Device Actions

View a detailed description of each action that can be run on a device, remotely from the Workspace ONE UEM console. This list is platform agnostic.

Navigate to Devices > List View, select one or more devices by selecting the check box to the left of each device. Then select the More Actions button to see which actions you can perform on your selected device or devices. For more information, see Bulk Actions in Device List View.

  • Add Tag – Assign a customizable tag to a device, which can be used to identify a special device in your fleet.

  • Apps (Query) – Send an MDM query command to the device to return a list of installed applications.

  • Baselines (Query) – Send an MDM query command to the device to return a list of samples.

  • Books (Query) – Send a query command to the device to return a list of installed books.

  • Certificates (Query) – Send an MDM query command to the device to return a list of installed certificates.

  • Change Device Passcode – Replace any existing device passcode used to access the selected device with a new passcode. The new passcode is displayed on the Change Passcode screen.

    • Take note of the passcode before clicking the Change Passcode button.
    • Select the Change Passcode button to proceed.
    • You can close the window or select Cancel and check back later, meaning: if you are unable to notate the passcode or relay the passcode to the end user, you can re-initiate a Change Device Passcode action at a later time.

  • Change Organization Group – Change the device's home organization group to another existing OG. Includes an option to select a static or dynamic OG.

    • Multiple Devices Note: If you want to change the OG for multiple devices at a time, you must select devices for the bulk action using the Block selection method (using the shift-key) instead of the Global check box (next to the Last Seen column heading in the device list view). For more information, see Selecting a Block Devices

  • Change Ownership – Change the Ownership setting for a device, where applicable. Choices include Corporate-Dedicated, Corporate-Shared, Employee Owned and Undefined.

  • Clear Activation Lock – Clear the Activation Lock on an iOS device. With the Activation Lock enabled, the user requires an Apple ID and password before taking the following actions: deactivate Find My iPhone, factory wipe, and reactivate to use the device.

  • Clear Passcode (Device) – Clear the device passcode. To be used in situations where the user has forgotten their device's passcode.

  • Clear Passcode (Restrictions Setting) – Clear the passcode command clears the login passcode on the device. The device needs to be supervised.

  • Delete Device – Delete and unenroll a device from the console. Sends the enterprise wipe command to the device that gets wiped on the next check-in and marks the device as Delete In Progress on the console. If the wipe protection is turned off on the device, the issued command immediately performs an enterprise wipe and removes the device representation in the console.

  • Device Information (Query) – Send an MDM query command to the device to return information on the device such as friendly name, platform, model, organization group, operating system version, and ownership status.

  • Device Wipe – Send an MDM command to wipe a device clear of all data and operating system. This action cannot be undone.

    • iOS Device Wipe Considerations
      • For iOS 11 and below devices, the device wipe command also wipes the Apple SIM data associated with the devices.
      • For iOS 11+ devices, you can preserve the Apple SIM data plan (if existed on the devices). Select the Preserve Data Plan check box on the Device Wipe page before sending the device wipe command.
      • For iOS 11.3+ devices, you have an extra option to skip the Proximity Setup screen while sending down the device wipe command. When the option is enabled, the Proximity Setup screen is skipped in the Setup Assistant, preventing the device user from seeing the Proximity Set up option.
    • For Windows Desktop Devices, you can select the type of device wipe.
      • Wipe - This option wipes the device of all content.
      • Wipe Protected - This option is similar a normal device wipe but the device end user cannot circumvent the action. The Wipe Protected command keeps trying to reset the device until it is successful. In some device configurations, this command can leave the device unable to start.
      • Wipe and Persist Provisioning Data - This option backs up provisioning data to a persistent location (%ProgramData%\Microsoft\Provisioning) before wiping the device. After the wipe runs, the provisioning data is restored and applied to the device. Additionally, an unattend.xml and provisioning package (PPKG) stored in the C:\Recovery\AutoApply and C:\Recovery\Customization folders respectively configures the device rebuild and installs the applications within the PPKG.

