Microsoft InTune
Author
Discussion

anonymous-user

Original Poster:

85 months

Friday 6th December 2019
quotequote all
I have a personal phone which I use for work, emails and calendar vis Microsoft Exchange/Outlook.

For GPDR reasons, they want to install InTune (Comp Portal) to give remote access to disable my emails in case my phone gets lost. I'll be honest, I'm looking for another job currently so have various emails and websearches going on.

I'm a naturally cynical person and this is beyond my understanding (can't use spanners to fix it).... would they be able to see access any of that traffic or any of my personal data or does InTune only allow them to control my email and calendar?

The_Jackal

4,854 posts

228 months

Friday 6th December 2019
quotequote all
Tell them to buy you a phone if they want you to access work emails remotely.
Your phone wont be your own.
Tell them you will remove their inbox from your phone then.

paulrockliffe

16,643 posts

258 months

Friday 6th December 2019
quotequote all
It doesn't look like it gives them access to your phone and your information and given that would be a GDPR breach it seems unlikely that they would want to go that route.

It does give them control over their data on your phone and it would come with their security policy so you might not be able to use face or fingerprint unlock and have to use a corporate password that changes every 90 days, rather than your own lax but convenient approach, but that depends how it's setup.

I wish my work would let us use it, I'd love to be able to plug my work calendar into my personal phone without having to carry a work mobile around with me.

bitchstewie

68,241 posts

241 months

anonymous-user

Original Poster:

85 months

Friday 6th December 2019
quotequote all
Perfect, many thanks. That last link was exactly what I was hoping to find. Not sure why I didn't find it using google, guess I'm just a Luddite!

bitchstewie

68,241 posts

241 months

Friday 6th December 2019
quotequote all
MrBig said:
Perfect, many thanks. That last link was exactly what I was hoping to find. Not sure why I didn't find it using google, guess I'm just a Luddite!
You're welcome.

For what it's worth most IT people really don't care what you use your personal phone for.

If you have company data on it and lose it auditors and general good practise needs us to be able to demonstrate we have some chance of wiping our stuff from it.

geeks

11,847 posts

170 months

Friday 6th December 2019
quotequote all
It's Intune by the way wink

Just to tag onto the non tinfoil hat stuff on here there is a section in the company portal app that tells you what the admins can and cannot see on your phone as well.

Honestly though, no one cares if you are looking at porn or jobsites, usually because they don't have time to check for it but mainly because people aren't as interesting as they think they are. Although in a BYOD scenario I wouldn't ask for full enrollment but simply insist you use the Outlook app, then apply all my DLP config to that.

anonymous-user

Original Poster:

85 months

Friday 6th December 2019
quotequote all
Fair point. I just have trust issues biggrin

geeks

11,847 posts

170 months

Friday 6th December 2019
quotequote all
MrBig said:
Fair point. I just have trust issues biggrin
That's reasonable given it is your phone. I was just offering up some experience as someone who deals with these products for a living.

ArsE82

21,385 posts

218 months

Friday 6th December 2019
quotequote all
I'm assuming you're not using your work mailbox to find a new job? If you are, then they can already easily see all your email. Intune is the least of your worries smile

anonymous-user

Original Poster:

85 months

Saturday 7th December 2019
quotequote all
geeks said:
That's reasonable given it is your phone. I was just offering up some experience as someone who deals with these products for a living.
Yes I get that, thank you for your input. It is appreciated.

anonymous-user

Original Poster:

85 months

Saturday 7th December 2019
quotequote all
ArsE82 said:
I'm assuming you're not using your work mailbox to find a new job? If you are, then they can already easily see all your email. Intune is the least of your worries smile
Contrary to popular belief I’m not *that* stupid biggrin

Tomo1971

1,177 posts

188 months

Saturday 7th December 2019
quotequote all
I have intune on my personal mobile, never had an issue or any thought of any kind of hint of my personal data or browsing history been viewed remotely.

I have fingerprint lock on my phone anyway so unsure if intune would have enforced that or not but its not set any other nanny restrictions on my phone since having it on.