Device Functionality

The following is a list of functions and commands specific to device management.

Clear Passcode

The Clear Passcode command will unlock a device until a new passcode is set.

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click the More Actions dropdown.
  4. Choose Clear Passcode.
  5. Click Confirm.

Caution: Clearing the passcode on a device will unlock the device until a new passcode is set.

Caution: On iOS devices, clearing the passcode will disable Touch ID.


Clear Restrictions

The Clear Restrictions function is available for both iOS and Android devices. The command is useful for creating a “blank slate” environment before reprovisioning; for example, after running a trial. From the devices view, an admin only needs to select one or more devices then select the More Actions dropdown and choose Clear Restrictions.


Device History

The Device History function lets an admin keep track of detailed device information across categories like app deployments, device changes and configurations, and device lifecycle events. A chart component is also available to provide a visualization of a device's activity. Device history can be exported for multiple devices to make correlating data easier.

To review device history:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click Device History to open the list, view the chart data, and review details.


Download CSV File

To export the full content of a device list to a CSV file, click the download icon above a list of devices. The CSV file will include all of the public device attributes stored in KACE Cloud MDM, including hardware attributes. The file will not include any child list data, such as applications, certificates, profiles, or restrictions.

To download CSV file:

  1. Select the Devices tab in top navigation.
  2. Filter to pare down device list or select entire list, then click the download icon.


Factory Reset

For both Android and iOS devices, a factory reset removes all user data and restores the selected device back to default factory settings. It can only be applied to a company-owned device.

Warning: When a factory reset is performed on an Android device where the company is the Work Profile, all data is removed, but the device is not restored to factory reset.

To perform a factory reset on either device type:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click the More Actions dropdown and select Factory Reset.
  4. To initiate the factory reset, click Confirm.

Warning: Once confirmed, a factory reset cannot be undone.


Filter Devices

Related Video: Filtering and Sorting

To find and filter by device:

  1. Select the Devices tab in top navigation.
  2. The Filters function is located in the left panel. Click Devices to open the section.
  3. Enter details into one or more filter fields:
    • To filter using inclusive attributes, click the plus icon next to the field.
    • To filter using exclusive attributes, click the minus icon next to the field.

  4. The list of active filter criteria will build at the top of the page.

To cross-filter by Devices then Users:

  1. From the Devices tab, locate device(s) by using one or more filters.
  2. Using the Users filter panel at the left, a device admin can further filter within the list of devices.

Install Agent Version (Android Only)

An admin can install the latest version of the KACE Android Agent app to any Android device by selecting the device and then selecting 'Install Agent App' in the Android dropdown. Once Install Agent App is selected, the most recent version of the app will be retrieved from the Google Play store and deployed to the selected device(s). This function is available for fully managed Android devices and personal Android devices with a work profile.


Internet Content Blocking and Filtering

Internet content blocking and filtering allows an admin to block or allow access to specific websites. Enabling the automatic adult content filter means the standard default Apple filter will be applied.

  1. Select the Libraries tab in top navigation.
  2. Select Restriction Sets.

For a new restriction:

  1. Select iOS from the Add New dropdown.
  2. Name the new restriction set.
  3. Under Internet, check Enable automatic adult content filter.
    • Settings for allowing access and blocking access are also in the list.
  4. Click Update Restriction Set.

For an existing restriction:

  1. Select a Restrictions Set Name.
  2. In the right panel, click Edit.
  3. Under Internet, check Enable automatic adult content filter.
    1. Settings for allowing access and blocking access are also in the list.
  4. Click Update Restriction Set.

Note: iOS uses an algorithm that attempts to identify adult content. This algorithm varies from release to release and may block content that should be accessible. To ensure access to specific sites, add them to the allowed list, which will override an automatic filter block.


Inventory

The inventory command sends a request to a specific device, which results in the device updating the KACE Cloud MDM database. After a successful inventory update, click Refresh to see the latest inventory data.

Note: Each new device enrollment will be immediately inventoried. In addition, KACE Cloud is automatically updated once per day. A manual request to update inventory for a specific device can also be sent, as described below.

To update inventory:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click Inventory.
  4. Click Confirm.

In the Devices section, an admin can filter and sort from multiple panes to update data visualization of inventory.