  • Edit Device – Edit device information such as Friendly Name, Asset Number, Device Ownership, Device Group Device Category.

  • Enable/Deactivate Lost Mode – Use this device action to lock a device and send a message, phone number, or text to the lock screen. The device end user cannot deactivate Lost Mode. When an admin deactivates Lost Mode, the device returns to normal functionality. Users receive a message that tells them that the location of the device was shared. (iOS 9.3 + Supervised)

    • Request Device Location – Query a device when in Lost Mode and then use the Location tab to find the device. (iOS 9.3 + Supervised)

  • Enroll – Send a message to the device user to enroll their device. You can optionally use a message template that can include enrollment information such as step-by-step instructions and helpful links. This action is only available on unenrolled devices.

  • Enterprise Reset – Enterprise Reset a device to factory settings, keeping only the Workspace ONE UEM enrollment.

    • Windows Desktop Only: Enterprise Reset restores a device to a Ready to Work state when a device is corrupted or has malfunctioning applications. It reinstalls the Windows OS while preserving user data, user accounts, and managed applications. The device will resync auto-deployed enterprise settings, policies, and applications after resync while remaining managed by Workspace ONE.

  • Enterprise Wipe – Enterprise Wipe a device to unenroll and remove all managed enterprise resources including applications and profiles. This action cannot be undone and re-enrollment is required before Workspace ONE UEM can manage this device again. This device action includes options to prevent future re-enrollment and a Note Description text box for you to add information about the action.

    • Enterprise Wipe is not supported for cloud domain-joined devices.
    • If you want to Enterprise Wipe multiple devices at once, you must select devices for the bulk action using the Block selection method (using the shift-key) instead of the Global check box (next to the Last Seen column heading in the device list view).

  • File Manager – Start a File Manager within the UEM console that enables you to view remotely a device's content, add folders, conduct searches, and upload files.

  • Find Device – Send a text message to the applicable Workspace ONE UEM application together with an audible sound designed to help the user locate a misplaced device. The audible sound options include playing the sound a configurable number of times and the length of the gap, in seconds, between sounds.

  • Force BIOS Password Reset – Force the device to reset the BIOS password to a new auto-generated password.

  • Workspace ONE Intelligent Hub Query – Send a query command to the Workspace ONE Intelligent Hub on the device to ensure it has been installed and is functioning normally.

  • iOS Update – Push an operating system update to one or more iOS devices. Applicable only to supervised, DEP-enrolled devices with iOS version 9 or greater.

  • Location – Reveal a device's location by showing it on a map using its GPS capability enabled on the macOS Workspace ONE Intelligent Hub. This device action requires user approval to enable the functionality in macOS System Preferences.

    • Multiple Devices Note: If you want to display the location for multiple devices at a time, you must select devices for the bulk action using the Block selection method (using the shift-key) instead of the Global check box (next to the Last Seen column heading in the device list view). For more information, see Selecting a Block Devices

  • Lock Device – Send an MDM command to lock a selected device, rendering it unusable until it is unlocked.

  • Lock SSO – Lock the device user out of all participating applications.

  • Managed Settings – Enable or deactivate voice roaming, data roaming, and personal hotspots.

  • Manage Tags – View the currently assigned device tags and see a list of tags available to be assigned with the Manage Tags screen.

    • If you want to Manage Tags for multiple devices at a time, you must select devices for the bulk action using the Block selection method (using the shift-key) instead of the Global check box (next to the Last Seen column heading in the device list view).

  • Mark Do Not Disturb – Mark the device not to be disturbed, preventing it from receiving messages, emails, profiles, and any other type of incoming interaction. Only those devices that are actively Marked Do Not Disturb have the action Clear Do Not Disturb available, which removes the restrictions.

  • Override Job Log Level – Override the currently specified level of job event logging on the selected device. This action sets the logging verbosity of Jobs pushed through Product Provisioning and overrides the current log level configured in Android Hub Settings. Job Log Level Override can be cleared by selecting the drop-down menu item Reset to Default on the action screen. You can also change the Job Log Level under the Product Provisioning category in Android Hub Settings.

