Hello there!
Fresh, new Casper user here. We're looking for a way to secure company data on user's personal Macs. Most of our Macs are BYO, so we're trying to stay away from FileVault. Management wants something similar to FileVault Legacy, though I know that is no longer an option.
I could script hdiutil to create an encrypted disk image, but then the user controls the password. If they leave the company, we would have no way to get to that data without IT also knowing the password.
We have Box, so we could urge users to keep all of their company files via Box Sync. That way if a user leaves, we still have access to those files if needed.
Then there's the home folder, which is probably a no-go since the user has to VPN in order to access it.
How are you all securing your company data on personally owned Macs?
Thanks in advance.
