Use the Device Details page to track detailed device information and quickly access user and device management actions. You can access the Device Details page by either selecting a device's Friendly Name from the List View page, from one of the available Dashboards or by using any of the available search tools with the UEM console.

View Device Information

Use the Device Details menu tabs to access specific device information, including:

  • Summary – View general statistics on: compliance, enrollment status, last seen, platform, model, or OS, management, supervision, Activation Lock, Find My iPhone, iCloud Backup (use the mouse to hover over iCloud Backup status to see Last Backup status), data protection, encryption, contact information, groups, serial number, UDID, asset number, power status, storage capacity, any available OS updates (iOS 9), physical memory and virtual memory, and warranty information. If Apple's Global Service Exchange information is accessible, select the warranty link to see when the status was last updated. Then, use the Refresh button to get the latest information.
    • An enterprise or factory wipe queries an Activation Lock bypass code and then go into wipe pending mode on supervised devices.
    • If the Find my iPhone Activation Lock option is enabled for iOS 7+ devices, then a warning will appear when performing a device wipe command on an unsupervised device, notifying you that a device with Activation Lock enabled cannot be reactivated without the original Apple ID and password. This is true even if you perform a full device wipe.

      For more information, see Activation Lock Overview.
  • Compliance – Display the status, policy name, date of the previous and forthcoming compliance check and the actions already taken on the device.
  • Profiles – View all MDM profiles currently installed on a device.
  • Apps – View the app status, app name, type of the app (whether public or internal), app version and identifier, and the size of the app. For iOS 11. 3 + devices, the UEM console displays on available app updates (whether the installed version is the latest version or if an update is available) and app source (whether the app is installed via the App Store, distributed as a Beta app, signed adhoc by an enterprise account, or managed using a device based VPP license).
  • Content – View the status, type, name, priority, deployment, last update, and date and time of views, and provides a toolbar for administrative action (install or delete content).
  • Location – View current location or location history of a device.
  • User – Access details about the user of a device as well as the status of the other devices enrolled to this user.

The menu tabs below are accessed by selecting More from the main Device Details tab ( MDM_DeviceDetails_More).

  • Network – View current network (Cellular, Wi-Fi, Bluetooth) status of a device.
  • Security – View current security status of a device based on security settings.
  • Restrictions – View the types of restrictions that currently apply to the device.
  • Telecom – View all amounts of calls, data and messages sent and received involving the device.
  • Notes – View and add notes regarding the device. For example, note the shipping status or if the device is in repair and out of commission.
  • Certificates – Identify device certificates by name and issuant. This tab also provides information about certificate expiration.
  • Terms of Use – View a list of End User License Agreements (EULAs) which have been accepted during device enrollment.
  • Alerts – View all alerts associated with the device.
  • Books – View all internal books on the device.
  • Shared Device Log – View the history of the shared device including past check-ins and check-outs and status.
  • Restrictions – View all restrictions currently applied to a device. This tab also shows specific restrictions by Device, Apps, Ratings, and Passcode.
  • Status History – View history of device in relation to enrollment status.
  • Targeted Logging – View the logs for the Console, Catalog, Device Services, Device Management, and Self Service Portal. You must enable Targeted Logging in settings and a link is provided for this purpose. You must then select the Create New Log button and select a length of time the log is collected.
  • Troubleshooting – View Event Log and Commands logging information. This page features export and search functions, enabling you to perform targets searches and analysis.
    • Event Log – View detailed debug information and server check-ins, including a Filter by Event Group Type, Date Range, Severity, Module, and Category.

      In the Event Log listing, the Event Data column may display hypertext links that open a separate screen with even more detail surrounding the specific event. This information enables you to perform advanced troubleshooting such as determining why a profile fails to install.

    • Commands – View detailed listing of pending, queued, and completed commands sent to the device. Includes a Filter enabling you to filter commands by Category, Status, and specific Command.
  • Attachments – Use this storage space on the server for screenshots, documents, and links for troubleshooting and other purposes without taking up space on the device itself.
  • Compromised Detection – View details about the compromised status of the device including the specific Reason for the status and how Severe the status is.

Perform Remote Actions

The More Actions drop-down on the Device Details page enables you to perform remote actions over-the-air to the selected device. See below for detailed information about each remote action. The actions listed below will vary depending on factors such as device platform, UEM console settings, and enrollment status.

