A managed Windows Mobile device that establishes an authenticated network access connection is granted access to the IT services that are published from the existing IT infrastructure.

From this point, permissions to access these services come from the user credentials that are requested from the applications or services themselves. For example, a managed device can connect to an internal Microsoft SharePoint® portal that is configured to allow anonymous connections. However, if the SharePoint site requires user authentication, users must provide their credentials before they can browse the site.