Release Notes
October 2017
What's New
New Feature: Enrollment Restrictions
The October 2017 update of KACE® Cloud Mobile Device Manager introduces the ability for device administrators to control which users can enroll a device. This builds on the improved role management features added in the previous release.
Currently, a user can be assigned one or more of three roles, as described in the table below. With this release, there is a new rule that affects the Device User: A user must be assigned the Device User role to successfully complete enrollment in KACE Cloud MDM.
| Role | Privileges |
| Device User |
|
| Device Admin |
|
| System Admin |
|
An Admin can confirm a specific user's role assignments using the Edit User function.
The Device User role can also be assigned automatically through Single-Sign-On (SSO) configuration settings.
New Feature: Device Restrictions
Device Administrators can now set passcodes, lock screens, and set camera restrictions on both iOS and Android devices. In addition, iOS devices have a variety of general, security, application, App Store, and content rating restrictions.
Restrictions are currently configured on a per-device basis, but profile-based configuration of devices will be available in the near future.
An Admin can set or clear restrictions by choosing a user, then making updates in the Restrictions section.
In addition, Admins now have access to a comprehensive list of passcode restrictions in the Passcode section.
Enhancements: Refresh and Export Device List
Two new functions are located at the top of the device list: Refresh and Export device list.
Refresh
The Refresh button refreshes the devices list without refreshing the entire browser, and without losing selected filters.
Export Device List
A CSV file export includes all of the public device attributes stored in KACE Cloud MDM, not just those visible in the list. The list does not include any child list data, such as applications, certificates, profiles, or restrictions, but it does include all hardware attributes.
Known Issues
Account Linking
If you manually create an account in KACE Cloud MDM, then use SSO to log in using the same email address, your account will be automatically linked to single sign-on. You will receive a confirmation email so you can verify.
Android - Set Passcode Command
The Set Passcode function changed in Android N and later. On versions before N, an administrator could set the passcode as desired. On Android N and later, the passcode can only be set on devices that do not already have a passcode set. The user interface does not currently warn users who are attempting to set a passcode on Android N or later.
Expired Password Links
Password reset links are valid for 65 minutes. If you click a password reset link that has expired, you will receive a generic message indicating that there is a problem. Click the link included with the message to be taken back to your main login page, then click the "Forgot Your Password?" link to reset your password.
Factory Reset - Apple iOS iCloud Account Lock
When resetting an Apple iOS device back to factory defaults, the device will remain locked to the associated iCloud account. To prevent this from happening, BEFORE resetting the device, manually turn off the Find my phone feature on the iPhone.
Additional Resources
Getting Started with KACE Cloud MDM
© 2017 Quest Software Inc.
ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software Inc.
The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Quest Software Inc.
Attn: LEGAL Dept.
4 Polaris Way
Aliso Viejo, CA 92656
Refer to our website (www.quest.com) for regional and international office information.
Patents
Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at www.quest.com/legal.
Trademarks
Quest and the Quest logo are trademarks and registered trademarks of Quest Software Inc. in the U.S.A. and other countries. For a complete list of Quest Software trademarks, please visit our website at www.quest.com/legal. All other trademarks, servicemarks, registered trademarks, and registered servicemarks are the property of their respective owners.