Microsoft has told all its employees in China that they will soon only be allowed to use iPhones for work purposes. The ban on Android devices is part of a security-related Microsoft initiative for providing a unified way of managing and verifying employee identities.

The mandate, set to come into effect in September 2024, was announced in an internal memo seen by Bloomberg News. It will require Microsoft’s China-based workers to verify their identities when logging in to work computers or phones. The change is part of Microsoft’s global Secure Future Initiative that is intended, among other things, to ensure that all staff use the Microsoft Authenticator password manager and Identity Pass app.

While Apple’s iOS store is available in China, Google Play isn’t. Local smartphone giants such as Huawei and Xiaomi operate their own platforms in the country, but Microsoft has chosen to block access from those companies’ devices to its corporate resources because they lack Google’s mobile services, reads the memo.

Any staff in the country using Android handsets, including those from Huawei or Xiaomi, will be provided with an iPhone 15, as a one-time purchase. The Redmond giant is designating collection points across China where employees can pick up their iPhones.

Microsoft is also introducing the iPhones-only rule in Hong Kong, despite the Google Play Store being available in the special administrative region of China.

  • @MSids
    link
    English
    44 months ago

    Play services actually works very well for containerizing work apps. Better actually than on iOS. My work can offer a set of apps that are available in this isolated container and apply policy to them that doesn’t impact other areas of the phone. I can also shut off all of them with a single button when I am on PTO. Microsoft’s apps require these services to build the container, and I believe Android phones in China do not have play services. It’s not perfect, but I personally think it works very well.

    • Toes♀
      link
      fedilink
      English
      0
      edit-2
      4 months ago

      Oh sure, its not bad. It’s just that’s exactly the issue. The hybrid configuration of work apps and personal apps in my experience was mentally draining to explain time after time to people and configure in intune and knox. People frequently used it incorrectly. With iOS it was much more subtle and friendly experience I rarely had any issues with the apple users. Perhaps we were using it wrong, but it was a miserable experience for everyone involved.

      We tried the work only configuration that was much more pleasant to maintain but we were threatened with a strike if we didn’t let people install their own apps.

      Edit: This was back in the galaxy s7 days so maybe it’s better now.