How to wipe corporate data from a device?

When an employee leaves an organization or if the device is lost or stolen, an organization needs to remove all the corporate data and files residing on that device. Executing a complete device wipe command will remove all the device data and restore it to its factory defaults. It includes deletion of all the corporate and personal data and files on the device.

However, an organization may not want to remove the personal data on the device, especially if it is a personally-owned device. In such a case, it can perform a corporate data wipe to remove the corporate files, apps, or configurations that are deployed via Hexnode without wiping any personal data of the user.

To perform a corporate data wipe, you should either

• Delete/remove the policy that associates the Wi-Fi, VPN and other settings with the device.

Or

• Disenroll the device

  Disenrolling a device will remove all data associated with the device from your Hexnode UEM portal, and you won’t be able to access it again. On the device, all the applied policies and configurations will get removed, and the device will regain its unmanaged state.

Deleting a policy

Hexnode allows you to archive a policy from the Hexnode UEM console.

To Archive a Policy

1. Log in to your Hexnode portal.
2. Go to Policies.
3. Select the policy.
4. Click on Manage > Move to Archive.

Removing a policy from the device

There are multiple methods to remove a policy from a device:

Method 1: From Policies tab

1. Head on to Policies.
2. Select an existing policy from the list.
3. Go to Policy Targets.
4. Click on remove corresponding to the devices which you want to remove.

Method 2: From Device Details

1. Go to the Manage tab.
2. Click on a device name.
3. Head on to the Policies sub-tab.
4. Click on the trash icon corresponding to the policy name.

Remove apps

Enterprises can make use of the ‘Mandatory Apps’ feature to automatically remove corporate apps from Android and iOS devices if they get lost, stolen, or even if the employee leaves the organization. Here, any apps pushed via MDM will be removed automatically on deleting the policy, or disassociating the policy from the device or when the mandatory app is removed from the policy. The option “Remove apps from the device on policy removal” must be enabled under Policies > iOS/Android > App Management > Mandatory Apps for this feature to work.

While configuring an iOS in-house (enterprise) app on the Hexnode UEM, you can specify whether the app needs to be removed from the device on disenrollment.
To remove an iOS enterprise app on disenrolling,

1. Log in to your Hexnode MDM portal and select the Apps tab.
2. From + Add Apps and select Enterprise App.
3. Choose the Platform as iOS.
4. Check the option Remove on disenroll. Enable ‘Prevent app backup’ to prevent the user from backing up the app data, thus securing the corporate data in the app (if any).
5. Click on Add.