KACE Cloud Settings

KACE Cloud Settings is a selection of various options that can be controlled by the administrator and applied to all devices. Options include:

  • Enrollment of personal devices on iOS, Android, macOS or Windows.
  • User password settings for reset emails and LDAP defaults.
  • Device inventory of unmanaged apps on corporate or personal devices.

To manage the settings:

  1. Go to Settings in top navigation.
  2. In left navigation, select KACE Cloud Settings.
  3. Click Edit.
  4. Make any changes, then click Save.


Local User Accounts (macOS)

An admin can view the local users currently active on a macOS device. If a local admin user has been created during DEP enrollment, the admin can change the password on this account. The admin can also delete accounts and unlock them if a user is locked out due to an applied passcode profile. For BYOD devices, an admin can unlock and remove local accounts.

Note: Prior to the Big Sur release (10.16, 11.0), this functionality is only available to DEP-managed devices.


Lock

The Lock command will block access to a specific device. The device user will then be prompted to enter their passcode when they next interact with the device.

  1. Select the Devices tab in top navigation.
  2. Select a device user from the list.
  3. In the right panel, click Lock.
  4. Click Confirm.

Auto-Lock Timeout The auto-lock timeout specifies the maximum amount of time that a device may be idle before it will automatically lock. Some device users may prefer a shorter time, but they will not be able to choose a longer time once the restriction is set.

Device Lock Grace Period (iOS only) The device lock grace period is the amount of time that may pass after the device locks but before a passcode is required in order to unlock the device.

Locking and Resetting a Mac To lock and reset a Mac, a 6-digit PIN code must be provided. The code is located in the Device Details section under Security. To trigger the PIN request code field for an enrolled Mac, select the device, then click Lock in the right panel.

See also Activation Lock (iOS).


Maintenance Notifications

Maintenance notifications will appear in the product UI at a 7-day and 1-hour interval leading up to our monthly maintenance and release. Each of the notifications is a one-time alert and can be easily dismissed.


Notifications and Alerts

To view the status of all recently issued commands in KACE Cloud MDM, click the bell icon at the top-right of any admin portal page. Additional details on historical events can be found by selecting a device, then clicking Device History.


Reassign

Reassigning a company-owned device means all applied configurations (e.g., apps, Wi-Fi, VPN) will be removed. All configurations set for auto-deployment to your company devices will then be deployed to the device. An admin can also choose to clear the passcode from the device during the process.


Refresh

The Refresh command will retrieve the latest inventory information from the database and display it in the UI. After a successful inventory request, a device admin can click Refresh to ensure they have the most up-to-date view of the device information.

To refresh a device:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click Refresh.

Schedule OS Update

The schedule OS Update command lets an admin select and schedule the OS update version for single or multiple devices.

Note: If an action is chosen that doesn’t apply to all selected devices, then the devices that don’t support that action will be assigned the default.

To schedule an OS update from the OS dropdown:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click the OS dropdown then select Update OS.

To schedule an OS update from the device Summary section:

  1. Select the Devices tab in top navigation.
  2. Select a device(s) from the list.
  3. In the right panel, select the Summary tab.


Set Passcode (Android only)

The Set Passcode command will replace an existing passcode.

To set a passcode on an Android device:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, click the Android dropdown and select Set Passcode.
  4. Enter the new passcode, then click Save.

Caution: The set and clear passcode functions are different in Android N and later. On versions prior to N, an administrator could set or clear the passcode as desired. On Android N and later, the passcode can only be set on devices that do not already have a passcode set, and passcodes cannot be cleared. The user interface does not currently warn users who are attempting to set or clear a passcode on Android N or later, but an error message will appear. Note that attempting to clear a passcode will also fail if there is a policy in place that requires use of a passcode to do so.

See also Passcode Management.


Unassign

Unassigning a user from a company-owned device means the current user is removed and no new user is assigned. When unassigning a company-owned device that is Android Fully Managed or iOS Supervised, all applied configurations (e.g., apps, Wi-Fi, VPN) will be removed. An admin can also choose to clear the passcode from the device during the process.


View Device Details

To view device details:

  1. Select the Devices tab in top navigation.
  2. Select a device from the list.
  3. In the right panel, the default view is the General tab, view device details like hardware, networking, and security information.