What is MDM, and what does it actually do?

Mobile Device Management lets IT enrol, configure, secure and manage company devices remotely from a central console. In practice that means enforcing passcodes and encryption, pushing apps and settings, restricting risky features, separating work from personal data, and locating, locking or wiping a lost device — all without physically handling each one.