Microsoft® Office 365 or Exchange ActiveSync offer basic security and management capabilities on Android. Third-party enterprise mobility management (EMM) providers offer more advanced features.
| Office 365 or Exchange ActiveSync | Third-party EMM provider | |
|---|---|---|
| Device inventory | ✔ | ✔ |
| Basic passcode enforcement | ✔ | ✔ |
| Remote corporate data wipe | ✔ | ✔ |
| App distribution | ✘ | ✔ |
| Strong passcode enforcement | ✘ | ✔ |
| Remote device wipe | ✘ | ✔ |
| Work profiles | ✘ | ✔ |
| App allow list | ✘ | ✔ |
| Device settings and features restrictions* | ✘ | ✔ |
| Compliance monitoring | ✘ | ✔ |
*mobile networks, Wi-Fi, screen captures, etc.
Set up basic security with Exchange ActiveSync
In Exchange Server, you can create mobile device mailbox policies to apply a common set of policies or security settings to a collection of users. The same feature is available for Microsoft® Office 365 customers.
After setting up the server policy you can ask your users to follow the instructions to set up their Android devices with a Microsoft® Office 365 or Exchange ActiveSync account.
Use a third-party enterprise mobility management (EMM) provider
If your organization requires more than the basic security features built into Microsoft® Office 365 and Exchange ActiveSync, you can use a third-party EMM provider to manage your Android devices.
Browse the Enterprise Solutions Directory to find the right third-party EMM provider for your organization. Android Enterprise Recommended providers meet an advanced set of enterprise requirements. The EMM provider you choose should provide your organization with the necessary setup instructions.