Remote wipe via active sync and OMA

Discussion in 'Computer Security' started by Gingerdave, Jun 10, 2010.

  1. Gingerdave

    Gingerdave Megabyte Poster

    990
    44
    74
    HI all

    we are in the process of rolling OMA and compatable phones (2 nokias or Iphones were the choices) out across the company and I am writing the security document.

    I have set in my mind the process for reporting and remote wiping the phone which goes something like

    1. User reports phone is lost
    2. IT team perform remote wipe
    3. Get sim and phone blocked by carrier

    However not having blanked the phones before the question occurs to me:

    What if the phone is out of signal range (maybe in the underground) when the remote wipe command is sent, does the command stack at the carrier end waiting for the next contact and what effect would blocking the SIM have?

    Can anyone help on this?
     
    Certifications: A+,MCP, MCDST, VCP5 /VCP-DV 5, MCTS AD+ Net Inf 2008, MCSA 2008
    WIP: MCSA 2012
  2. craigie

    craigie Terabyte Poster

    3,020
    174
    155
    Good question mate, honest answer no idea.

    I would recommend testing this, do you have the phones now? If so create a test account get it sycnhing then go lock yourself in a cupboard with no signal and get a colleague to send the command and see what happens.
     
    Certifications: CCA | CCENT | CCNA | CCNA:S | HP APC | HP ASE | ITILv3 | MCP | MCDST | MCITP: EA | MCTS:Vista | MCTS:Exch '07 | MCSA 2003 | MCSA:M 2003 | MCSA 2008 | MCSE | VCP5-DT | VCP4-DCV | VCP5-DCV | VCAP5-DCA | VCAP5-DCD | VMTSP | VTSP 4 | VTSP 5
  3. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    Blackberry's rule in the enterprise.

    BES Express. Software now free and no licenses to buy. RIM getting it together in the face of Competition.
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  4. Gingerdave

    Gingerdave Megabyte Poster

    990
    44
    74
    I was going to, but at the moment all those phones are in London and I am in Leeds which makes it somewhat difficult.

    Also I was hoping that someone had tried it already - worth a try at least :rolleyes:

    Quite possibly, however I work for a partnership and the partners as a group decided they wanted iPhones and not Blackberry's with the nokias being provided for more junior members of staff.
     
    Certifications: A+,MCP, MCDST, VCP5 /VCP-DV 5, MCTS AD+ Net Inf 2008, MCSA 2008
    WIP: MCSA 2012
  5. michael78

    michael78 Terabyte Poster

    2,085
    29
    141

    Doing the Exchange Exam at present my understanding is if the phone hasn't got a signal the next time it gets a signal and tries to sync it would get the remote wipe command and wipe the device. You can also set it up whereby the user can send a remote wipe to the device from Outlook or OWA so they don't need to get the IT team to do it say if it was late at night.
     
    Last edited: Jun 10, 2010
    Certifications: A+ | Network+ | Security+ | MCP | MCDST | MCTS: Hyper-V | MCTS: AD | MCTS: Exchange 2007 | MCTS: Windows 7 | MCSA: 2003 | ITIL Foundation v3 | CCA: Xenapp 5.0 | MCITP: Enterprise Desktop Administrator on Windows 7 | MCITP: Enterprise Desktop Support Technician on Windows 7
    WIP: Online SAN Overview, VCP in December 2011
  6. Gingerdave

    Gingerdave Megabyte Poster

    990
    44
    74
    Thanks Slypie, thats good to know - but what if we cancel the SIM (as is company policy) does that effect the remote wipe?
    Didnt know about the OWA wipe - thanks for that. :)
     
    Certifications: A+,MCP, MCDST, VCP5 /VCP-DV 5, MCTS AD+ Net Inf 2008, MCSA 2008
    WIP: MCSA 2012
  7. michael78

    michael78 Terabyte Poster

    2,085
    29
    141
    Ahh not sure about that one but I'd assume (don't hold me on this) that if you took the Sim out you wouldn't be able to check emails and data without it. To be honest I've only really dealt with Blackberry's and never thought of trying to access data on the phone without a sim card :oops:. I would as Craigie says test every possibility and maybe contact your service provider to find out as I would of thought they would know this info on their business department.
     
    Certifications: A+ | Network+ | Security+ | MCP | MCDST | MCTS: Hyper-V | MCTS: AD | MCTS: Exchange 2007 | MCTS: Windows 7 | MCSA: 2003 | ITIL Foundation v3 | CCA: Xenapp 5.0 | MCITP: Enterprise Desktop Administrator on Windows 7 | MCITP: Enterprise Desktop Support Technician on Windows 7
    WIP: Online SAN Overview, VCP in December 2011
  8. Gingerdave

    Gingerdave Megabyte Poster

    990
    44
    74
    Not taking it out, more we report the phone as missing and the provider stops the SIM, will have to ask Vodafone, oh well..

    Thanks guys.


    Edit

    On the phone to them now - have confused the first 3 people I have spoken to. Being passed up the line as I type...

    Edit 2

    Ok spoke to their tech support guys, the priorty goes to the Sim bar because when the phone seeks to reestablish connection it will go to the nearest tower and at that point the connection will be refused with the bar being sent to the SIM. Due to the inital connection being rejected the attmpt to sync over the air with the exchange will not happen and thus the wipe wont take place.

    Not the answer I wanted but good to know all the same.

    Thanks again for you help guys.
     
    Last edited: Jun 10, 2010
    Certifications: A+,MCP, MCDST, VCP5 /VCP-DV 5, MCTS AD+ Net Inf 2008, MCSA 2008
    WIP: MCSA 2012

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.