Release Notes

April 2019

What's New

In our April release, we are introducing a new feature, a feature enhancement, and several key functional improvements. The new Fully Managed Android Device feature lets administrators set up Android devices in fully managed mode for optimal control—it also includes new restrictions and a new Android Options library. In addition, admins can now create and edit multiple settings for a single Android app.

We’ve also added:

Data visualization to our device history feature
An Install Agent App option to keep Android agent versions current
Expanded filtering capabilities specific to device management types
The ability to unassign devices

New Feature: Fully Managed Android Devices

A fully managed Android device provides access to additional restrictions, options, and commands to further tailor the end-user experience while retaining full control over the device. To put the device in fully managed mode, admin will first need to enroll the device using a special enrollment workflow. There are also some new restrictions available only for fully managed Android devices (indicated by an icon when adding or editing Restriction sets), as well as a new Android Options library that lets an admin build more granular sets of configurations for use on fully managed Android devices. For full instructions on setting up a fully managed Android device, see Fully Managed Android in our documentation.

Feature Enhancement: Multiple Settings for Android Apps

Admins now have the ability to create multiple settings for individual apps to suit different needs. For example, if an Admin has three distinct work groups that need access to the Adobe Acrobat app, but they will each require unique settings, multiple settings of an individual app can be created and saved.

Functional Improvements

Android Agent Version

An admin can now install the latest version of the KACE Android Agent app to any Android device by selecting the device and then selecting 'Install Agent App' in the Android dropdown. Once Install Agent App is selected, the most recent version of the app will be retrieved from the Google Play store and deployed to the selected device(s). This function is available for full managed Android devices and personal Android devices with a work profile.

Device History Charting

Device history now includes a chart feature that provides visualization of activity relating to successful, pending, and failed commands as well as KACE Lifecycle events (enroll/unenroll), label add/remove, and manual runs of inventory. Chart filters include activity type and date range.

New Filtering Capabilities

Our device and user filtering capabilities now include passcode policy and restriction options that are specific to device management policies: iOS Default, Android Personal, and Android Work (fully managed).

Reboot for Android 7.0+

An admin can send a 'Reboot' command that will attempt to restart one or more fully managed Android devices.

Reassign/Unassign Company-Owned Device(s)

When reassigning a company-owned device, all applied configurations (e.g., apps, wi-fi, VPN) will be removed. All configurations set for auto-deployment to your company devices will then be deployed to the device. An admin can also choose to clear the passcode from the device during the process.

When unassigning a user from a company-owned device, the current user is removed and no new user is assigned. When unassigning a company-owned device that is Android Fully Managed or iOS Supervised, all applied configurations (e.g., apps, wi-fi, VPN) will be removed. An admin can also choose to clear the passcode from the device during the process.

Subscription Details

Additional subscription information is now listed on the Settings page, including subscription type, start and end dates, and available licenses. And if you're running a trial subscription, you will have access to a button for renewal that will allow you to automatically renew for another 30 days if you need more time.

Known Issues

Role Management and SSO Configuration

If user role assignment is set to Automatic during SSO Configuration, a manual attempt to update an individual user's role via the Users > Edit User path may appear possible, but will be overwritten by the original SSO Configuration. To resolve, the configuration setting can be changed to Manual, which will then enable editing of individual user roles.

Android-Specific Considerations

Device Owner Setup

When using the Device Owner enrollment flow (afw#kace), the enrollment flow may not complete if the Google Play services on the factory default image of the device are out of date. This a known issue with the Android operating system, caused by the enrollment process timing out before the update of the Play services on the device can complete. You will know that this situation occurred if you are never asked for your subdomain name during the enrollment process. If you end up back at the device home screen, locate and launch the KACE Cloud MDM agent app on the device and click the 'Enroll Device' button to complete the setup process.

Gmail App

Android devices require the Gmail app to be installed in order to use the email account configurations.

Set and Clear Passcode Commands

The set and clear passcode functions are different in Android 7.0 and later. On versions prior to 7.0, an administrator could set or clear the passcode as desired. On Android 7.0 and later, the passcode can only be set on devices that do not already have a passcode set, and passcodes cannot be cleared. The user interface does not currently warn users who are attempting to set or clear a passcode on Android 7.0 and later, but an error message will appear. Note that attempting to clear a passcode will also fail if there is a policy in place that requires use of a passcode to do so.

iOS-Specific Considerations

Factory Reset - Apple iOS iCloud Account Lock

When resetting an Apple iOS device back to factory defaults, the device will remain locked to the associated iCloud account. To prevent this from happening, before resetting the device, manually turn off the 'Find my phone' feature on the iPhone.

Additional Resources

Getting Started with KACE Cloud MDM

This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software Inc.

The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document.

If you have any questions regarding your potential use of this material, contact:

Quest Software Inc.

Attn: LEGAL Dept.

4 Polaris Way

Aliso Viejo, CA 92656

Refer to our website (www.quest.com) for regional and international office information.

Patents

Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at www.quest.com/legal.

Trademarks

Quest and the Quest logo are trademarks and registered trademarks of Quest Software Inc. in the U.S.A. and other countries. For a complete list of Quest Software trademarks, please visit our website at www.quest.com/legal. All other trademarks, servicemarks, registered trademarks, and registered servicemarks are the property of their respective owners.