IBM Security MaaS360

 View Only
  • 1.  Outlook for Mac

    Posted Thu October 22, 2020 01:12 PM

    I have had a few notices in the last couple days via email that tell me a user added a new device.  Low and behold the new device is a Mac and 2 out of the 3 people are using work Mac's (we only have a few of these throughout the company).  The users were prompted to upgrade to Outlook for Mac and once they sign in with their network credentials, I get the notice of a new device being added to MaaS360.  We don't have policies set up for these devices because we don't add laptops/desktops/Macs to MaaS360.  We only use MaaS360 for iPhones, iPads, and Android devices.  Our normal users who use Microsoft Office on Windows laptops sign into Outlook all the time and I don't see notices of this nature in MaaS360.  Per chance, do you know what is causing this to happen?  I'd hate to not get the notices at all, because of the 3 notices I received, one was an employee trying to access their work email from a personal Mac computer, which we don't allow because it's a security risk.  We have no control to remove that account should something happen to that computer or they ever leave the company we can't wipe away the information that would remain on the system.  Is there some way to differentiate between work Macs and home user Macs?  I'm not sure I'm asking the correct questions or even how to relay the exact issue.  Please let me know if I can provide more information to help this make more sense.

     

    Kinetico Logo

    Kinetico.comFacebook IconTwitter Icon

    Michelle Stanison

    Helpdesk Support

    Kinetico Incorporated

    mstanison@kinetico.com

    Direct  (440) 564-4353

    Mobile (440) 321-8920

     

     



  • 2.  RE: Outlook for Mac

    Posted Thu October 22, 2020 02:36 PM

    Hi Michelle,

    How is the corresponding device record for the Mac(s) in question showing in the portal? No record, record with "Not Enrolled" status, or "Enrolled" status?

    Do you leverage the Cloud Extender for visibility in to your mail records?



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 3.  RE: Outlook for Mac

    Posted Thu October 22, 2020 03:53 PM

    Matt,

     

    The managed status says, "Not Enrolled (ActiveSync Managed)".

     

    We do use the Cloud Extender.

     

    Kinetico Logo

    Kinetico.comFacebook IconTwitter Icon

    Michelle Stanison

    Helpdesk Support

    Kinetico Incorporated

    mstanison@kinetico.com

    Direct  (440) 564-4353

    Mobile (440) 321-8920

     

     






  • 4.  RE: Outlook for Mac

    Posted Thu October 22, 2020 04:29 PM
    Edited by Matt Shaver Thu October 22, 2020 04:29 PM

    Thank you for the information,

    The reason you are seeing the Macs populate in the portal is because the Cloud Extender is pulling in ActiveSync mailbox records.  The Cloud Extender tool itself will pull in all records, regardless of whether or not that OS type (macOS in this case) or device type is permitted to enroll.  The device being in a not enrolled state is notable for 2 primary reasons:

    1) It is not managed by MaaS360.  Our management systems are not in place
    2) It doesn't count against your total (billable) device count

    As long as that device continues to receive mail from the account it will populate in the portal.  If the record is hidden, it will repopulate the next time the device checks mail.  There are a few options:
    • Treat it as harmless and leave it be if you are not concerned.
    • Send the user an enrollment request to get the device managed
    • Block the device from the mailbox - it will cease receiving mail, but current cached mail will still remain
    There is no way for us to identify ownership if the device is not enrolled.  If the decision is to enroll the Mac it may be marked as company or personally owned.

    Hope this helps clear things up a bit

    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------