You can view all the real-time updates of your end-user devices that you are managing with VMware AirWatch MEM. Access the List View from Email > List View. You can view the device or user-specific information by switching between the two tabs: Device and User. You can change the Layout to either view the summary or the detailed list of the information based on your requirement.

Device and User Details

The List View screen provides detailed information on device and device users.

List View Screen Fields Description
Last Request Displays the last state change of the device either from Workspace ONE UEM or from Exchange.
User The user account name.
Friendly Name The friendly name of the device.
MEM Config The configured MEM deployment that is managing the device.
Email Address The email address of the user account.
Identifier The unique alpha-numeric identification code associated with the device.
Mail Client The email client syncing the emails on the device.
Last Command The last command sent to email server to manage the device. It populates the Last Request column.
Status The real-time status of the device and whether email is blocked or allowed on it as per the defined policy.
Reason The reason code for allowing or blocking email on a device. The reason code displays 'Global' and 'Individual' only when an entity other than AirWatch (for example, an external administrator) changes the access state of the email.
Platform, Model, OS, IMEI, EAS Device Type, IP Address The device information displays in these columns.
Mailbox Identity The location of the user mailbox in the Active Directory.

Filters for Quick Search

Using the Filter option, you can narrow-down your device search based on the following parameters.

Device Search Parameter Description
Last Seen All, less than 24 hours, 12 hours, 6 hours, 2 hours.
Managed All, Managed, Unmanaged.
Allowed All, Allowed, Blocked.
Policy Override All, Blacklisted, Whitelisted, Default.
Policy Violation Compromised, Device Inactive, Not data Protected/Enrolled/MDM Compliant, Unapproved EAS Device Type/Email Account/Mail Client/Model/OS.
MEM Config Filter devices based on the configured MEM deployments.

 

Additional Actions

The Override, Actions, and Administration drop-down menu provides a single location to perform multiple actions on a device.

Override

Option Description
Whitelist Allows a device to receive emails.
Blacklist Blocks a device from receiving emails.
Default Allows or blocks a device based on whether the device is compliant or non compliant.

Actions

Option Description
Sync mailboxes
  • Syncs the mobile device records from the Exchange with the managed mail clients on enrolled devices.
  • The Sync Mailboxes Confirmation page allows you to sync quickly the devices from a set of mailboxes without having to edit your MEM configuration’s existing filter.
  • You can restrict the sync action at a user, organizational unit, group, or custom level by selecting the options; User, Organizational Unit, Group, or Custom.
  • If you have set a persistent filter in your MEM configuration, you can select the Use pre-configured settings check box.
  • Workspace ONE UEM offers the Email Sync option within the Self Service Portal so that end users can sync their devices with the mail server and also run preconfigured compliance policies for all their devices. This process is typically much faster than the bulk sync performed on all the devices.
Run Compliance Triggers the compliance engine to run for the selected MEM configuration.
Note:

When the Direct PowerShell Model is configured, Workspace ONE UEM communicates directly to the CAS array through remote signed PowerShell sessions established from the console server or VMware Enterprise Systems Connector (depending on the deployment architecture). Using remote signed sessions, commands are sent to blacklist (block) and whitelist (allow) device IDs on a given user's CAS mailbox in Exchange 2010, 2013, 2016, and Office 365. Blacklisting and whitelisting are based on the device’s compliance status in AirWatch.

The ‘DefaultAccessLevel’ on the Exchange server does not change on running compliance. This setting applies only to known devices and overrides the access controls defined by ‘DefaultAccessLevel’. If ‘DefaultAccessLevel’ is set to allow, then new unmanaged devices can access email. Devices can be manually blocked through the UEM console. It is a best practice to test the expected PowerShell integration behavior without enforcing device blocking across the enterprise.

Administration

Option Description
Enrollment Email Sends an email to the user with all the details required for enrollment.
Delete Unmanaged Devices Deletes the selected unmanaged device records from the dashboard. Note, this record might reappear after the next sync.
Remote Wipe Resets the device to factory settings.
Sync Selected Mailbox Syncs the selected device mailbox. Only one device mailbox at a time can be synced.
Note:

These additional actions once performed cannot be undone.