  • Query All – Send a query command to the device to return a list of installed apps (including AirWatch Agent, where applicable), books, certificates, device information, profiles and security measures.
  • Device Information (Query) – Send an MDM query command to the device to return basic information on the device such as friendly name, platform, model, organization group, operating system version and ownership status.
  • Security (Query) – Send an MDM query command to the device to return the list of active security measures (device manager, encryption, passcode, certificates, etc.).
  • Profiles (Query) – Send an MDM query command to the device to return a list of installed device profiles.
  • Apps (Query) – Send an MDM query command to the device to return a list of installed apps.
  • Certificates (Query) – Send an MDM query command to the device to return a list of installed certificates.
  • Clear Passcode (Restrictions Setting) – Clear the passcode that restricts device features such as app installation, Safari use, camera use and more.
  • User Lists (Query) - Send a query command to the device to return a list of users who have logged into the device (for shared devices only).
  • Lock Device – Send an MDM command to lock a selected device, rendering it unusable until it is unlocked.
  • Lock SSO – Lock the device user out of Workspace ONE UEM Container and all participating apps.
  • Enterprise Wipe – Enterprise Wipe a device to unenroll and remove all managed enterprise resources including applications and profiles. This action cannot be undone and re-enrollment will be required for Workspace ONE UEM to manage this device again. Includes options to prevent future re-enrollment and a Note Description field for you to add any noteworthy details about the action.
    • Enterprise Wipe is not supported for cloud domain-joined devices.
  • OS updates - Select individual devices or devices in bulk to send updates to devices that are enrolled through DEP.
  • Managed Settings – Enable or disable voice roaming, data roaming, and personal hotspots.
  • Device Wipe – Send an MDM command to wipe a device clear of all data and operating system. This puts the device in a state where recovery partition will be needed to reinstall the OS. This action cannot be undone.
    • For iOS 11 and below devices, the device wipe command would also wipe the Apple SIM data associated with the devices.
    • For iOS 11+ devices, you have the option to preserve the Apple SIM data plan (if existed on the devices). To do this, select the Preserve Data Plan checkbox on the Device Wipe page before sending the device wipe command.
    • For iOS 11.3+ devices, you have an additional option to enable or disable to skip the Proximity Setup screen while sending down the device wipe command. When the option is enabled, the Proximity Setup screen will be skipped in the Setup Assistant and thus preventing the device user from seeing the Proximity Setup option.

For more information about troubleshooting device wipes, related permissions, and when device wipe actions appear in the UEM console, refer to the following Workspace ONE UEM Knowledge Base article https://support.workspaceone.com/articles/115012396488.

  • Schedule iOS Updates – Push an iOS update to a device that is not enrolled through DEP.

    For more information, see Configure iOS Updates.
  • Send Message – Send a message to the user of the selected device. Choose between Email, Push Notification (through AirWatch Cloud Messaging), and SMS.
  • Find Device – Send a text message to the applicable Workspace ONE UEM application together with an audible sound (with options to repeat the sound a configurable number of times and the length of the gap, in seconds, between sounds). This audible sound should help the user locate a misplaced device.
  • App Remote View – Take a series of screenshots of an installed application and send them to the Remote View screen in the UEM console. You may choose the number of screenshots and the length of the gap, in seconds, between the screenshots.

    VMware Content Locker must be installed on the device to execute App Remote View.

  • Request Device Check-In – Request the selected device to check-in itself in to the UEM console and updates the Last Seen column status. This action also resets the device enrollment to the staging user.
  • Sync Device – Synchronize the selected device with the UEM console, aligning its Last Seen status.
  • Remote View – Enable an active stream of the device's output to a destination of your choosing (including IP address, port, audio port, password and scan time), allowing you to see what the user sees as they operate the device.
  • Change Organization Group – Change the device's home organization group to another pre-existing OG. Includes an option to select a static or dynamic OG.
  • Add Tag – Assign a customizable tag to a device, which can be used to identify a special device in your fleet.
  • Edit Device – Edit device information such as Friendly Name, Asset Number, Device Ownership, Device Group and Device Category.
  • Delete Device – Delete and unenroll a device from the UEM console. This action performs an Enterprise Wipe and remove its representation in the UEM console.
  • Clear Activation Lock – Clear the Activation Lock on an iOS device. With the Activation Lock enabled, the user requires an Apple ID and password prior to taking the following actions: disabling Find My iPhone, factory wipe, and reactivate to use the device.
  • Device Configured - Send this command if a device is stuck in an Awaiting Configuration state.
  • Enable/Disable Lost Mode – Use this to lock a device and send a message, phone number or text to the lock screen. Lost Mode cannot be disabled by the user. When Lost Mode is disabled by an administrator, the device returns to normal functionality. Users are sent a message that tells them that the location of the device was shared. (iOS 9.3 + Supervised)
    • Request Device Location – Query a device when in Lost Mode and then use the Location tab to find the device. (iOS 9.3 + Supervised)
  • Log out user - Log out the current user of the device if needed.