01
Asset management
How many devices, who holds which, iPhone or Android, OS version, storage, battery, IMEI, serial.
MDM basics
What is MDM? The simplest explanation.
A short guide for owners, managers and IT teams who have never used MDM: what it is, what it does, and whether your business needs it.
What is MDM (Mobile Device Management)?
MDM is a system that lets a business manage all of its employees' phones, tablets and computers remotely, from a single admin console. Instead of picking up each device to install apps, configure Wi-Fi or VPN, or deal with a lost phone, IT does it from the dashboard.
Think of it this way
HR software manages people; accounting software manages money. MDM manages the devices people work with — who has which device, what is on it, and whether it is safe.
Example: a company hires 100 people
Without MDM
- 1Open each phone
- 2Install each app
- 3Sign in to accounts
- 4Set up email
- 5Configure Wi-Fi and VPN
- 6Apply security settings
15–30 minutes per device → 25–50 working hours for 100 devices.
With MDM
- Employee powers on
- Company apps install themselves
- Email, Wi-Fi and VPN configure automatically
- Security policies apply automatically
- Disallowed features are locked
Just minutes — or fully automatic.
What do businesses in Vietnam use MDM for?
The nine most common jobs — all done remotely.
02
Bulk app install
ERP, CRM, POS, time tracking, sales: IT clicks install and hundreds of devices follow. No self-service downloads.
03
App updates
New versions roll out to every device. No more “my phone isn't updated yet”.
04
Offboarding
Remove company email, apps and data, lock or reset the device — remotely.
05
Lost devices
Lock the screen, show a contact number, locate (where supported), wipe data.
06
Security policies
Require 8+ character passcodes, block unapproved apps, restrict screenshots — automatically.
07
Device configuration
Wi-Fi, VPN, email, proxy and certificates preinstalled. Nothing for staff to type.
08
Kiosk mode
POS, ticketing, hospital kiosks and delivery devices run a single app. No Facebook, YouTube, TikTok or games.
09
Health monitoring
Online/offline, OS version, storage, battery, and whether the device complies with policy.
When an employee loses a phone
This is the moment that convinces many businesses to adopt MDM. Without it, customer data, email and internal documents on the phone are out of your control.
- 1The employee reports the loss to IT
- 2IT turns on Lost Mode: the phone locks and shows a message and contact number
- 3Find the last known location (on supported devices and modes)
- 4If it cannot be recovered: wipe all data remotely
Which industries need MDM?
It suits most businesses with around 20 or more devices, or any device that holds important data.
| Industry | Need |
|---|---|
| Banking | Device security and regulatory compliance |
| Insurance | Managing advisor and sales devices |
| Logistics | Driver phones and handhelds |
| Retail chains | POS and sales devices |
| Hospitals | Information kiosks and nurse tablets |
| Schools | Student tablets |
| Factories | Barcode scanners and PDAs |
| Tech companies | Company phones and laptops |
| F&B chains | Ordering tablets |
| Real estate | Sales staff devices |
Company device or personal device?
MDM manages differently depending on who owns the device.
Company-owned
The company manages everything: apps, restrictions, lock, wipe. Apple devices bought through Apple Business Manager are supervised for deeper control.
Personal (BYOD)
On Android the company manages only a separate work profile; personal apps and data are untouched.
Dedicated devices
Shared or fixed devices (POS, kiosk, scanner): locked to one or a few apps and not tied to one person.
Does MDM invade privacy?
This is the question employees ask most. Short answer: MDM manages the device; it does not read personal content.
MDM can
- See model, OS, storage, battery and serial
- See the app list (on company devices)
- Install and remove company-managed apps and settings
- Lock or wipe the device under company policy
- Locate the device when the business enables it and the platform supports it
MDM cannot
- Read messages, Zalo or Messenger
- See personal photos and videos
- Read personal email
- See browsing history
- Know your passwords
Key terms
- Enrollment
- Bringing a device under management — by link, QR code, or automatically at power-on.
- Apple Business Manager (ABM)
- Apple's free portal for businesses: ties devices bought from authorized resellers to your organization and buys app licenses.
- ADE (Automated Device Enrollment)
- Apple devices in ABM enroll in MDM at first power-on — also called zero-touch.
- Supervised
- A mode for company-owned Apple devices that unlocks extra control such as kiosk, Lost Mode and non-removable profiles.
- Configuration profile
- A package of settings sent to the device: Wi-Fi, VPN, email, restrictions…
- Managed Google Play
- A company-managed Google Play store for Android devices.
- VPP / Apps & Books
- Apple's volume app-licensing program; installs apps without an Apple ID.
- Kiosk / Single App Mode
- Locks a device to run only one or a few chosen apps.
- Compliance
- Rules that decide whether a device meets company security requirements, such as a minimum OS version.
- BYOD
- Bring Your Own Device — employees using personal devices for work.
Does your business need MDM?
Tick everything that is true for you.
The one-minute summary
“MDM lets a business manage all of its employees' phones, tablets and laptops from a single screen. Instead of IT setting up each device, MDM installs apps, configures Wi-Fi, VPN and email, enforces security policies, locks or wipes lost devices and monitors device health remotely. For businesses with many devices or branches, MDM significantly cuts operating time, improves security and keeps every device compliant with company policy.”
Next steps
See what VN-MDM can do, read the user guide, or try it with your own devices.
Ready to manage devices the smarter way?
Request a trial and we will help you enroll your first devices.