tzudad

joined 1 year ago
[–] tzudad@mastodon.social 1 points 1 month ago

@notsle@kzoo.to Your company's IT has some really invasive settings. Are you handling sensitive data? If I had to do that, I'd buy a garbage phone with a prepaid SIM and not put anything but their stuff on it. 2 phones sucks, but privacy is your right on your device.

[–] tzudad@mastodon.social 1 points 1 month ago (2 children)

@notsle@kzoo.to Those settings look closer to a corporate device to me. I'm the original IT guy in my company and created our M365 organization. I don't think some of those abilities being available when I configured our environment for personal devices in 2018.
We can only see and reset M365 apps when they are signed in with a company account. We do not see personal apps or data. I'll never allow that horrible sh*t on the personal devices of our people. Corporate devices are very different.

[–] tzudad@mastodon.social 1 points 1 month ago (5 children)

@notsle@kzoo.to Speaking only for Microsoft 365 and Endpoint (Intune). Devices are marked as company or personal during enrollment. Administrators can't see your personal apps or data. The only thing we can do is wipe the apps installed by MDM.