View a detailed description of each action that can be run on a device, remotely from the console.

  • Add Tag – Assign a customizable tag to a device, which can be used to identify a special device in your fleet.
  • AirWatch Agent (Query) – Send a query command to the device's AirWatch Agent to ensure it has been installed and is functioning normally.
  • App Remote View – Take a series of screenshots of an installed application and send them to the Remote View screen in the UEM console. You may choose the number of screenshots and the length of the gap, in seconds, between the screenshots.

    VMware Content Locker must be installed on the device to execute App Remote View.

  • Apps (Query) – Send an MDM query command to the device to return a list of installed apps.
  • Books (Query) – Send a query command to the device to return a list of installed books.
  • Certificates (Query) – Send an MDM query command to the device to return a list of installed certificates.
  • Change Device Passcode – Replace any existing device passcode used to access the selected device with a new passcode.
  • Change Organization Group – Change the device's home organization group to another pre-existing OG. Includes an option to select a static or dynamic OG.
  • Change Ownership – Change the Ownership setting for a device, where applicable. Choices include Corporate-Dedicated, Corporate-Shared, Employee Owned and Undefined.
  • Clear Activation Lock – Clear the Activation Lock on an iOS device. With the Activation Lock enabled, the user requires an Apple ID and password prior to taking the following actions: disabling Find My iPhone, factory wipe, and reactivate to use the device.
  • Clear Passcode (Container) – Clear the container-specific passcode. To be used in situations where the user has forgotten their device's container passcode.
  • Clear Passcode (Device) – Clear the device passcode. To be used in situations where the user has forgotten their device's passcode.
  • Clear Passcode (Restrictions Setting) – Clear the passcode that restricts device features such as app installation, Safari use, camera use and more.
  • Delete Device – Delete and unenroll a device from the UEM console. This action performs an Enterprise Wipe and remove its representation in the UEM console.
  • Device Information (Query) – Send an MDM query command to the device to return basic information on the device such as friendly name, platform, model, organization group, operating system version and ownership status.
  • Device Wipe – Send an MDM command to wipe a device clear of all data and operating system. This puts the device in a state where recovery partition will be needed to reinstall the OS. This action cannot be undone.
    • For iOS 11 and below devices, the device wipe command would also wipe the Apple SIM data associated with the devices.
    • For iOS 11+ devices, you have the option to preserve the Apple SIM data plan (if existed on the devices). To do this, select the Preserve Data Plan checkbox on the Device Wipe page before sending the device wipe command.
    • For iOS 11.3+ devices, you have an additional option to enable or disable to skip the Proximity Setup screen while sending down the device wipe command. When the option is enabled, the Proximity Setup screen will be skipped in the Setup Assistant and thus preventing the device user from seeing the Proximity Setup option.
  • Edit Device – Edit device information such as Friendly Name, Asset Number, Device Ownership, Device Group and Device Category.
  • Enable/Disable Lost Mode – Use this to lock a device and send a message, phone number or text to the lock screen. Lost Mode cannot be disabled by the user. When Lost Mode is disabled by an administrator, the device returns to normal functionality. Users are sent a message that tells them that the location of the device was shared. (iOS 9.3 + Supervised)
    • Request Device Location – Query a device when in Lost Mode and then use the Location tab to find the device. (iOS 9.3 + Supervised)
  • Enroll – Send a message to the device user to enroll their device. You may optionally use a message template that may include enrollment information such as step-by-step instructions and helpful links. This action is only available on unenrolled devices.
  • Enterprise Reset – Enterprise Reset a device to factory settings, keeping only the Workspace ONE UEM enrollment.
  • Enterprise Wipe – Enterprise Wipe a device to unenroll and remove all managed enterprise resources including applications and profiles. This action cannot be undone and re-enrollment will be required for Workspace ONE UEM to manage this device again. Includes options to prevent future re-enrollment and a Note Description field for you to add any noteworthy details about the action.
    • Enterprise Wipe is not supported for cloud domain-joined devices.
  • File Manager – Launch a File Manager within the UEM console that enables you to remotely view a device's content, add folders, conduct searches and upload files.
  • Find Device – Send a text message to the applicable Workspace ONE UEM application together with an audible sound (with options to repeat the sound a configurable number of times and the length of the gap, in seconds, between sounds). This audible sound should help the user locate a misplaced device.
  • iOS Update – Push an operating system update to one or more iOS devices. Applicable only to supervised, DEP-enrolled devices with iOS version 9 or greater. For details, see Detect and Schedule OS Updates.
  • Location – Reveal a device's location by showing it on a map using its GPS capability enabled via the macOS AirWatch Agent. Also requires user approval to enable the functionality in macOS System Preferences.
  • Lock Device – Send an MDM command to lock a selected device, rendering it unusable until it is unlocked.
  • Lock SSO – Lock the device user out of Workspace ONE UEM Container and all participating apps.
  • Managed Settings – Enable or disable voice roaming, data roaming, and personal hotspots.
  • Mark Do Not Disturb – Mark the device not to be disturbed, preventing it from receiving messages, emails, profiles, and any other type of incoming interaction. Only those devices that are actively Marked Do Not Disturb have the action Clear Do Not Disturb available, which removes the restrictions.

