Device commands. Device Command. Compliance

Transcription

1 Device commands Compliance Apply the latest Device mgmt. Profile & app info Apply the latest Device mgmt. Profile Apply the latest app mgmt. profile Apply the latest internal app info Apply customized event Send the latest device management profile and application information to the device and control the device with the profile and information. [Android, Knox, Windows] Apply the latest device management profile to the device and control the device with the applied policy. Send the latest application management profile to the device and control the device with the updated EMM Client application policies. [Android, Knox] Send the latest Internal application information and update the device according to the information. Control devices with the policies configured for customized event. To run a user-defined event on a device, follow the steps below: 1. Click Apply customized event in the Device Command - Android window, 2. Select the event code in the - Apply customized event window. If profile has a user-defined event, the event code list appears. 3. Select an item to run. Set on: You can control a device with policies that are set on the customized event. Set off: Remove the customized event from device and control the device with the default policies set on the profile. 4. Click OK. To check the policies applied on Apply customized event, 1. Go to Profiles > Device Management Profile. 2. Click a Profile Name from the list. 3. Click Event tab in the Device Management Profile window. 4. Click Event management and check the event type, and click the Event name. 5. Check the policies for Android, ios, and Knox containers. 329

2 Start gate access event [Android, ios] Control devices with the policies configured for Start gate access event. To run the Start gate access event on a device, 1. Click Start gate access event from the compliance group. 2. Select an event code in the window. If there is a Start gate access event configured on the profile designated for the device, access code is shown on the list. 3. Select the item to run. Set on: Controls devices with polices configured on the Start gate access event. Set off: Remove the Start gate access event from the device and control the device with the default policies set on the profile. 4. Click OK. To check the policies applied for Start gate access event, 1. Go to Profiles > Device Management Profile. 2. Click the Profile Name from the list. 3. Click Event tab in the Device Management Profile window. 4. Click Event management, check the event type and click the Event name. 5. Check the policies for Android, ios or Knox containers. Unlock EAS Detect jailbreak Set whether to use Exchange ActiveSync. Set on: Start using Exchange ActiveSync on the device. Set off: Stop using Exchange ActiveSync on the device. [ios] Collect jailbreak information and check OS tampering status. 330

3 Application Management Applications registered in Applications > Internal/Public/Kiosk Applications are listed on the device command window. Install Run Stop Delete Data To install and update the selected application on a device, 1. Click Install from App Management. For Android, Internal/Kiosk apps can be installed or updated. For Knox container, Internal apps can be installed or updated. For ios, Internal/Public apps can be installed or updated. 2. Select Installation Type in the - App Install window. Install or Update Reinstall 3. Select the application and click OK. 4. Click OK when the confirmation pop-up appears. To run the selected application on a device, follow the steps below: 1. Click Run in App Management group. For Android, Internal/Kiosk apps can run. For Knox container, Internal apps can run. 2. Choose an application to run in the Device Command-App Run window, and click OK. 3. Click OK when the confirmation pop-up appears. To stop the selected application on a device, follow the steps below: 1. Click Stop in App Management group. For Android, Internal/Kiosk apps can be stopped. For Knox container, Internal apps can be stopped. 2. Select an application to stop in - App Stop window, and click OK. 3. Click OK when the confirmation pop-up appears. To delete data of the selected application on a device, 1. Click Delete Date in App Management group. For Android, Internal/Kiosk app data can be deleted. For Knox container, Internal app data can be deleted. 2. Select an application in the - App Delete Data window, and click OK. 3. Click OK when the confirmation pop-up appears. 331

4 Uninstall Enable/Disable app running To delete the selected application on from a device, follow the steps below: 1. Click Uninstall in App Management group. For Android, Internal/Kiosk apps can be uninstalled. For Knox container, Internal apps can be uninstalled. For ios, Internal/Public apps can be uninstalled. 2. Select an application in the - App Uninstall window, and click OK. 3. Click OK to the confirmation pop-up. To enable or disable selected application from running, 1. Click Enable/Disable app running in App Management group. This feature is supported only for Android devices. Internal/Kiosk apps can be configured. 2. Choose whether to enable or disable app running in the device command window. Allow: The selected application is allowed to be run on a device. Disallow: The selected application is not allowed to run on a device. 3. Choose an application and click OK. 4. Click OK when the confirmation pop-up appears. 332

