Remote wipe

[oparoz]

Scenario 1

Steps to reproduce

1. Admin creates a new user
2. User installs mobile client
3. User sync all files
4. Admin deletes user

Expected behaviour

All files on the mobile device are removed

Actual behaviour

Nothing happens. User still has access to all downloaded files

Scenario 2

Steps to reproduce

1. UserA shares folder with userB
2. UserA unhares folder with userB

Expected behaviour

All files on the mobile device are removed

Actual behaviour

Share is removed. UserB still has access to all downloaded files

Solutions

Use Mobile Device Management software

Install the clients via MDM which will segragate the app and wipe it when the user leaves the company.
A MDM can also wipe the whole work container or the device

Use ActiveSync/EAS

Sponsor the development of an ActiveSync/EAS feature which can implement policies (password, encryption ,etc.) and completely wipe a device

Implement a solution in Nextcloud

1. Implement client policies which define which actions a user is allowed to do. Per example, prevent the use of external viewers, prevent saving files outside the container, etc.
2. When a user is removed, send a signal to all clients that the user has been removed
3. When a share is removed, send a signal to all clients that the share has been removed

[MariusBluem]

ActiveSync would also provide the ability to sync Calendar and Contacts better 👍

[jasonbayton]

Related: nextcloud/android#408

I'm an MDM consultant; anything you need relating to testing, MDM environments or advice feel free to involve me.

[stobias123]

Moving some of the conversation I had on forums over here...
We're looking for the two below items to control what devices connect to our instance.

1. View all devices registered in our instance of NextCloud from some admin view
2. To limit new device additions so they can only be done on the internal network.

[mario]

This should probably work in a way where Nextcloud returns a special status code on any API request that the clients then use to delete the data.

[marinofaggiana]

mmm good feature for enterprise users !

[Moini]

Isn't this implemented already? (not that I want it, been looking for my issue for adding an option for deactivating this 'feature')

[kesselb]

cc @rullzer can we close this one? ;)