Device access: Intune compliance with Conditional Access vs app protection (MAM) without enrollment

This sheet compares Intune compliance policy + Conditional Access (managed devices), Intune app protection policy / MAM without enrollment (BYOD).

CriterionIntune compliance policy + Conditional Access (managed devices)Intune app protection policy / MAM without enrollment (BYOD)
Enrollment requirementDevice is enrolled and managed by IntuneNo enrollment; corporate data is protected at the app layer only

The verdict, the full comparison, 4 rules and 4 traps are part of SC-100 access. Unlock SC-100.