Does remote wipe truly wipe data on the iPhone?

I'm having a similar issue with my ATT 8525.  I'm pretty sure it used to say Wipe...so I'm not sure what happened.  We put 4 iPhones in this week with OMA (Outlook Mobile Access) and we tested the wipe with 2 different phones.  It actually takes up to 1 hour for each 8 GB of phone capacity to wipe the phone as it does an initial delete, then a secure erase.  During this time the iPhone will only show the Apple logo.  When it's all done, it will show the iTunes/USB diagram on the screen waiting to setup the phone from scratch again.

I'm trying to find a resolution to the Block only capability in the web tool.  I'll let you know if I find anything out.

Where that screenshot shows the options for [Wipe] or [Delete], I see [Block] and [Delete].  There is no [Wipe] option on my screen.

I think I might have a second problem here that may or may not be causing the issue.  When I installed the Mobile Admin tool, it created a second Default Web Site in IIS and put the MobileAdmin virtual folder under it.  It did not install it under the existing Default Web Site where the rest of the Exchange web stuff is like OWA.  Should it have been installed under that existing web site?

Another note, our iPhones show up as Apple devices in the Exchange web tool:
Device ID: ApplxxxxxxxxY7H
Type: iPhone

Hi franked it,

So are you saying that the wipe actually completely wipes the iPhone back to iPhone factory defaults?  You loose all personal data on it like songs, movies, non-Exchange contacts, etc.?

denverjaye:Hi franked it,

So are you saying that the wipe actually completely wipes the iPhone back to iPhone factory defaults?  You loose all personal data on it like songs, movies, non-Exchange contacts, etc.?

YES

I'm attaching a screenshot of the options I see on the "Wipe" screen.

Here:

block actually wipes the device (and then you have the option to wipe).  not exactly straightforward, but it works.

Source:http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_23298506.html

Just to clairify, you select [Block] and then it gives you a second option to Wipe after clicking on [Block]?

Thats what the post says, you can try it out if you want. i dont have iphone, so i cant try it.

I figured out what our problem was.  We deleted the relationship in the Exchange tool.  We did not delete the server source on the phone.  So the phone decided to sync at its next interval.

The phone synced and the server created a new relationship.  Because the phone didn't setup a new relationship on its end, it did not "download" the security policies from the server, thinking it already had them.  The server then saw this device as a device that is not fully security managed, and so didn't believe it had the capability to wipe this device.  

I deleted the relationship on the phone (which deletes the Outlook data stored on the phon) and recreated it on the phone.  This forced the phone to re-apply our security policies and now the Wipe button is available for this device.

No, if all you have is the Block option, you will not have the Wipe option.  They are exclusive of each other.  Block is a fall back mechanism for devices that do not support the full security policies.  In the case of the iPhone, it should support the security policy (including the password/PIN) but if you didn't let the phone enforce that, you may not have the ability to wipe it.

I would remove the relationship on the iPhone and re-create it.  Make sure to accept the application of Exchange security policies so that Exchange can fully manage the security policies of the phone, including the wipe.

Makes sense.

Hmm, I don't get an option on the iPhone to accept Exchange security policies like the screenshot shows in that link you gave me.  Is that hidden somewhere on the iPhone?

I tried deleting the account on the iPhone and recreating it but I still see [Block] not [Wipe].

I happen to find this in an article on Microsoft's site talking about Apple licensing ActuveSync.

"Apple also has the option to enable features that allow businesses to manage the iPhone through security policies in Exchange Server 2007, including remotely wiping all data from a lost or stolen iPhone, and requiring security provisions for email such as a password and pin access. "

I wonder if you have to have Exchange 2007 for the WIpe to function properly?  I'm running Exchange 2003 SP2.

GOT IT!!!  Ok, so I did have to follow that link you (franked it) sent.  The thing I was missing was clicking on that [Delete] action on the Mobile Admin page which deleted the State information from the Exchange server after deleting the account on the iPhone.  I guess that completely deleted all records of the iPhone and started from scratch.  I also had to go in to Exchange System Manager and go to properties of Mobile Services under Global Settings.  I clicked on the Device Security button and checked the box to "Enforce password on Device".  Once I did all of that, and set up a new account on the iPhone, the [Wipe] option is available.

The only downside to all of that is that it forces you to use a "Passcode Lock" on the iPhone.  I guess that's good for security but it's annoying when you have to type in a code everytime your phone goes back to sleep.

As a quick follow up, it appears that you do have the option on the iPhone to delay the "Require Passcode" up to 4 hours instead of immediately.  That makes it so that you don't have to punch it in after every time the phone goes to sleep.

Yes we use the 4 hour delay as well.  Not perfect from a usability standpoint, but definitely better for security, and allows the remote wipe which is a good benefit.

Just tested this out on my iPhone using Exchange 2003 SP2 and the Mobile Admin Web tool, and I also only had the [block] option, so I selected that, and it did in fact wipe the phone without any user intervention.  Is this not the same as what the [wipe] feature would have done?

Yes, that should be the same as the wipe function.

Interesting that Block had the same function...