How To Wipe Email Off A Personal Device

PMG2023 0 Reputation points
2023-04-09T07:36:38.8366667+00:00

Hi Everyone I am using Endpoint Manager on a small O365 tenant and I am pretty new to MDM, I would appreciate some guidance on the below situation. I have some iphones that will be corp devices and some that are personal, I need to be able to wipe the emails off the devices for both corp owned devices and personal ones if the phone is lost or in the case of personal devices, if the person leaves the company. I see if I enrol the device into endpoint manager and get users to download outlook from my list of available apps I can use selective wipe to remove the email. But for personal devices, I cant get them to do this as its not a managed device. Someone said app protection policies can serve my purpose but I dont see how I can use this to get Outlook on their device from endpoint manager as its not a managed device and therefore not enrolled, with this being the case, how could I wipe the email off it? I can see I could use conditional access to stop them logging into Outlook with their company email account if they download Outlook manually themselves but I cant see how I can get them access to their email and yet be able to wipe the email off on a personal de3vice. So in essence my question is: How can I wipe corporate email off a personal phone when someone leaves? Thanks very much.

Microsoft Intune iOS
Microsoft Intune iOS
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.iOS: An Apple mobile operating system.
202 questions
Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
909 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,666 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,551 Reputation points MVP
    2023-04-09T10:32:27.4433333+00:00

    If you enroll the device then it will be managed. When you delete the device from Intune, all corporate data will be removed as well. Selective wipe will work perfectly in your scenario. Just make sure you apply App Protection policies for both managed and unmanaged devices. This way apps installed both personally and through Company Portal will come under Intune management. Leverage CA to restrict access to compliant or APP.

    1 person found this answer helpful.
    0 comments
  2. Simon Ren-MSFT 31,756 Reputation points Microsoft Vendor
    2023-04-10T02:40:57.7266667+00:00

    Hi,

    Thanks for your reply.

    ==>So in essence my question is: How can I wipe corporate email off a personal phone when someone leaves?

    Agree with @Rahul Jindal [MVP] . Intune App selective wipe can achieve this goal. Selective wipe for MAM simply removes company app data from an app, for example Outlook. The request is initiated using Intune. After the request is finished, the next time the app runs on the device, company data is removed from the app.

    In addition, you can also configure a selective wipe of your company data as a new action when the conditions of Application Protection Policies (APP) Access settings are not met. This feature helps you automatically protect and remove sensitive company data from applications based on pre-configured criteria.
    For more information, please refer to:
    How to wipe only corporate data from Intune-managed apps
    Selective wipe
    Thanks for your time. Have a nice day!
    Best regards,
    Simon

    If the response is helpful, please click "Accept Answer" and upvote it. Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  3. Simon Ren-MSFT 31,756 Reputation points Microsoft Vendor
    2023-04-12T07:24:24.3166667+00:00

    Hi,

    Hope everything goes well. Do you need any further assistance about this issue? If yes, please feel free to let us know, we will do our best to help you.

    If the response is helpful, it's appreciated that you could click "Accept Answer" and upvote it, this will help other users to search for useful information more quickly.

    Thanks for your time. Best regards,
    Simon

    0 comments