  • Profiles (Query) – Send an MDM query command to the device to return a list of installed device profiles.

  • Provision Now – Provision products to a device. Provisioning is the ability to create an ordered installation of files, actions, profiles, and applications into a single product that can be pushed to devices.

  • Query All – Send a query command to the device to return a list of installed applications (including Workspace ONE Intelligent Hub, where applicable), books, certificates, device information, profiles, and security measures.

  • Reboot Device – Reboot a device remotely, reproducing the effect of powering it off and on again.

    • Multiple Devices Note: If you want to reboot multiple devices at a time, you must select devices for the bulk action using the Block selection method (using the shift-key) instead of the Global check box (next to the Last Seen column heading in the device list view). For more information, see Selecting a Block Devices

  • Registry Manager – Start a Registry Manager within the UEM console that enables you to view remotely a device's OS registry, add keys, conduct searches and add properties.

  • Remote Assist – Take control of a supported device remotely using this action, which offers platform-specific tools that allow you to perform support and troubleshooting on the device. Android devices require Remote Control Service to be installed on the device.

  • Remote Management – Take control of a supported device remotely using this action, which starts a console application that enables you to perform support and troubleshoot on the device. Android devices require Remote Control Service to be installed on the device.

  • Remote View – Enable an active stream of the device's output to a destination of your choice, allowing you to see what the user sees as they operate the device. The destination parameters include IP address, port, audio port, password, and scan time.

  • Rename Device – Change the device's Friendly Name within the UEM console.

  • Request Device Log – Request the debug log for the selected device, after which you can view the log by selecting the More tab and selecting Attachments > Documents. You cannot view the log within the Workspace ONE UEM console. The log is delivered as a ZIP file that can be used to troubleshoot and provide support.

    When you request a log, you can select to receive the logs from the System or the Hub. System provides system-level logs. Hub provides logs from the multiple agents running on the device.

    Android Only: you can retrieve detailed logs from corporate-owned Android devices and view them in the console to resolve issues on the device quickly.

  • Request Device Check-In – Request that the selected device check itself in to the UEM console. This action updates the Last Seen column status.

  • Restart Workspace ONE Intelligent Hub – Restart the Workspace ONE Intelligent Hub. This option is used during troubleshooting for when the enrollment process or submodule installation process is interrupted.

  • Security (Query) – Send an MDM query command to the device to return the list of active security measures (device manager, encryption, passcode, certificates, and so on).

  • Send Message – Send a message to the user of the selected device. Select between Email, Push Notification (through AirWatch Cloud Messaging), and SMS. Push notification requires Workspace ONE applications like Hub, Boxer etc which must have been launched at least once.

  • Start AirPlay – Stream audiovisual content from the device to an AirPlay mirror destination. The MAC address (format "xx:xx:xx:xx:xx:xx" with no case-sensitive) of the destination is required. A passcode can also be specified if necessary. Scan Time defines the number of seconds (10-300) to spend searching for the destination. Requires macOS 10.10 or greater.

  • Start/Stop AWCM – Start/Stop the Cloud Messaging service for the selected device. VMware AirWatch Cloud Messaging (AWCM) streamlines the delivery of messages and commands from the Admin Console. The AWCM eliminates the need for end users to access the public Internet or use consumer accounts such as Google IDs.

  • Sync Device – Synchronize the selected device with the UEM console, aligning its Last Seen status.

  • Task Manager – Run a Task Manager within the UEM console that enables you to view remotely a device's currently running tasks, including task Name, Process ID, and applicable Actions you can take.

  • View BIOS Password – View the BIOS password for the device that was auto-generated by the Workspace ONE UEM console. You see the Last Password Appliedand the Last Password Submitted.

  • View Manifest – View the device's Package Manifest in XML format from the UEM console. The manifest on Windows Rugged devices lists metadata for widgets and applications.

  • Warm Boot – Initiate a restart of the operating system without performing a power-on self-test (POST).

check-circle-line exclamation-circle-line close-line
Scroll to top icon