Once an employee leaves the company, delete the organization’s information and leave private photos, contacts, programs, and documents intact, or even “delete the accounts.” Both “wiping appliances” and “account wiping” help a Google Apps administrator protect a company’s data.

Google improved remote control of programs and organization information for iOS devices in September 2015. The update allowed people to separate programs and organization information from private apps and information about iOS devices ( Google introduces similar features in Android, as part of Android for Function). The modifications make Google Apps more conducive to use in a BYOD atmosphere.

Now, a distant “wipe accounts” command sent to any paired iPhone or iPad will delete data and installed apps using the entire Google Device Policy app. No other programs or information on your device will be affected. Personal photos remain and organization information is removed from the device.

The latest mobile app management features for iOS require some installation. You’ll need to make changes both from the Google Apps admin console and on all linked iOS devices.

1. Connect Google Apps to Apple push notifications

You’ll first need to join your Google Apps accounts to Apple’s drive notification program. Apple then generates a push certification document, which you download from Apple and then upload to your G Apps account. This links Google Apps and Apple to allow iOS device management.

Sign in to a Google Apps administrator account and navigate to the Device address, then Mobile (in the menu), then select “Set up Apple Push Certificate”. When a certificate already exists, you will find “Manage Apple Push Certificate” instead of “Configure…”. The method takes a couple of minutes and may require active Apple ID accounts to log in to the Apple system.

2. Configure device management settings

Next, go to Device Management Settings in Google Apps (ie Admin Games: Device Management | Mobile | Device Management Settings).

Under the General Settings section, make sure the following options are evaluated equally:

• Empower iOS Sync for consumers

I suggest you check the box for “Enable Device Activation” and insert your personal email address in the box. This allows you to independently review and accept each mobile device link request. Ironically, this shortens and shortens the connection procedure for new appliances, but the extra effort improves your company’s security.

3. Insert whitelisted iOS programs

In the end, add any free iOS programs to your own organization’s “whitelisted iOS programs” list (in the admin console, then visit Device Address | Mobile | Whitelisted iOS Apps). Select the curved action button in the bottom right section of the screen, search for an iOS program title, and then insert it.

You can add any free iOS program to the list. You can include the Chrome browser and also invite people to use Chrome on iOS for browsing and Safari on iOS for browsing individually.

Remember that all programs added to an iOS device in the Google Device Policy app are the ones that will be removed in the event of a remote “account wipe” being triggered. For example, if you include the Last Pass program, a remote “account wipe” would not only delete your Google Apps data, but also remove your Last Pass account data from the device.

Installation of each iOS device

Each individual who wishes to join with an iOS device for their own organization’s Google Apps accounts will need to complete the following steps.

1. Install the program

You will need to sign in with your Google Apps accounts and allow the program to set up a Google Apps device policy profile on your system. You may also need to wait for your own Google Apps administrator to reassess your device’s enrollment.

2.Install programs

After your device is accepted, launch the Google Device Policy app and choose any of the listed programs to install. These programs will be automatically associated with your own Google Apps for Work account information. Programs installed this way can help isolate and protect your business information from personal iTunes accounts and programs.

After each of the steps listed above, if you ever send a “wipe accounts” remote control to the unit, all programs installed in the Device Policy program, and their associated information, will likely be removed. However, all personal programs and information will remain intact on the device. What programs have you included?