5 Device Management Lock/Unlock device Reset device password Factory reset +SD Card initialization Factory reset(only) Turn off device Reboot device Reset SD card Update E-FOTA Firmware Version Initialization blocked information Set whether to lock a device. Select whether to lock or unlock the device. [ios] You cannot lock the ios device, but you can block some of the features to enhance security using the lock device command. [Windows] You can only lock the devices. [Android, ios] Initialize password for device lock. Reset all data in the device and external SD card. Reset a user device but not the SD card. Turn off the device. Reboot the device. Initialize the external SD card of the device. Perform wireless update of firmware via E-FOTA service. The user can decide whether to update the device. [ios+supervised] Initialize the block settings on the device. EMM Deactivate service Sync app auto-removal property when service is deactivated Send message Deactivate EMM service on the device. [ios] If you change the value of Delete app during Unenrollment process in the server configuration, send the device command to sync the app auto-delete property when it is deactivated for managed apps. Send an emergency message to the device. The message icon is shown on the status bar of the device. To send a message, follow the steps below. 1. Click Send message in EMM Management group. 2. Enter the title and content of the message in the Device command window and click OK to send message. 3. Click OK when the completion pop-up appears. 333

6 Lock screen Unlock EMM Client Delete account Collect audit logs Collect logs Collect diagnosis information Update user information Update license Update system app Lock the device screen. The camera cannot be used when the screen is locked. To lock a screen, follow the steps below: 1. Click Lock Screen of EMM Management group. 2. Click OK when the confirmation pop-up appears. To unlock the EMM Client, 1. Click Unlock EMM Client of EMM Management group. 2. In the device command window, select a device command to send, and click OK. Delete EMM account registered in the EMM Client. Collect EMM audit logs of the device. When the log size exceeds the maximum size, logs are automatically sent to the server, but the log file may be lost. For more detailed information, see "Audit events in chapter 4" on page 45. To collect a log from the device, 1. Click Collect logs of EMM Management. 2. In the device command window, select either Client or Agent, and click OK. 3. Click OK in the completion pop-up. [Android, ios] To collect a device log to diagnose the cause of device lock, 1. Click Collect diagnosis information of EMM Management group. 2. In the "Device control - Collect diagnosis information" window, click OK. 3. Click OK when the confirmation pop-up appears. Update the device user information. Save changes of the user activation status/username/user settings (Secure Browser homepage URL information, Bookmark information), license information and security camera permission status. Update and re-enroll the Knox Manage license for controlling Samsung Galaxy devices. Update EMM on user device for a new patch or upgrade. The agent information registered in the Knox Manage server is sent to a device, which automatically selects the appropriate agent to request installation files from the server. 334

7 Device confirmation H/W Status Installed apps list Collect device/app information Location SIM authentication Update the device inventory. After sending the device command, check the status of H/W as follows: 1. Go to Devices &Users > Devices, and click the mobile ID of the device. 2. In the Device Detailed Information window, go to Details to check information. Update the information of installed applications. For ios devices, select whether to delete application feedback, and send device command. To check the list of installed applications after sending device command, follow the steps below: 1. Go to Devices & Users > Devices, and then click the mobile ID of the device. 2. Click Application tab in the Device Detailed Information window, and check the list of installed applications. Collect application and inventory information from the device. To check after sending device control, follow the steps below: 1. Go to Devices & Users > Devices, and click Mobile ID of the device. 2. Check the basic information and the app tabs in the Device Details window. Show the current location of the device. To check the location of a device after sending the device command, 1. Go to Devices & Users > Devices, and click the mobile ID of the device. 2. Go to Details section in the Device Detailed Information window, and check Location. Authenticate the device SIM. 335

8 Authorize SD card Status report Perform the authentication process of the external SD card on the device. [ios] Check the service connection status of device. To check the status of device after sending the device command, follow the steps below: 1. Go to Devices & Users > Devices, and click the mobile ID of the device. 2. In the Device Detailed Information window, go to Security section and check KeepAlive. : The device is connected to the EMM server. : The device is disconnected to the EMM server. : KeepAlive is not configured. Container management Device command Lock/Unlock container Reset container password Uninstall container [Knox] Lock the Knox container. User cannot access the Knox container unless the administrator sends the unlock container device command. [Knox] Reset the Knox container password. Enter the current password first, and then enter new password to change. [Knox] Uninstall the selected Knox container. Inventory information is updated on the server upon container deletion. Custom control Device command Select [Windows] Select and send CSP registered in EMM to a device. The CSP list appears when you click Select. Select a CSP from the list and click Process. Register and manage CSP in Settings > Windows10 > CSP Configuration on the TMS Admin Portal. 336