Export (0) Print
Expand All

Mobile Device Management Capabilities in Windows Intune

Updated: May 8, 2014

Applies To: Windows Intune

As a standalone service, Windows Intune offers the features in the following tables for supported mobile devices like iOS, Android, and Windows devices. You can manage Windows 8.1 devices using the Windows Intune client or enroll them as mobile devices. The following information for Windows 8.1 applies to Windows 8.1 devices that are enrolled as mobile devices.

This document lists the capabilities for mobile device management using Windows Intune as a standalone service. If you are planning to use Configuration Manager with the Windows Intune connector to manage devices, see How to Manage Mobile Devices by Using Configuration Manager and Windows Intune.

The following table lists the Windows Intune policy settings.

 

Setting Group Settings Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android and Samsung KNOX

Security / Password

Require a password to unlock mobile devices

 No

 No

Yes

Yes

Yes

Security / Password

Required password type

Yes

Yes

Yes

Yes

No

Security / Password

Required password type -Minimum number of character sets

Yes

Yes

Yes

Yes

No

Security / Password

Password quality

No

No

No

No

Yes

Security / Password

Minimum password length

Yes

Yes

Yes

Yes

Yes

Security / Password

Allow simple passwords

No

No

Yes

Yes

No

Security / Password

Number of repeated sign-in failures to allow before the device is wiped

Yes

Yes

Yes

Yes

Yes

Security / Password

Minutes of inactivity before screen turns off

Yes

Yes

Yes

Yes

Yes

Security / Password

Minutes of inactivity before password is required

No

No

No

Yes

No

Security / Password

Password expiration (days)

Yes

Yes

Yes

Yes

Yes

Security / Password

Remember password history --> Prevent reuse of previous passwords

Yes

Yes

Yes

Yes

Yes

Security / Password

Allow picture password and PIN

Yes

Yes

No

No

No

Security / Password

Allow fingerprint unlock

No

No

No

iOS 7 and later

No

Security / Encryption

Require encryption on mobile device

No

No

Applies to Windows Phone 8. Windows Phone 8.1 is already encrypted and cannot be unencrypted.

