Manage Domain
Settings > Mobile > Advanced Settings > check "Allow user to remote wipe device" and "Enable device activation"

I'm using Google Apps for Business, so it might be different that what you see.

I can go to http://www.google.com/apps/mydevices and locate my devices, wipe them, or sound an alarm. The admin of the domain (also myself) can do this as well.