Said It Here

Why is managing company mobile devices and mail apps so frustrating?

Enterprise mobile device management tools struggle with basic tasks like app deployment and clearing PIN codes across platforms. At the same time, sysadmins constantly deal with recurring user friction, such as iOS calendars failing to sync every 90 days due to re-authentication loops and difficult decisions regarding whether to support native mail apps or enforce Outlook-only environments.

What people tried

Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.

  1. 1
    Using alternative hardware like Chromebooks or Macbooks with MDM solutions
  2. 2
    Relying on MAM (Mobile Application Management) rather than strict MDM
  3. 3
    Buying test devices to evaluate management capabilities firsthand
  4. 4
    Enforcing Outlook-only to simplify security and policy management
  5. 5
    Setting up contact-only sync alongside the Outlook client
  6. 6
    Allowing native apps with basic support while refusing to troubleshoot edge-case issues
  7. 7
    Using alternative dedicated Apple MDM tools like Jamf, Kandji, or ScalefusionMDM
  8. 8
    Using companion GitHub resources and configuration templates via XML files to handle gaps

In their words

Unedited, most upvoted first, each linked to the thread it came from.

I'm looking for reasons/advice regarding whether we should continue to support the native Mail/Calendar apps or go the Outlook-only route.source ↗

music2myear · r/sysadmin · 24 upvotes

We migrated from Android devices to iOS due to one of the reasons being Android was a pain in the ass to manage - especially with things like deploying apps and removing PIN codes (yes, i've tried multiple MDM solutions and all of them has the same problem).source ↗

ospery1 · r/sysadmin · 1 upvotes

I've got a few VIP users who come to me every 90 days complaining that their iOS calendar isn't updating. Every single time, it's just that they need to re-auth.source ↗

LevarGotMeStoney · r/sysadmin · 1 upvotes

The biggest reason to go Outlook only is addin support. Addins will only work with Outlook. I think Outlook also works better with conditional access, and it's more secure.source ↗

theitguy107 · r/sysadmin · 1 upvotes

It’s still missing some basic functionality that other vendors have had for years. I won’t recommend at all. Until it supports bootstrap app packages, it’s a non starter.source ↗

zombiepreparedness · r/sysadmin · 1 upvotes

Does anybody use intune for macos? I know its a question that I shot myself on the foot with, how does it work with end users and do you think a separate mdm tool like jamf/kandji is needed to support apple devices for mdm?source ↗

VisaExpired · r/sysadmin

Where this came up

People with this problem also raised