No

Yes

Security / Malware

Require network firewall

Yes

No

No

No

No

Security / Malware

Enable SmartScreen

Yes

No

No

No

No

Security / System

Require automatic updates

Yes

No

No

No

No

Security / System

Allow screen capture

No

No

Windows Phone 8.1 only

Yes

No

Security / System

Allow control center in lock screen

No

No

No

iOS 7 and later

No

Security / System

Allow notification view in lock screen

No

No

No

iOS 7 and later

No

Security / System

Allow today view in lock screen

No

No

No

iOS 7 and later

No

Security / System

User Account Control

Yes

No

No

No

No

Security / System

Allow diagnostic data submission

Yes

No

Windows Phone 8.1 only

Yes

No

Security / System

Allow untrusted TLS certificates

No

No

No

Yes

No

Security / System

Allow personal wallet software while locked

No

No

No

Yes

No

Cloud / Documents & Data

Allow backup to iCloud

No

No

No

Yes

No

Cloud / Documents & Data

Allow document sync to iCloud

No

No

No

Yes

No

Cloud / Documents & Data

Allow Photo Stream sync to iCloud

No

No

No

Yes

No

Cloud / Documents & Data

Require encrypted backup

No

No

No

Yes

No

Cloud / Documents & Data

Work Folders URL

Yes

No

No

No

No

Email / Email

Make Microsoft account optional in Windows Mail application

Yes

No

No

No

No

Applications / Browser

Allow web browser

No

No

Windows Phone 8.1 only

Yes

No

Applications / Browser

Allow autofill

Yes

No

No

Yes

No

Applications / Browser

Allow pop-up blocker

Yes

No

No

Yes

No

Applications / Browser

Allow cookies

No

No

No

Yes

No

Applications / Browser

Allow plug-ins

Yes

No

No

No

No

Applications / Browser

Allow active scripting

Yes

No

No

Yes

No

Applications / Browser

Allow fraud warning

Yes

No

No

Yes

No

Applications / Browser

Allow intranet site for single word entry

Yes

No

No

No

No

Applications / Browser

Allow automatic detection of intranet network

Yes

No

No

No

No

Applications / Browser

Security level for internet

Yes

No

No

No

No

Applications / Browser

Security level for intranet

Yes

No

No

No

No

Applications / Browser

Security level for trusted sites

Yes

No

No

No

No

Applications / Browser

Security level for restricted sites

Yes

No

No

No

No

Applications / Browser

Send Do Not Track header

Yes

No

No

No

No

Applications / Apps

Allow application store

No

No

Windows Phone 8.1 only

Yes

No

Applications / Apps

Require a password to access application store

No

No

No

Yes

No

Applications / Apps

Allow in-app purchases

No

No

No

Yes

No

Applications / Apps

Allow managed documents in other unmanaged apps

No

No

No

iOS 7 and later

No

Applications / Apps

Allow unmanaged documents in other managed apps

No

No

No

iOS 7 and later

No

Applications / Apps

Allow adult content in media store

No

No

No

Yes

No

Applications / Apps

Allow video conferencing

No

No

No

Yes

No

Applications / Gaming

Allow Game Center friends

No

No

No

Yes

No

Applications / Gaming

Allow multiplayer gaming

No

No

No

Yes

No

Device Capabilities / Hardware

Allow camera

No

No

Windows Phone 8.1 only

Yes

Yes

Device Capabilities / Hardware

Allow removable storage

No

No

Yes

No

No

Device Capabilities / Cellular

Allow voice roaming

No

No

No

Yes

No

Device Capabilities / Cellular

Allow data roaming

Yes

No

No

Yes

No

Device Capabilities / Cellular

Allow automatic synchronization while roaming

No

No

No

Yes

No

Device Capabilities / Features

Allow voice assistant

No

No

No

Yes

No

Device Capabilities / Features

Allow voice assistant while device is locked

No

No

No

Yes

No

Device Capabilities / Features

Allow voice dialing

No

No

No

Yes

No

Device Capabilities / Features

Allow copy and paste

No

No

Windows Phone 8.1 only

No

No

Device Capabilities / Features

Allow Bluetooth

No

No

Windows Phone 8.1 only

No

No

Device Capabilities / Features

Allow Wi-Fi tethering

No

No

Windows Phone 8.1 only

No

No

Device Capabilities / Features

Allow NFC

No

No

Windows Phone 8.1 only

No

No

Device Capabilities / Features

Allow Wi-Fi

No

No

Windows Phone 8.1 only

No

No

Device Capabilities / Features

Allow Wi-Fi hotspot reporting

No

No

Windows Phone 8.1 only

No

No

Device Capabilities / Features

Allow automatic connection to free Wi-Fi hotspots

No

No

Windows Phone 8.1 only

No

No

Use Windows Intune to deploy and install software on computers and mobile devices in your organization. For more information, see Deploy software to mobile devices in Windows Intune. The following table includes app deployment options for mobile devices.

 

Application Deployment Windows 8.1 and Windows RT 8.1 Windows RT Windows Phone 8 and Windows Phone 8.1 iOS Android

Sideloaded Apps

Yes

Yes

Yes

Yes

Yes

Deploy links to stores including:

  • Windows Store

  • Windows Phone store

  • App store

  • Google Play

Yes

Yes

Yes

Yes

Yes

Web links (External Links)

Yes (install shortcut)

No

Yes (launch only)

Yes (install Web clip)

Yes (install shortcut)

Featured apps

Yes

Yes

Yes

Yes

Yes

You can run reports to view information about:

Because mobile devices can store sensitive corporate data and provide access to many corporate resources, Windows Intune provides the following methods to help secure sensitive data in the event that a device is lost or stolen:

  • Full wipe

  • Selective Wipe

  • Remote lock

  • Passcode reset

You can issue a remote device wipe command from the Windows Intune administrator console or users can issue their own remote device wipe commands from the Windows Intune company portal. A remote wipe can either set the device back to factory settings or you can use a selective wipe to only remove company data. You can also remotely lock the device or reset the passcode.

For more information, see Help protect your data with Remote Wipe, Remote Lock, or Passcode Reset Using Windows Intune.

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft