openskills.info
Course Preview

Endpoint Management

Endpoint management is how an IT team sets up, configures, secures, and eventually retires the laptops, phones, and tablets people use for work. Instead of touching every device by hand, IT enrolls each one in a management platform that pushes settings, apps, and security policy to it automatically and reports back its status.

itIT service management and support

Endpoint Management

Endpoint management is the IT support practice of enrolling laptops, phones, and tablets in a management platform, then using that platform to configure, secure, support, and eventually retire each device without physically touching it. The platform is usually a cloud service; the device runs a management client, built into its operating system, that checks in, applies assigned settings, and reports what happened.

The practice exists because organizations issue and permit far more device types, ownership arrangements, and operating systems than one IT team could configure by hand. A help desk technician who once imaged a handful of identical desktops now supports personally owned phones, company laptops in employees' homes, and shared tablets on a retail floor, often across Windows, macOS, iOS, iPadOS, Android, and Linux at the same time. Endpoint management turns that variety into a repeatable service: a new hire's laptop arrives configured before the technician opens the box, and a lost phone can be locked or wiped from a console instead of a parking lot.

The vocabulary: MDM, MAM, EMM, and UEM

These four terms describe increasing scope, and vendors use them inconsistently, so treat them as a ladder rather than interchangeable labels.

Mobile device management (MDM) manages an enrolled device using management frameworks built into its operating system. Enrollment installs a management identity, after which the platform can deliver configuration profiles, enforce settings, install apps, query inventory, and issue remote commands such as lock or wipe. MDM controls the device.

Mobile application management (MAM) manages only specific apps and the organizational data inside them, without enrolling the whole device. A user's personal phone can run a managed version of a work email app that enforces a PIN and blocks copying data to personal apps, while the rest of the phone stays outside IT's reach. MAM controls the app.

Continue the course

This section is part of the paid course.

See pricing to subscribe, or log in if you already have access.

Where this skill leads

Relevant careers

See how this topic contributes to broader role-level skill maps.

Sources