Best practice on device cleanup of those that don't come online after either an Enterprise Wipe or Device Wipe command is executed

[chengtmskcc]

Question for all. How long do you keep devices in your environment with either Enterprise Wipe Pending or Device Wipe Pending status?

I now work for a health institution and at the moment we have roughly 1300 of such devices in our console.

[LukeDC]

I purge anything idle over 45 days regardless of status. Wasted processor time IMO.

[JohnBatshon]

Yeah I have been purging at 31+ days. No sense in seeing ' Red'  all over my screen 😃

[chengtmskcc]

Thanks guys. I suppose there's no concern of data left on these devices assuming they will get enterprise wipe anyway once they do come back online?

[LukeDC]

I don't even worry about if the wipe will take place or not really. I have a passcode policy that will wipe the device after X number of failed attempts. That's the protection I need for offline devices. Increasing numbers of thefts are immediately placed into faraday bags, shielding them from network signals until the thief gets to a spot where they can attempt access without any network connections. The passcode policy is the true wall between your device and a thief IMO.

[DeanPayne]

Do you do anything with Lost mode in those instances Luke or do you solely rely on the passcode method?