Device management modes
The following tables list the device management modes to help you plan your environment. Some of these options can be combined or used in conjunction, and some modes are exclusive. For more information about and instructions to configure these features, see the Administration content.
iOS
iOS
Activation type | Device management mode | UEM service for behind-the-firewall enterprise connectivity |
|---|---|---|
MDM controls | Enterprise email only | Yes
|
MDM controls | Device-wide VPN for email and apps | Yes
|
MDM controls | Device Control and App Deployment ( BlackBerry UEM Client ) | No
|
MDM controls | BlackBerry
Dynamics | Yes
|
MDM controls | iOS Supervised - DEP | Yes
|
MDM controls | iOS Supervised - Apple Configurator 2 | Yes
|
MDM controls | Microsoft Intune | Yes
|
User privacy | Enterprise email only | Yes
|
User privacy | Work Apps catalog ( BlackBerry UEM Client ) | No
|
User privacy | BlackBerry
Dynamics | Yes
|
User privacy | Microsoft Intune | Yes
|
Device registration for BlackBerry 2FA only | BlackBerry 2FA only | No |
Android
Android
The activation types in this section support
Samsung Knox
policies on Samsung
devices and BlackBerry
Dynamics
for additional security in the work profile.Activation type | Device management mode | UEM service for behind-the-firewall enterprise connectivity |
|---|---|---|
Work and personal - user privacy (Android Enterprise with work profile) | Android Enterprise | No
|
Work and personal - user privacy (Android Enterprise with work profile) (Premium) | Android Enterprise | Yes
|
Work space only (Android Enterprise fully managed device) | Android Enterprise
| No
|
Work space only (Android Enterprise fully managed device) (Premium) | Android Enterprise
| Yes
|
Work and personal - full control (Android Enterprise fully managed device with work profile) | Android Enterprise | No
|
Work and personal - full control (Android Enterprise fully managed device with work profile) (Premium) | Android Enterprise | Yes
|
Android legacy management types
Android
legacy management typesAs of
Android
10, Google
has deprecated the use of Android
device administrator for Samsung Knox
and MDM controls
has been deprecated by Google
.Activation type | Device management mode | UEM service for behind-the-firewall enterprise connectivity |
|---|---|---|
MDM controls | Device Control and App Deployment ( BlackBerry UEM Client ) | No |
MDM controls | BlackBerry
Dynamics | Yes
|
MDM controls | Microsoft Intune | Yes
|
Work and personal - full control | Samsung Knox | Yes
|
Work and personal - user privacy | Samsung Knox | Yes
|
Work space only | Samsung Knox | Yes
|
User privacy | Microsoft Intune | Yes
|
Device registration for BlackBerry 2FA only | BlackBerry 2FA only | No |
BlackBerry 10
BlackBerry 10
Activation type | Device management mode | UEM service for behind-the-firewall enterprise connectivity |
|---|---|---|
Work and personal - Corporate | Work perimeter and user privacy perimeter | Yes
|
Work and personal - Regulated | Work and personal perimeter regulation | Yes
|
Work space only | Work perimeter only (Enterprise connectivity via BlackBerry Secure Connect Plus or BlackBerry Dispatcher , MDS-CS)
Redundancy via BlackBerry Affinity Manager | Yes
|
macOS/OS X
macOS
/OS X
Activation type | Device management mode | UEM service for behind-the-firewall enterprise connectivity |
|---|---|---|
MDM controls | Device management | No
|
Windows
Windows
Activation type | Device management mode | UEM service for behind-the-firewall enterprise connectivity |
|---|---|---|
MDM controls | Device management | No
|
MDM controls | BlackBerry
Dynamics | Yes
|
MDM controls | Microsoft Intune | No (unless combined with BlackBerry
Dynamics )
|