After your devices are enrolled and configured, manage the devices using the Workspace ONE ™ UEM console. The management tools and functions enable you to keep an eye on your devices and remotely perform administrative functions.

You can manage all your devices from the UEM console. The Dashboard is a searchable, customizable view that you can use to filter and find specific devices. This feature makes it easier to perform administrative functions on a particular set of devices. The Device List View displays all the devices currently enrolled in your Workspace ONE UEM environment and their status. The Device Details page provides device-specific information such as profiles, apps, Workspace ONE Intelligent Hub version and which version of any applicable OEM service currently installed on the device. You can also perform remote actions on the device from the Device Details page that are platform-specific.

Chrome OS Device Dashboard

The Device Dashboard provides a high-level view of your entire fleet and allows you to act on individual devices quickly.

You can view graphical representations of relevant device information for your fleet, such as device ownership type, compliance statistics, and platform and OS breakdowns. You can access each set of devices in the presented categories by selecting any of the available data views from the Device Dashboard.

From the List View, you can take administrative action: send messages, lock devices, delete devices, and change groups associated with the device.

  • Security – View the top causes of security issues in your device fleet. Selecting any of the doughnut charts displays a filtered Device List view comprised of devices affected by the selected security issue. If supported by the platform, you can configure a compliance policy to act on these devices.
    • Compromised – The number and percentage of compromised devices (jailbroken or rooted) in your deployment.
    • No Passcode – The number and percentage of devices without a passcode configured for security.
    • Not Encrypted – The number and percentage of devices that are not encrypted for security. This reported figure excludes Android SD Card encryption. Only those Android devices lacking disc encryption are reported in the donut graph.
    Ownership – View the total number of devices in each ownership category. Selecting any of the bar graph segments displays a filtered Device List view comprised of devices affected by the selected ownership type.
  • Last Seen Overview/Breakdown – View the number and percentage of devices that have recently communicated with the Workspace ONE UEM MDM server. For example, if several devices have not been seen in over 30 days, select the corresponding bar graph to display only those devices. You can then select all these filtered devices and send out a query command so that the devices can check in.
  • Platforms – View the total number of devices in each device platform category. Selecting any of the graphs displays a filtered Device List view comprised of devices under the selected platform.
  • Enrollment – View the total number of devices in each enrollment category. Selecting any of the graphs displays a filtered Device List view comprised of devices with the selected enrollment status.
  • Operating System Breakdown – View devices in your fleet based on operating system. There are separate charts for each supported OS. Selecting any of the graphs displays a filtered Device List view comprised of devices running the selected OS version.

Device Management Commands

The More drop down on the Device Details page enables you to perform remote actions over-the-air to the selected device. The actions listed vary depending on factors such as device platform, Workspace ONE UEM console settings, and enrollment status.

Enterprise Wipe – Enterprise Wipe deprovisions selected Chrome OS devices from management in the Workspace ONE UEM console. Devices will continue to show as managed to the end user, but the UEM console shows the device as unenrolled in the Device Details page. All device policies are removed and policy updates are not sent to devices after the enterprise wipe. User Policies will remain intact on the device, as these are not dependent on device enrollment. In order to completely wipe device or to reenroll the device, a powerwash (full device wipe) is required.
  • Before the enterprise wipe processes, choose what happens with the Chrome OS license assigned to the device. Select Different Replacement Model, Retiring Device, or Same Model Replacement. The reason is stored in the UEM console Event Log. For annual licences, you can simply reassign to another device. For perpetual licences:
    • Replacement devices will need to be purchased with a perpetural license upgrade.
    • The licence can be transferred to a different device with the same model.
    • If the device is being retired, any new devices purchased will need to be purchased with a Chrome Enterprise license ugprade.
  • Enable Lost Mode – Allows you to remotely disable devices that have been lost or stolen. When enabled, you can set a custom message to display on the lock screen through the Chrome OS device profile. While disabled, the device cannot be used for any purpose. Devices can then be re-enabled remotely once they are found.
  • Reboot Device – Reboot a device remotely, reproducing the effect of powering it off and on again. Only supported on devices in Kiosk mode.