Endpoint Management
Endpoint management is how an IT team sets up, configures, secures, and eventually retires the laptops, phones, and tablets people use for work. Instead of touching every device by hand, IT enrolls each one in a management platform that pushes settings, apps, and security policy to it automatically and reports back its status.
itIT service management and support | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Intro
Endpoint Management
Endpoint management is the IT support practice of enrolling laptops, phones, and tablets in a management platform, then using that platform to configure, secure, support, and eventually retire each device without physically touching it. The platform is usually a cloud service; the device runs a management client, built into its operating system, that checks in, applies assigned settings, and reports what happened.
The practice exists because organizations issue and permit far more device types, ownership arrangements, and operating systems than one IT team could configure by hand. A help desk technician who once imaged a handful of identical desktops now supports personally owned phones, company laptops in employees' homes, and shared tablets on a retail floor, often across Windows, macOS, iOS, iPadOS, Android, and Linux at the same time. Endpoint management turns that variety into a repeatable service: a new hire's laptop arrives configured before the technician opens the box, and a lost phone can be locked or wiped from a console instead of a parking lot.
The vocabulary: MDM, MAM, EMM, and UEM
These four terms describe increasing scope, and vendors use them inconsistently, so treat them as a ladder rather than interchangeable labels.
Mobile device management (MDM) manages an enrolled device using management frameworks built into its operating system. Enrollment installs a management identity, after which the platform can deliver configuration profiles, enforce settings, install apps, query inventory, and issue remote commands such as lock or wipe. MDM controls the device.
Mobile application management (MAM) manages only specific apps and the organizational data inside them, without enrolling the whole device. A user's personal phone can run a managed version of a work email app that enforces a PIN and blocks copying data to personal apps, while the rest of the phone stays outside IT's reach. MAM controls the app.
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://csrc.nist.gov/pubs/sp/800/124/r2/final
Supports
- Centralized mobile device management scope and terminology
- Organization-owned and personally owned deployment scenarios
- Full device lifecycle from deployment through disposal
- MDM versus MAM boundary and compliance-evidence framing
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1800-22.pdf
Supports
- BYOD ownership model definition and scope
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1800-21.pdf
Supports
- COPE ownership model definition and scope
- https://support.apple.com/guide/deployment/intro-to-mdm-depc0aadd3fe/web
Supports
- Automated Device Enrollment and Apple Business/School Manager
- APNs role in waking devices for management contact
- Configuration profile format and behavior on removal
- Supervision and its effect on available restrictions
- https://developer.android.com/work/overview
Supports
- Work profile, fully managed, and dedicated device management modes
- Android Management API as the enrollment and policy channel
- https://learn.microsoft.com/en-us/windows/client-management/mdm-overview
Supports
- Windows enrollment client and management client roles
- Configuration service providers (CSPs)
- One-MDM-enrollment-per-device constraint
- https://learn.microsoft.com/en-us/intune/fundamentals/what-is-intune
Supports
- MDM and MAM as independent, combinable management modes
- Compliance results feeding Microsoft Entra Conditional Access
- Cloud-based, no on-premises-infrastructure service model
- https://www.jamf.com/blog/what-is-mdm/
Supports
- Practitioner-level explanation of MDM scope and core functions
- MDM versus UEM terminology usage in the industry
- Apple ecosystem zero-touch deployment through Apple Business Manager
- https://github.com/sindresorhus/awesome
Supports
- Starting point for curated awesome-list discovery
- https://github.com/petarov/awesome-mdm-dev
Supports
- Discovery of Apple Configurator, NanoMDM, Headwind MDM, MeshCentral, SOFA, and ProfileCreator as MDM developer/support resources
- https://support.apple.com/apple-configurator
Supports
- Apple Configurator purpose and platform (bulk device deployment via direct connection)
- https://github.com/micromdm/nanomdm
Supports
- Minimalist open-source Apple MDM server description
