MDM (Mobile Device Management)

MDM grew out of a specific problem: phones and tablets arrived in the workplace faster than IT policy could adapt, and unlike a company-owned desktop, nobody could just walk over and configure the device by hand. MDM solved that by giving IT a way to enroll a device remotely, push configuration profiles to it, and — critically — wipe it if it's lost or an employee leaves, all without physical access.

The mechanics are consistent across platforms even though vendors differ: enrollment registers a device under management (often zero-touch, so a new phone configures itself on first boot), configuration profiles push Wi-Fi, VPN, and email settings without a user typing anything in, and compliance policies (passcode set, encryption on, OS current) tie into conditional access — a device that falls out of compliance can lose access to corporate email or apps until it's fixed.

MDM today extends well past phones. Apple, Microsoft, and most enterprise MDM platforms now manage full laptops through the same enrollment and policy model, which is why the line between "MDM" and general endpoint management has blurred — the acronym stuck around, but the scope kept growing.