Organizations should track assets through Microsoft services instead of RMM tools because email and files are the real entry points to corporate data. Personal devices accessing company data often bypass RMM visibility entirely unless conditional access policies block them.
And why I think, you know, the focus should shift from inventory living in RMM to more so inventory living in Microsoft is because that's where the access has been granted into company resources and data, which is largely what we're trying to protect here. A good example of this, you know, as we'll get into a little bit later too, is if you think about user accessing, you know, their data by default in Microsoft, you know, they have access to go in and access their email, right, and their files from any personal device. They would have unless you put, starting to put restrictions into place through conditional access, which we'll walk through today. But in a lot of cases, we're not privy, I should say, to seeing that device unless we're doing heavy network monitoring, things like that. And our RMM tool is only going out to those managed devices but not necessarily thinking about what are we going to do here, you know, if somebody's accessing it without these protections in place. So I like to think about it there, you know, just from a data access perspective, but also thinking about, You know, how do you blend that out against your other tools that you'd be leveraging as well too?
