Skip to main content
010 447 2445Contact
Arke Technologies home
Arke Technologies home
Two service-desk colleagues in headsets follow a call at a window desk, one taking notes on a clipboard.

Mobile device management and IT asset management, run for you

Mobile device management software lets an organisation enrol, secure, update and, when needed, wipe every laptop, phone and tablet it owns or allows. Arke Technologies, in Johannesburg, runs device and IT asset management for South African organisations, public bodies and schools, on Microsoft Intune, Apple and Google tools, with one accurate asset register.

What is device management?

In computer terms, device management is controlling an organisation's devices from one place: enrolling them, applying settings and security policies, installing and updating software, and retiring each device safely. Mobile device management (MDM) began with phones and tablets. Endpoint management extends it to laptops and desktops, and unified endpoint management (UEM) brings every endpoint, from a Windows laptop to a rugged Android scanner, under one console and one set of policies. Unified endpoint management examples include Intune managing Windows, Mac, iPhone and Android devices together, and Google managing Chromebooks and phones in one admin console.

A mobile device management program is the software. The programme around it is what makes it work: device standards, enrolment rules, patching windows, a lost-device procedure and an asset register that finance and IT agree on. We run both, as part of our managed IT services.

A support agent in a headset points to a detail on her screen during a call.

Mobile device management software: the main options

Choose mobile device management software by the identity platform you already run, not by feature lists. Many organisations already own a licence for one of these:

OptionManagesBest fitLicensing
Microsoft IntuneWindows, macOS, iOS, iPadOS and AndroidOrganisations on Microsoft 365Microsoft licenses Intune per user; an Intune licence is included in Microsoft 365 Business Premium, E3 and E5
Google Workspace endpoint managementAndroid, iOS, Windows, and Chromebooks with a Chrome Enterprise or Education licenceGoogle-first organisations and schoolsBasic management in every Workspace edition, advanced controls in higher editions
Apple Business Manager with an MDMMacs, iPhones and iPadsAny Apple fleetApple Business Manager is free; it assigns devices to your MDM
Android EnterpriseAndroid phones, tablets and rugged devicesCompany-owned and personal Android devicesBuilt into Android and used through your MDM
Standalone UEM suitesMost platformsMixed estates with no Microsoft or Google standardPer device or per user, by vendor

Microsoft unified endpoint management means Intune, and Google's equivalent is endpoint management in Google Workspace. Mobile device management from ManageEngine and other standalone vendors covers similar ground for mixed estates. We run Microsoft Intune, Google's endpoint management and Apple Business Manager, and plan the move onto them from another tool, as part of end user computing.

A service-desk agent in a headset works at a desktop computer in a bright open-plan office.

Device management by platform

  • Windows

    Device management on Windows runs through Intune and Entra ID, or Group Policy where machines still join an on-premises domain. Windows 10 reached end of support on 14 October 2025, so Windows 10 device management now means upgrading to Windows 11, replacing machines that cannot run it, or paying for Extended Security Updates while you do.

  • Apple

    Device management for Apple uses Apple Business Manager, or Apple School Manager in schools, so Macs, iPhones and iPads enrol automatically and users cannot remove the management. Mobile device management for Apple also enforces FileVault encryption and passcodes.

  • Android

    Device management for Android uses Android Enterprise: a work profile keeps company apps and data apart from personal ones on staff-owned phones, and company-owned devices are fully managed. Zero-touch enrolment sets new devices up out of the box, and a device management app on Android, such as Microsoft's Company Portal, completes enrolment.

  • Chromebooks and Google accounts

    Chromebooks for learners and staff are managed in the Google Admin console. Google account device management also shows each user the phones and computers signed in to their account, so a lost one can be signed out, and administrators can block or wipe a managed device from the console. See learner devices for schools.

From purchase to disposal: how we manage devices

  1. Supply

    Devices come through Server Hub, our trading division, configured to your standard. If you prefer laptop leasing to buying outright, we manage leased devices the same way. See IT procurement and lifecycle management.

  2. Enrol

    Zero-touch enrolment where the platform allows, and an asset tag and register entry before the device reaches its user.

  3. Secure

    BitLocker or FileVault encryption, multi-factor sign-in, conditional access and Microsoft Defender, plus security awareness training so staff know what to do when a device goes missing. See ransomware and endpoint protection.

  4. Patch

    Security patching for operating systems and common applications in agreed windows, with a compliance report each month.

  5. Support

    Remote device management and remote IT support on our own remote-access platform, where every session is approved and logged. Our monitoring checks each computer every 15 minutes and logs faults as tickets automatically.

  6. Recover

    A lost or stolen device is locked and wiped, and we help you decide whether the loss is a security compromise you must report under section 22 of POPIA.

  7. Retire

    Data wiped, the register updated, and the device redeployed, returned at the end of its lease or disposed of responsibly.

IT asset management: one register that finance and IT agree on

What is IT asset management? IT asset management (ITAM) is tracking every IT asset, from laptops and servers to software licences and cloud subscriptions, through its life: purchase, allocation, maintenance, transfer and disposal. An IT asset inventory lists what you have; IT asset inventory management keeps that list true as people join, move and leave.

Hardware IT asset management and software asset management meet in one register. We build it from what the tools can see, such as Microsoft's Intune and Defender inventories and Google's device lists, and reconcile it to the fixed-asset register your finance team keeps in SAP, Sage or another ERP, so IT and finance count the same laptops. For public bodies this is a legal duty: the PFMA (section 38) and the MFMA (section 63) make accounting officers responsible for managing and safeguarding assets, and the public service's ICT governance framework lists IT asset lifecycle management among the general IT controls a department's head of ICT reports on (DPSA, March 2022).

