Once an employee leaves the company, delete the organization’s information and leave private photos, contacts, programs and documents intact, or even “delete accounts.” The two “wipe devices” and “account wipe” help a Google Apps administrator protect a company’s data.
Google improved remote control of program and organization information for iOS devices in September 2015. The update allowed people to separate program and organization information from private apps and information about iOS devices ( Google is introducing similar features to Android, as part of Android for Function) . The modifications make Google Apps more favorable for use in a BYOD environment.
Now, a remote “delete accounts” command sent to any linked iPhone or iPad will remove data and apps installed using the entire Google Device Policy app. No other programs or data on your device will be affected. Personal photos remain and organization information disappears from the device.
The latest mobile app management features for iOS require some installation. You will need to make changes both from the Google Apps Admin console and on all linked iOS devices.
1. Connect Google Apps to Apple Push Notifications
You’ll first need to join your Google Apps accounts to Apple’s Unit Notification program. Apple then generates a push certification document, which you download from Apple and then upload to your G Apps account. This links Google Apps and Apple to allow management of iOS devices.
Sign in to a Google Apps administrator account and navigate to the Device address, then Mobile (in the menu) and then select “Set up Apple push certificate”. When a certificate already exists, you will find “Manage Apple Push Certificate” instead of “Configure…”. The method takes a couple of minutes and may require active Apple ID accounts to sign in to the Apple system.
2. Configure device management settings
Then go to Device Admin Settings in Google Apps (ie under Admin Games: Device Address | Mobile | Device Admin Settings).
Under the General Settings section, make sure the following options are evaluated equally:
• Empower iOS Sync for consumers
I suggest you check the box for “Enable Device Activation” and insert your personal email address in the box. This allows you to independently review and accept each mobile device link request. Ironically, this shortens and shortens the connection procedure for new gadgets, but the extra effort improves the security of your business.
3. Insert Whitelisted iOS Programs
In the end, add any free iOS programs to your own organization’s “whitelisted iOS programs” list (in the admin console, then visit Device Address | Mobile | Whitelisted iOS Apps). Select the curved action button in the lower right section of the screen, find an iOS program title, and then insert it.
You can add any free iOS program to the list. You can include the Chrome browser and also invite people to use Chrome on iOS to browse and Safari on iOS to browse individually.
Remember that all programs added to an iOS device in the Google Device Policy app are the ones that will be removed in the event of a remote “account wipe” being triggered. For example, if you include the Last Pass program, a remote “account wipe” would not only remove Google Apps data, but would also remove Last Pass account data from the device.
Installation of each iOS device
Each individual who wishes to join with an iOS device for their own organization’s Google Apps accounts will need to complete the following steps.
1. Install the program
You will need to sign in with your Google Apps accounts and allow the program to set up a Google Apps device policy profile on your system. You may also need to wait for your device enrollment to be re-evaluated by your own Google Apps administrator.
2.Install programs
After your device is accepted, launch the Google Device Policy app and choose any of the listed programs to install. These programs will be automatically associated with your own Google Apps for Work account information. Programs installed this way can help isolate and protect your business information from personal iTunes accounts and programs.
After each of the above steps, if you ever send an “account wipe” remote to the unit, all programs installed in the Device Policy program, and their associated information, will likely be removed. However, all personal programs and information will remain intact on the device. What programs have you included?
