Device Wipe in ActiveSync Mobile Admin

Posted by M on February 2, 2010, 11:35 am

Please log in for more thread options

Originally posted in microsoft.public.exchange.admin

Hello:

I've been looking for info on what exactly gets wiped and the wiping
algorithm. So far the best info I found was from the article below. I still
need some clarification on the following:

1.) Does the remote wipe algorithm meet any accepted IT security standards
(DoD, NSA, et al.)?
2.) With Exchange Server 2003 SP2, does the remote wipe on a Windows Mobile
6 device also wipe removable storage card, or is this feature only on
Exchange Server 2007?

---------------------------------
"Security Considerations on the Exchange Server"
http://technet.microsoft.com/en-us/library/cc182279.aspx

Local and Remote Device Wipe

When a mobile device is lost or stolen, the potential security risk can be
significant. Mobile devices often contain sensitive business data, including
personally identifiable information of employees and customers, sensitive
e-mail messages, and other items. Exchange ActiveSync helps address this
risk by providing two levels of device wipe capability for Windows Mobile
5.0 powered devices with MSFP or later.

Wiping the device locally or remotely has the effect of performing a factory
or "hard" reset; all programs, data, and user-specific settings are removed
from the device. The Windows Mobile device wipe implementation wipes all
data, settings, and private key material on the device by overwriting the
device memory with a fixed bit pattern, greatly increasing the difficulty of
recovering data from a wiped device.

Note:
Device wipe in Windows Mobile 6 includes wiping the removable storage card.
---------------------------------

--
Thank you.

Regards,
M
MCTS, MCSA