- https://h-mdm.com/
Supports
- Open-source Android MDM scope, licensing, and offline/on-premises deployment
- https://meshcentral.com/
Supports
- Open-source, self-hosted remote device management scope and supported platforms
- https://sofa.macadmins.io/
Supports
- Apple software update feed scope, formats, and intended MacAdmin audience
- https://github.com/ProfileCreator/ProfileCreator
Supports
- macOS configuration profile builder purpose, license, and platform requirement
- https://xtravirt.com/blog/mobile-device-management-20-years-on/
Supports
- BlackBerry Enterprise Server 1999 launch date and initial capability
- AirWatch 2003 founding date
- https://learn.microsoft.com/en-us/archive/technet-wiki/1151.exchange-activesync-overview
Supports
- Exchange Server 2003 SP2 Direct Push and mobile device mailbox policies
- https://www.globenewswire.com/news-release/2011/11/29/1430743/0/en/RIM-Announces-BlackBerry-Mobile-Fusion-The-Next-Generation-Enterprise-Mobility-Solution-for-BlackBerry-Android-and-iOS-Smartphones-and-Tablets.html
Supports
- November 2011 BlackBerry Mobile Fusion multi-platform MDM launch
- https://www.businesswire.com/news/home/20121205006565/en/Citrix-Signs-Definitive-Agreement-to-Acquire-MDM-Leader-Zenprise
Supports
- Citrix acquisition of Zenprise, announced December 2012 and closed January 2013
- https://www.forbes.com/sites/rajsabhlok/2014/01/24/what-vmwares-1-54b-airwatch-acquisition-means-for-enterprise-mobility/
Supports
- VMware's $1.54 billion acquisition of AirWatch, announced January 2014
- https://blogs.vmware.com/euc/2016/02/new-vmware-workspace-one.html
Supports
- February 2016 introduction of the Workspace ONE brand merging AirWatch, Identity Manager, and Horizon
- https://blogs.vmware.com/euc/2018/07/gartner-unified-endpoint-management.html
Supports
- July 2018 first Gartner Magic Quadrant for Unified Endpoint Management, retiring the CMT and EMM quadrants
- https://www.globenewswire.com/news-release/2020/07/24/2067479/0/en/Jamf-Announces-Closing-of-Initial-Public-Offering-and-Full-Exercise-of-Underwriters-Option-to-Purchase-Additional-Shares.html
Supports
- Jamf's IPO closing on Nasdaq, July 2020
- https://siliconangle.com/2020/12/01/ivanti-completes-acquisition-mobileiron-pulse-secure/
Supports
- Ivanti's completed acquisition of MobileIron and Pulse Secure, December 2020
- https://www.omnissa.com/insights/news/official-launch-pr/
Supports
- Omnissa's July 2024 launch as an independent company carrying Workspace ONE forward
- https://www.microsoft.com/en-us/security/business/endpoint-management/microsoft-intune
Supports
- Microsoft Intune product packaging and licensing
- https://www.omnissa.com/products/workspace-one-unified-endpoint-management/
Supports
- Workspace ONE UEM product scope and identity integration
- https://www.ivanti.com/products/ivanti-neurons-for-unified-endpoint-management
Supports
- Ivanti Neurons for UEM AI-driven automation and platform coverage
- https://www.manageengine.com/products/desktop-central/
Supports
- Endpoint Central platform coverage, patching, and licensing tiers
- https://www.ibm.com/products/maas360
Supports
- MaaS360 Watson AI features and platform coverage
- https://www.tanium.com/
Supports
- Real-time query architecture and consolidated endpoint functions
- https://www.jamf.com/products/jamf-pro/
Supports
- Jamf Pro Apple-only platform scope and zero-touch deployment features
- https://www.iru.com/
Supports
- Iru's rebrand from Kandji and current Apple, Windows, and Android scope
- Assignment Maps and automated patching features
- https://mosyle.com/
Supports
- Apple-only platform scope, target markets, and per-device pricing
- https://www.soti.net/products/mobicontrol/
Supports
- MobiControl target use cases (retail, warehouse, field, rugged) and platform coverage
- https://www.hexnode.com/mobile-device-management/
Supports
- Hexnode UEM platform coverage including Zebra Link-OS devices
- https://scalefusion.com/
Supports
- Scalefusion UEM, OneIdP, and Veltar product lineup and pricing
- https://www.miradore.com/
Supports
- Miradore free-tier availability and SMB target market
- https://www.ninjaone.com/
Supports
- NinjaOne's RMM origin and endpoint management feature set
- https://www.automox.com/
Supports
- Automox cloud-agent patch and configuration scope for Windows, macOS, and Linux
- https://meraki.cisco.com/products/systems-manager
Supports
- Systems Manager integration with the Meraki networking dashboard
- https://fleetdm.com/
Supports
- Fleet's osquery-based inventory, MDM, and open-source licensing model
- https://workspace.google.com/products/admin/endpoint/
Supports
- Google endpoint management bundling, platform coverage, and Chrome Enterprise tiering