IT asset management also anchors security. The NIST Cybersecurity Framework opens its Identify function with asset management, and the first two CIS Controls are inventories of hardware and software: you cannot protect a device you do not know about.

Three support agents in headsets work at their desks in a quiet office.

Choosing device management and IT asset management solutions

Software for IT asset management runs from open-source IT asset management tools such as Snipe-IT to commercial suites from ServiceNow and from Zoho, whose ManageEngine range covers asset and mobile device management. Analyst reports such as the Gartner Magic Quadrant, and peer reviews, help build a shortlist; the right IT asset management tool is the one your team will keep current. Before choosing mobile device management solutions, ask:

  • Does it use licences you already own? Many Microsoft 365 plans include Intune, so a second MDM may be money spent twice.
  • Does it cover every platform you run, including Chromebooks, Macs and rugged Android devices?
  • Can it separate work and personal data on staff-owned phones, so you manage the phone without seeing private content?
  • Will it report patch status, encryption and devices that have stopped checking in, in a form your audit committee can read?
  • Who owns the tenant, the configuration and the register if you change provider? With us, you do.

Open-source endpoint management has its place: our own remote-access platform is built on open-source RustDesk, with a management layer we own.

Security, POPIA and reporting

  • Every 15 minutes

    monitoring checks on each managed computer

  • 14 October 2025

    Windows 10 end of support

  • Monthly

    service review and device compliance report

Mobile device management security is where the service earns its keep: an encrypted, managed laptop left in a taxi is an inconvenience, while an unmanaged one may be a POPIA breach you must report.

  • SLA and reporting

    Incidents prioritised from P1 to P4, with response and resolution targets agreed in your SLA, and a monthly service review and report on device counts, compliance, patch status, encryption and devices not seen.

  • Compliance

    Controls aligned with the NIST Cybersecurity Framework and CIS Controls, POPIA security safeguards (section 19) and breach handling (section 22), and asset evidence for King IV or King V governance and PFMA or MFMA audits. See POPIA compliance.

  • Procurement

    Level 1 B-BBEE contributor (sworn affidavit available on request); company documents, CSD supplier number and SARS tax compliance status available on request; bought through a proposal and SLA, a purchase order or a tender response. See company facts.

  • Continuity

    The service is priced per user, so it scales with your fleet under the same contract. You own the MDM tenant, admin credentials, policies, register and documentation, and at exit we hand them over with a written runbook.

What device management costs

Last reviewed: September 2026.

Device management has three costs: the licence, the management and the rollout. The licence is often paid for already, since Intune comes with Microsoft 365 Business Premium, E3 and E5, and Google Workspace includes basic endpoint management. The management is usually part of a per-user managed IT fee; published South African managed IT rates run from about R180 to R400 per user per month (matnet.co.za, September 2026). The rollout, enrolling the existing fleet and building the register, is quoted as a project. The price moves with the number of devices and platforms, staff-owned phones, shared or rugged devices and the reporting you need. We quote after an assessment; see managed IT pricing.

A row of support agents in headsets at a long desk beside tall office windows.

Frequently asked questions

What is mobile device management (MDM)? Show answer

Mobile device management is the software and practice of controlling an organisation's phones, tablets and laptops from one console: enrolling them, enforcing security settings, installing apps and wiping them if lost. The shortest mobile device management definition is central control of devices you cannot physically touch. Managing every endpoint this way is called unified endpoint management.

Is Microsoft Intune included in Microsoft 365? Show answer

Yes, in some plans: Microsoft Intune is included in Microsoft 365 Business Premium, E3 and E5, but not in Business Basic or Business Standard. Many organisations therefore own an Intune licence without using it, and Microsoft also licenses Intune on its own, per user. Check what you own before buying separate mobile device management software; we review your licences in every assessment.

What is the difference between MDM and unified endpoint management? Show answer

MDM manages phones and tablets; unified endpoint management manages every endpoint, including Windows and Mac laptops, desktops, Chromebooks and rugged devices, with one set of policies and one console. Modern MDM tools such as Intune are, in practice, UEM tools. The distinction matters mainly when you compare products that still manage only mobile devices.

How do you remove device management from an Android phone? Show answer

On a personal Android phone with a work profile, remove the work profile in Settings; this deletes the organisation's apps and data and leaves yours alone. A company-owned, fully managed phone can only be released by the organisation's administrator, who retires or wipes it in the management console. A factory reset alone may re-enrol it if zero-touch enrolment is set up.

Why does Windows say "device management could not be enabled"? Show answer

The message means Windows tried to enrol the device in Intune, often while you signed in to a Microsoft 365 app, and the enrolment failed. Common causes are a user without an Intune licence, a user outside the automatic enrolment scope, enrolment restrictions that block that device type, or a device limit. An administrator can fix each one centrally.

How do you open Device Manager from the Run command or cmd? Show answer

Press the Windows key and R to open Run, type devmgmt.msc and press Enter; the same command works in a command prompt (cmd). The keyboard shortcut is the Windows key and X, then M. Device Manager handles one computer's hardware and drivers, while device management software, which we run for you, manages a whole fleet.

What should an IT asset register include? Show answer

An IT asset register should record each asset's tag, type, make, model, serial number, user, location, purchase date and cost, warranty, licence or subscription, status and disposal date. Link it to the fixed-asset register finance keeps, and update it from your management tools rather than by hand. An accurate register is also CIS Control 1 and the start of the NIST framework's Identify function.

Know every device you own, and control each one

We will assess your devices, licences and asset register, and show you what managed devices would change for your security and your audit. Talk to us about a fleet of any size.