Mobile Device Management (MDM): Setting Up Work Email and Apps on Your Phone Safely

Accessing work communications on a mobile device is essential for staying agile. However, mixing corporate assets (such as client emails, contact directories, and internal documentation) with a personal mobile environment creates a significant security risk.

To bridge this gap, ALCO USA utilizes Mobile Device Management (MDM) frameworks to partition corporate data securely on your smartphone without violating your personal privacy.

The Containerization Concept: Corporate vs. Personal

Our MDM solution uses an advanced technology called Containerization. It creates a secure digital vault on your mobile phone dedicated exclusively to work applications.

Your Privacy Guarantee: ALCO USA and your employer cannot view your personal photos, track your personal web history, read your private text messages, access personal apps, or monitor your location. The management platform only has visibility and authority over the isolated work environment.
**
How to Enroll Your Device (iOS & Android)
Before initiating mobile enrollment, make sure you have your primary corporate login information ready and that your phone is updated to a supported version (iOS 15+ or Android 12+).

Option A: Apple iOS Deployment (iPhone & iPad)

1. Navigate to the App Store and download the Microsoft Company Portal or Google Device Policy app (as dictated by your company’s cloud email environment).
2. Open the application and sign in with your corporate email credentials.
3. The app will prompt you to download a secure Management Profile. Follow the redirect to your native iOS Settings app.
4. Click the Profile Downloaded link at the top of your Settings interface and tap Install.
5. Authenticate via your phone passcode and grant permission for remote management configuration.
6. Return to your home screen; you will see a collection of work apps downloading automatically, recognizable by a secure badge or grouped within your Managed Catalog.

Option B: Google Android Deployment

1. Open the Google Play Store and download the Intune Company Portal or** Google Apps Device Policy.**
2. Run the application and input your company sign-in credentials.
3. The application will guide you through creating a Work Profile. Tap** Agree** to authorize the configuration.
4. Your Android operating system will cleanly split your app drawer into two distinct tabs: Personal and Work.
5. All work-related applications (Outlook, Teams, Drive) must be accessed within the Work tab, denoted by a small orange or blue briefcase icon on each app logo.

Mandatory Mobile Security Policies
Once enrolled in the corporate container, your phone must comply with standard baseline security configurations:

• A minimum 6-digit device PIN, passcode, or biometric authentication (FaceID/Fingerprint) must be active to unlock the device.
• The device must not be rooted or jailbroken, as this compromises underlying operating system security.
• If your mobile phone is physically lost or stolen, contact the ALCO USA support team immediately via phone at** +1 (208) 391-7176** so our engineers can send an instantaneous remote wipe command specifically to clear the corporate container, keeping your personal files untouched while securing company network access.