- of

LABS GALLERY: Google Apps Premier Mobile Device Management
by Andrew Garcia
Rules
Administrators can limit access solely to devices that support ActiveSync policies, and thereby create and enforce passcode policies.
Passcode
With passcode policy in place, a user will be forced to create a passcode on the mobile device before being allowed to synchronize data.
Devices
Domain administrators can view synchronized devices on each user's management page. Google's system does a lousy job of differentiating devices.
Wipe
Administrators can remotely wipe a device reported lost or stolen. The command will be issued to the device the next time it attempts synchronization.
Looped Wipes
Google's console frequently will not report a successful wipe job. Any wiped devices that are subsequently rejoined to the domain will be wiped recursively until an administrator cancels the job.
Google Apps Premier and Education now offer limited security and policy controls over ActiveSync-enabled mobile devices, allowing companies using Gmail services to enforce a little bit of control over devices in the field. Policy controls are extremely limited and reporting capabilities are practically nil, but what's there works adequately and the price is right.