Intune for BYOD

[timb551]

Hi

I am new to Intune and BYOD and i want to get a basic iOS policy in place.

Essentially at the moment all we want to ensure is that users use the Outlook app for company email (but free to use native for their own stuff) and to allow us to then remove the outlook app should we need to.

Im sure i will want to do more as time goes by but can you give me some pointers on those?

thanks

[#2]

@timb551 

Thanks for creating a topic about this.

Do you have the apple business manager configured? 

This allows you to onboard and "follow" the devices, if the devices are not only company used but also privately used this may interfere with the GDPR. 

You can find how to configure outlook for ios on microsoft at this link:
Manage Outlook for iOS and Android with Intune | Microsoft Learn

I would advise to use a PIN protection as it is of stronger protection. Although people in practise almost always use the same PIN it's still a better option then if you don't enable this.

Also select that the users can only use work or school accounts on the app. 

I generally use the following:

- PIN Enabled

- Work school account enabled

- Enable contact sync, so that the people are synced from outlook to local contact(use only when entirely company used)

- Calendar sync(make it so that user's have a choice, maybe 2 config policies)