How to Implement Intune Mobile Application Management (MAM)

Recently, I’ve written about both the differences between Mobile Application Management (MAM) and Mobile Device Management (MDM) without compromising employee privacy, and a much more comprehensive, overarching guide to Bring Your Own Device (BYOD) in 2026.

In the first article, MAM was my strong recommendation if you’re looking at implementing a BYOD policy. So here for those who want the specifics, here’s how to configure App Protection Policies in Intune:

Step 1: Go to Microsoft Intune Admin Portal > Apps > Protection > Create policy

Step 2: Choose Platform: iOS/iPadOS, Android or Windows

Step 3: Configure settings as below:

Protected Apps:

• All Microsoft Apps

Data Protection Settings:

x Block backup org data to iTunes or iCloud

✓ Send org data to other apps: Policy managed apps only

✓ Receive data from other apps: Policy managed apps only

✓ Restrict cut, copy, paste: Policy managed apps with paste in

✓ Encrypt org data: Require

✓ Screen capture: Block

✓ Printing org data: Block (or restrict to managed printers)

Access Requirements:

✓ PIN for access: Require (separate from device PIN)

✓ Work or school account credentials: Require

✓ Recheck access requirements after: 30 minutes

Conditional Launch:

✓ Max PIN attempts: 5 (Action: Wipe corporate data)

✓ Offline grace period: 720 minutes (Action: Block access)

✓ Jailbroken/rooted devices: Block access

✓ Min OS version: iOS 16 / Android 13 (Action: Block access)

The beauty of this approach is that it requires zero IT involvement after initial setup. Users install Microsoft Authenticator and their work apps from the App Store or Play Store, sign in with corporate credentials, complete multi-factor authentication (MFA), and the protection policies automatically apply. It’s self-service BYOD that actually works.

As your trusted MSP partner, we’re here to help you navigate both the decision on Bring Your Own Device, and any technical configurations. We’ll assess your current setup, understand your business goals, and design a BYOD strategy (or recommend alternatives) that balance security, usability, and cost.

Because at the end of the day, technology should enable your business to grow, not hold it back. And when it’s done right, BYOD can be a powerful enabler of productivity and flexibility – without keeping you awake at night worrying about data breaches.