Or use a secure and manageable tablet OS like Win8 or WinRT, which have all of those features plus enterprise management and drive encryption (fixed and removable), guaranteed to be capable of this on every logo'd device as having the hardware to support those things is a logo requirement.
<sarcasm>But that's easy, so obviously we can't do that </sarcasm>.