Missing guide: lock and wipe

noahtalerman commented 3 weeks ago

Fleet version: N/A

💥 Actual behavior

Fleet doesn't have a guide on best practice (when and how) for locking and wiping company-owned workstations, iPhones, and iPads and BYOD workstations, iPhones, and iPads.

🧑‍💻 Steps to reproduce

N/A

🕯️ More info (optional)

There's no lock feature on iOS/iPadOS that's equivalent w/ macOS: total lock out w/ 6-digit unlock PIN.
Our current understanding is that for company-owned iPhones and iPads, if a device is lost/stolen or the end user leaves the company the best practice is to wipe the device.
Our current understanding is that for BYOD iPhones and iPads, these are neither wiped nor locked if a device is lost/stolen or the end user leaves the company. Instead, the device has MDM turned off.

@noahtalerman: If it's helpful, please feel free to schedule 30 mins w/ me to discuss best practice

getvictor commented 6 days ago

@noahtalerman Do you think the product team should take a first pass at this?

noahtalerman commented 6 days ago

@getvictor yes. I brought this onto the drafting board.

Currently, both teams (MDM and Endpoint ops) are having a hard time catching up on bugs which means we can take on less feature work.

Please let me know if you run across any other bugs that Product design can help with.

fleetdm / fleet