As far as what MDM can do, this is where
it can really do anything.
But over-managing a device could actually hurt you.
So if you're taking this course to understand
how to prepare devices to provide to a workplace,
do not lock it down to the point that you can't do forensics
on it.
That is my best advice to you.
So if you, for example, provide Android devices
to everyone in your workplace, and you block USB debugging,
how are you going to do forensics on it?
So be careful.
If you're giving out iPhones and you block iTunes backups,
how will you do forensics on it?
So just be careful with that.
Also, something to be careful of is
if you have an administrator that's
willing to cooperate with you that says they will remove
management, removing management often
wipes what it's protecting.
So be very careful with that.
But we can see everything from restricting applications,
restricting in private browsing, not allowing backups.
Again, if you're not allowing backups,
how are you going to do forensics?
So just be very careful with your setup
if you are the one providing the device because that's
a horrible situation to be in.