Selective wipe for BYOD. Clean separation between work and personal. Perfect for employee offboarding and lost devices.
A selective wipe removes only corporate data and applications from a BYOD device, leaving all personal content intact. When an employee leaves or a device is lost, you can instantly remove company email accounts, managed apps, and cached corporate documents without touching personal photos, contacts, music, or apps.
Traditional mobile device management (MDM) requires a full factory reset to remove corporate data, which wipes everything. With Intune's Mobile Application Management (MAM) and selective wipe, employees keep their personal devices truly personal while you maintain full control over corporate information.
This is the foundation of modern BYOD programs. Employees are more willing to enroll when they know you can't accidentally delete their family photos. IT gains the ability to offboard employees remotely without device collection. Security teams can respond to lost or stolen devices immediately. Everyone wins.
Last updated:
Initiate a selective wipe from Intune. Device checks in, corporate data removed, employee notification sent. Complete in under a minute.
Photos, contacts, personal apps, music, and settings remain untouched. Only corporate-managed content is removed.
No need to collect the device. Wipe executes remotely when the device is online, perfect for remote workers and lost devices.
Email accounts, managed apps, Office documents, OneDrive cache, and app protection policies all removed instantly.
Corporate data remains in Exchange Online, OneDrive, and SharePoint. Only the local cached copy is removed from the device.
Full logging in Intune. Know exactly when the wipe was initiated, executed, and completed. Perfect for compliance reporting.
Employees keep their stuff. You keep your data. Clean separation between work and personal.
Employees actually enroll when they know you can't accidentally wipe their device. Privacy concerns eliminated. Adoption rates increase 40-60%.
Employee quits at 5 PM Friday. Corporate data gone by 5:01 PM. No waiting for device return. No awkward handoffs. No gaps in security.
Device reported lost. Wipe corporate data immediately. Employee keeps using their device once found. No insurance claim, no device replacement.
Litigated terminations get complicated fast. Selective wipe creates a clear boundary: company data removed, personal data untouched. No BYOD liability.
Two weeks notice received. On the last day, initiate selective wipe remotely. Corporate email, Teams, OneDrive removed. Employee keeps their personal device and all personal data. No device return needed.
Employee reports device missing. Immediately initiate selective wipe to remove corporate data. If found later, employee resumes personal use. If permanently lost, corporate data is already secured.
Security audit requires proof that terminated employee access is revoked. Selective wipe provides audit log showing exact time corporate data was removed from personal device.
Employee buying a new phone. Remove corporate data from old device with selective wipe, enroll new device. Old device sells or gets handed down to family with no corporate data exposure.
A selective wipe removes only corporate data and apps from a BYOD device while leaving personal content untouched. Unlike a factory reset, employees keep their photos, contacts, personal apps, and settings. Only company email, documents, apps, and access are removed.
Once initiated, a selective wipe completes in approximately 60 seconds. The device must be online for the wipe to execute. Intune queues the command and executes it the next time the device checks in, typically within minutes.
No. Once a selective wipe executes, corporate data is permanently removed from the device. Company email accounts are deleted, work apps are removed, and cached documents are wiped. Data remains safe in your cloud (Exchange Online, OneDrive, SharePoint) but is inaccessible from the wiped device.
No. Selective wipe is initiated remotely from the Intune admin center. The employee does not need to return the device. This makes it ideal for remote workers, lost devices, or immediate offboarding scenarios.
The wipe command is queued in Intune. As soon as the device comes online and checks in, the selective wipe executes immediately. Most devices check in every 8 hours, but you can also trigger a manual sync if you have contact with the employee.
Yes. Intune's selective wipe works on iOS, iPadOS, Android, Windows, and macOS. The experience is consistent across platforms. Corporate data is removed, personal data stays.
A factory reset wipes everything and returns the device to out-of-box state. A selective wipe removes only corporate-managed data and apps. Employees keep all personal content. This is the key advantage for BYOD programs where the employee owns the device.
Yes. Enroll a test device, add corporate email and apps, then perform a selective wipe. You'll see exactly which data is removed and which stays. We recommend testing on both iOS and Android before rolling out your BYOD program.
We'll configure Intune MAM, app protection policies, and selective wipe capabilities. Fixed-fee engagement with zero surprises.