Skip to main content

Advanced MDM

Enterprise
note

Advanced MDM posture checks are a roadmap capability delivered as a custom engagement, not a self-serve GA feature today. There is no Settings > Enterprise > Advanced MDM screen, no Intune/Jamf credential integration, and the shipped extension does not perform enrollment verification, compliance checks, or device health attestation yet. What ships today is standard MDM deployment — force-installing and pinning the extension via your MDM — documented in MDM Integration. If device compliance verification is a requirement for your deployment, contact your account manager so we can scope what is available for your environment.

Advanced MDM is designed to provide enhanced device compliance verification and management capabilities beyond standard MDM deployment. It is listed as an Enterprise plan capability ("Advanced MDM posture checks"), with a limited variant planned for Professional.

Overview​

Advanced MDM is designed to enable:

  • Device compliance verification
  • OS version requirements
  • MDM enrollment checks
  • Security posture assessment
  • Conditional access policies

Standard MDM deployment vs Advanced MDM​

FeatureStandard MDM deployment (shipped)Advanced MDM (roadmap)
Extension force-install and pinning✓✓
Enrollment verification✗Planned
Compliance status✗Planned
OS version requirements✗Planned
Security policy checks✗Planned
Conditional enforcement✗Planned

Standard MDM deployment works today with Intune, Jamf Pro, Google Workspace, and any MDM that can push Chrome extension policies — see MDM Integration.

Design Intent​

The intended Advanced MDM capability set, confirmed per engagement:

Compliance Verification​

  • Enrollment check - Verify a device is enrolled in your MDM before granting full functionality
  • Compliance status - Check the device against your MDM compliance policies
  • OS version requirements - Require minimum OS versions
  • Recent check-in - Require recent MDM communication

Conditional Enforcement​

Vary policy enforcement based on device compliance — for example, standard policies on compliant devices and stricter or fully blocking policies on non-compliant devices.

Target MDM Platforms​

The design targets the common enterprise platforms — Microsoft Intune, Jamf Pro, VMware Workspace ONE, and Google Workspace (Chrome enrollment). The exact set of supported platforms and checks is confirmed per engagement.

Getting Started​

Advanced MDM requires a custom engagement with your device management team. Contact your Containment.AI account manager or sales team to begin:

  1. Requirements gathering - Discuss your MDM platform and compliance requirements
  2. Architecture review - Confirm which posture checks apply to your fleet
  3. Implementation - Configure and validate with pilot devices
  4. Production - Roll out with monitoring