Release Notes
February 2018
What's New
Our February 2018 release provides administrators with the ability to carry out Supervised Mode commands on iOS devices. Functions of the Supervised Mode feature include enabling and disabling lost mode, device location, and the ability to check for OS updates. The same functions for Android devices will be added in an upcoming release.
We have also added a new set of icons in the UI for quick identification in both navigation and device management screens. In addition, the ability to designate a company-owned device as assigned or not assigned has now been added as a filtering capability.
New Feature: Supervised Mode for iOS
Supervised Mode gives a device administrator the highest level of control possible on an iOS device. It’s typically used in enterprise environments where the devices are owned by the company. In KACE Cloud MDM, a supervised device is automatically enrolled as a company-owned device.
Functions include:
- Lost Mode - Enable and disable.
- Locate Device - View coordinates, movement, and map.
- Play Lost Mode Sound - Sound will function even if device sound is set to off.
- Set Wallpaper - Add custom image on lock screen and/or home screen.
- Set Supervised Restrictions - New supervised mode restrictions can be found under Restrictions in device detail pane.
- Clear User Restrictions - Remove restrictions passcode from device and reset all user-defined restrictions to default.
- Check for and Update OS - Access the most recent updates and push to a device.
- Rename Device - Remotely change the name of a device using the new edit function next to Device Name.
- Assigned/Not Assigned Filter - Filter devices based on whether they are assigned or not assigned to users.
UI Updates
Icons
KACE Cloud MDM is introducing a new set of icons that can be found throughout the navigation and device management screens. For example, a red compass icon next to a device name identifies a device in lost mode, and the grey device icon adjacent to the OS icon identifies a device in supervised mode.
Filtering
A device admin can now filter company-owned devices by assigned or not assigned. Filtering by the 'User is Not Assigned' criteria allows an admin to quickly inventory available devices.
Known Issues
Account Linking
If you manually create an account in KACE Cloud MDM, then use SSO to log in using the same email address, your account will be automatically linked to single sign-on. You will receive a confirmation email so you can verify.
Role Management and SSO Configuration
If user role assignment is set to Automatic during SSO Configuration, a manual attempt to update an individuals user's role via the Users > Edit User path may appear possible, but will be overwritten by the original SSO Configuration. To resolve, the configuration setting can be changed to Manual, which will then enable editing of individual user roles.
Android Considerations
App Updates
An end user will need to log in to the Google Play Store while in the Work Profile on their Android device in order to receive app updates. This extra step will be eliminated once App Management for Android is launched in KACE Cloud MDM.
Certificate Removal
The ability for an admin to remove a certificate is not currently available for Android devices.
Change in Android Enrollment
In order to receive account profiles on an Android device, the KACE Cloud MDM agent app will need to be updated to the latest version available in the Google Play Store, and the device will need to be re-enrolled. This should be a one-time re-enrollment process that will allow the agent app to create a Work Profile on the device.
Gmail App
Android devices require the Gmail app to be installed in order to use the email account configurations.
Set Passcode Command
The Set Passcode function changed in Android N and later. On versions before N, an administrator could set the passcode as desired. On Android N and later, the passcode can only be set on devices that do not already have a passcode set. The user interface does not currently warn users who are attempting to set a passcode on Android N or later.
iOS Considerations
Factory Reset - Apple iOS iCloud Account Lock
When resetting an Apple iOS device back to factory defaults, the device will remain locked to the associated iCloud account. To prevent this from happening, BEFORE resetting the device, manually turn off the Find my phone feature on the iPhone.
Additional Resources
Getting Started with KACE Cloud MDM
© 2018 Quest Software Inc.
ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software Inc.
The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Quest Software Inc.
Attn: LEGAL Dept.
4 Polaris Way
Aliso Viejo, CA 92656
Refer to our website (www.quest.com) for regional and international office information.
Patents
Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at www.quest.com/legal.
Trademarks
Quest and the Quest logo are trademarks and registered trademarks of Quest Software Inc. in the U.S.A. and other countries. For a complete list of Quest Software trademarks, please visit our website at www.quest.com/legal. All other trademarks, servicemarks, registered trademarks, and registered servicemarks are the property of their respective owners.