devices.
-Further information can be found in the Apple PDF.  [[https://www.apple.com/business/docs/resources/Managing_Devices_and_Corporate_Data_on_iOS.pdf|'Managing Devices and Corporate Data on iOS']]