Mobile Device Management - MDM
Please note: The icons of the Jamf Self Service App (for iPad & iOS) & Microsoft Intune (for Android) that will be pre-installed on CUIT-managed devices.
About MDM
Mobile device management (MDM) provides you with effective management capabilities, including streamlined device configuration, a self-service app catalog, and enhanced security.
It keeps you up to date with the best practices, including enhanced passcode protection and the ability to remotely wipe devices that have been lost or stolen, among many others. These features are organized into a collection of settings called configuration profiles.
Require a passcode to unlock: You will be prompted to establish one once a device is enrolled. This passcode will be 6 digits long, providing stronger security than the common 4-digit passcode, and will prevent unauthorized access to your device in case it is lost or stolen. For additional security, ten consecutive failed attempts at entering your passcode will result in a device wipe.
Please note that this password requirement disables the Pattern screen lock and swipe-to-unlock options on Android devices.
Time out after a period of inactivity: To protect your data, your device will automatically lock after 30 seconds of inactivity (adjustable up to 3 minutes), and you’ll be required to enter your passcode to unlock it.
Be encrypted: Encryption is enabled on all devices so that if they are ever lost or stolen the data will remain secure.
Remote passcode reset: If for any reason you forget your passcode, a passcode reset command can be sent, at your request, to your device.
Remote device wipe: In the event your mobile device is lost or stolen, CUIT can remotely wipe your device. We will never do this without your approval.
Download Managed Apps: Jamf Self Service App & the Work apps category in the Google Play Store offers any applications provided by your department at no cost. If you unenroll from MDM, these apps are automatically removed.
- Checks periodically to make sure it hasn’t been jailbroken: Protecting and ensuring your privacy remains a key part of CUIT’s mission, and Jamf Pro and Intune will be used only to provide the functionality listed above. We have no access to your personal files or data on the device.
Get Started with Enrollment
Enrollment begins automatically when you receive a CUIT-procured device that is preconfigured with either Jamf Pro or Intune. You’ll be guided through setup the first time you power on your device.
For more information on the enrollment process, please visit the MDM Enrollment page.
Privacy Settings
CUIT values your privacy. Our MDM only collects information that is required to provide secure corporate access. A full list of the information we do and do not collect is provided below.
- CUIT collects your name, work phone number, and work email address to identify who the device belongs to and how you can be contacted.
- CUIT collects a list of installed app names, versions, and installation status for all work apps delivered via AirWatch for reporting purposes.
- CUIT collects a list of your carrier country code and device phone number for asset management and reporting purposes.
- CUIT does not collect your text messages.
- CUIT does not collect emails from your personal email account.
- CUIT does not collect photos from your device.
- CUIT does not collect your GPS location.
- CUIT does not collect information about your personal apps.
- CUIT may send notifications via AirWatch to keep you up to date with the latest mobile updates.
- If a device is lost or stolen, CUIT can remotely un-enroll the device and remove managed apps, profiles, and other enterprise resources.
- If a device is lost or stolen, CUIT can also wipe the device of all data, including personal user data. This returns the device to a factory default state.
- If a device is lost or stolen, CUIT can remotely lock the device to prevent personal information from getting into the wrong hands.
- If you forget your device passcode, CUIT can remotely reset it.
Yes. Enrolling in Columbia’s mobile device management (MDM) requires you to set a passcode on your device in accordance with University security policy.
Enrolling in Columbia’s mobile device management (MDM) provides additional protections beyond a device passcode. These include the ability to remotely secure or wipe University data if a device is lost or stolen, enforce required security settings, and ensure the device remains compliant with University security policies.
Yes. CUIT strongly recommends backing up your device before enrollment. While enrollment is designed to preserve your data, maintaining a current backup ensures your personal information can be restored if needed.
Please review and complete the appropriate backup steps for your device before starting enrollment.
Yes. Any new or replacement CUIT-issued device must be enrolled in Columbia’s MDM. During an upgrade or replacement, a CUIT technician will guide you through the setup and enrollment process as part of your appointment.
No. Columbia’s MDM is designed to operate in the background and does not interfere with your apps or negatively impact device performance during normal use.
No. Columbia’s MDM is designed to operate in the background and does not interfere with your apps or negatively impact device performance during normal use.
It depends. Please review our comprehensive list of what can and cannot be restored following enrollment.
CUIT monitors devices enrolled in MDM only to ensure compliance with required University security policies, such as encryption and passcode enforcement.
CUIT does not monitor personal content such as messages, photos, or personal files. Limited device information is collected solely to identify the device and its assigned user (for example, name, University email address, and device identifiers).
For CUIT-managed devices, there is no cost to enroll in Columbia’s MDM. However, there is a cost associated with non-CUIT managed devices. Please submit a ticket in ServiceNow if you would like more details.