  • Override Job Log Level – Override the currently-specified level of job event logging on the selected device. This action sets the logging verbosity of Jobs pushed through Product Provisioning and overrides the current log level configured in Android Agent Settings. Job Log Level Override can be cleared by selecting the drop-down menu item Reset to Default on the action screen, or by changing the Job Log Level under the Product Provisioning category in Android Agent Settings.
  • Profiles (Query) – Send an MDM query command to the device to return a list of installed device profiles.
  • Provision Now – Provision products to a device. Provisioning is the ability to create an ordered installation of files, actions, profiles and applications into a single product that can be pushed to devices.
  • Query All – Send a query command to the device to return a list of installed apps (including AirWatch Agent, where applicable), books, certificates, device information, profiles and security measures.
  • Reboot Device – Reboot a device remotely, reproducing the effect of powering it off and on again.
  • Registry Manager – Launch a Registry Manager within the UEM console that enables you to remotely view a device's OS registry, add keys, conduct searches and add properties.
  • Remote Control – Take control of a supported device remotely using this action, which launches a console application that enables you to perform support and troubleshooting on the device. This action requires Remote Control Service to be installed on the device.
  • Remote Management – Take control of a supported device remotely using this action, which launches a console application that enables you to perform support and troubleshoot on the device. This action requires Remote Control Service to be installed on the device.
  • Remote View – Enable an active stream of the device's output to a destination of your choosing (including IP address, port, audio port, password and scan time), allowing you to see what the user sees as they operate the device.
  • Rename Device – Change the device friendly name within the UEM console.
  • Request Device Log – Request the debug log on the selected device, after which you may view the log by selecting the More tab and choosing Attachments > Documents. The log is delivered as a text file that can be used to troubleshoot and provide support. The device logs allow you to retrieve detailed logs from corporate-owned devices and view them in the console in order to quickly resolve any issues on the device.
  • Request Device Check-In – Request that the selected device check itself in to the UEM console. This action updates the Last Seen column status.
  • Restart AirWatch Agent – Restart the AirWatch Agent. To be used during troubleshooting for when the enrollment process or submodule installation process is interrupted.
  • Security (Query) – Send an MDM query command to the device to return the list of active security measures (device manager, encryption, passcode, certificates, etc.).
  • Send Message – Send a message to the user of the selected device. Choose between Email, Push Notification (through AirWatch Cloud Messaging), and SMS.
  • Start AirPlay – Stream audiovisual content from the device to an AirPlay mirror destination. The MAC address (format "xx:xx:xx:xx:xx:xx" with no case-sensitive) of the destination is required. A passcode can also be specified if required. Scan Time defines the number of seconds (10-300) to spend searching for the destination. Requires macOS 10.10 or greater.
  • Start/Stop AWCM – Start/Stop the Cloud Messaging service for the selected device. VMware AirWatch Cloud Messaging (AWCM) streamlines the delivery of messages and commands from the Admin Console by eliminating the need for end users to access the public Internet or utilize consumer accounts, such as Google IDs.
  • Sync Device – Synchronize the selected device with the UEM console, aligning its Last Seen status.
  • Task Manager – Launch a Task Manager within the UEM console that enables you to remotely view a device's currently-running tasks, including task Name, Process ID and applicable Actions you may take.
  • View Manifest – View the device's Package Manifest in XML format from the UEM console. The manifest on Windows Rugged devices lists metadata for widgets and apps.
  • Warm Boot – Initiate a restart of the operating system without performing a power-on self-test (POST).