Device actions by the device operating system

Information about the actions that are available to administrators for iOS, macOS, Android, Windows, BlackBerry, Gmail, HCL Traveler, or Exchange devices.

Note: For information on ActiveSync managed devices, see the Exchange device actions section.

iOS device actions

The following table lists the actions that are available for iOS devices:

iOS device action Description
Enable Debug Mode Allows debugging content on the device.

Note: This action significantly impacts battery life and performance on the device.

Disable Debug Mode Disabled debug mode on the device.

Note: This action significantly impacts battery life and performance on the device.

Upload Logs Allows uploading of diagnostic logs from the device.
Ping Device The action is displayed when the device is feedback inactive. Device is enrolled, but is marked as inactive by Apple for lack of activity.
Set Device Name Setting device name for iOS supervise devices.
Initiate Remote Support Initiates attended or unattended remote support for a device.
Reset Restrictions After this action is taken on the device, all restrictions that are enabled by the user at General > Restrictions including the Restrictions Passcode are cleared.
Request Data Refresh Refreshes information that is displayed on the device and the MaaS360® Portal. The updated device information is available when the device comes online with good data coverage.
Release App Licenses List of issued app licenses that are allowed to be reclaimed. This function applies to VPP app licenses only.
Initiate AirPlay Allows wireless streaming between devices of audio, video, device screens, and photos, together with related metadata. An AirPlay session is available only for supervised devices.
Assign User This action is visible when a user is not assigned to the device.
Push OS Update Pushes an iOS software update or enforces an iOS software update within a specified timeframe on a device.

If an upgraded iOS OS version is available for the device, then this action is listed as an upgrade to the OS version on the device that is a Supervised device (DEP iOS 9+ and non-DEP iOS 10.3+).

For more information, see Deploying iOS updates in MaaS360.
Clear Activation Lock Clears the activation lock. The activation lock protects your DEP Supervised device and your information in case the device is lost or stolen.
Update Device Cert Applies to devices that are integrated with the Cloud Extender® (CE) certificate modules. An option to update or republish the device identity certificates.
Set up for Class Manually pushes the payload to the Education device in case the Class does not reach the device.
Restart Device Restarts the device. After the device is restarted, the device connects only to wifi when the device is unlocked.
Shutdown Device The device is turned off.
Mark Device as Lost The device is marked as lost. A device marked as lost cannot be unlocked by the user until the administrator marks the device as found.
Mark Device as Found The device is marked as found. This action is visible only when the device is marked as lost by the administrator.
Wipe Wipes the device to a factory reset state. MaaS360 provides options to clear the Activation lock on iOS devices.
Selective Wipe Removes MaaS360 configured data while preserving personal data and applications. Wipes MaaS360 configured corporate data such as apps, docs, email, and network configurations. Deletes wifi profile, Exchange ActiveSync profiles, and web shortcuts set in security policies. However, the device remains subject to policy restrictions.

macOS device actions

The following table lists the actions that are available for macOS devices:

macOS device action Description
Push macOS Update Deploys the latest security patches and macOS updates to the device. For more information, see Deploying macOS updates in MaaS360. Note: This option is available only if a security patch or macOS update is available for the device.
Request Data Refresh Refreshes information that is displayed on the device and the MaaS360 Portal. The updated device information is available when the device comes online with good data coverage.
Release App Licenses List of issued app licenses that are allowed to be reclaimed. This function applies to VPP app licenses only.
Initiate Remote Support Initiates attended or unattended remote support for a device.
FileVault Recovery Key View the Recovery Key that is assigned to the encrypted macOS. The value is displayed only if the FileVault payload is configured and assigned to the device through a macOS MDM Policy and the device started encryption.

Android device actions

The following table lists the actions that are available for Android devices:

Android device action Description
Enter Programmer Mode (Android Enterprise) After this action is taken on the device, the user can bump another device to download the Maas360 app for Device Owner (DO) mode enrollment.

This action applies to Android Enterprise Profile Owner (PO) and Android Enterprise Device Owner (DO) mode.

Reboot Device (Android Enterprise) This action applies to Android Enterprise Device Owner (DO) mode devices. The device is rebooted after this action is taken on the device.
Gather Bug Reports (Android Enterprise) This action applies to Android Enterprise Device Owner (DO) mode device. The user is prompted on the device to share the bug report.
Initiate Remote Support This action applies to TeamViewer devices. Initiates attended or unattended remote support for a device.
Push Custom XML (Zebra) Allows the user to push custom XML to a device.
Push Profile (Zebra and Bluebird) Allows the user to push a profile to a device that is already defined.
Remote View Device This action applies to a device that is not a Samsung device. The administrator can view the screen of the remote device after taking this action on the device.
Remote Control Device This action applies to Samsung devices. The administrator can view and control remote devices after taking this action on the device.
Update Device Cert This action applies to devices that are integrated with the Cloud Extender (CE) certificate modules. An option to update or republish the device identity certificates.
Enable App Config Status MaaS360 tracks the status of the app configuration whenever configuration changes are applied to the app. The feedback can be a confirmation message that the configuration is successfully applied to the app or a error message if the app failed to apply the configuration. You can view the app configuration feedback in App Catalog and Device view.
Wipe Wipes the device to a factory reset state. MaaS360 provides options to clear Factory Reset Protection on Android devices.
CAUTION:
Applicable to Samsung devices only:

Ensure that the device does not have Block Factory Reset enabled in OEM Config. Initiating a device wipe with this setting enabled can result in the device being rendered inoperable. If this occurs, device needs to be taken to an authorized Samsung repair center for resolution.

Selective Wipe Removes MaaS360 configured data while preserving personal data and applications. Wipes MaaS360 configured corporate data such as apps, docs, email, and network configurations. Deletes wifi profile, Exchange ActiveSync profiles, and web shortcuts set in security policies. However, the device remains subject to policy restrictions.

Windows device actions

The following table lists the actions that are available for Windows devices:

Windows device action Description
Windows 10 laptops  
Wipe Erases all data on the device and resets the device back to the original factory settings.
For the Wipe device action on Windows 10 version 1909 devices and later, the device is wiped remotely by the administrator, where all data is removed completely from the device's internal drive. After the device is completely wiped, the following screen is displayed to the administrator:
doWipeProtection screen
Note: If a device is encrypted, the Wipe device action places that device in a state where the operating system is corrupted and the administrator cannot install or recover the operating system on the device. The following screen is displayed to the administrator after an encrypted device is wiped:
Screen after encrypted device wipe
Change Policy Changes the policy enforced on the device. This option does not apply to Windows DTM devices.
Distribute App Distributes an app to the device.
Selective Wipe Deletes the wifi profile, Exchange ActiveSync profiles, and web shortcuts configured on the device from the MaaS360 policy. This option also removes apps and documents, and confirms whether appropriate options are selected when apps are loaded in the App Catalog or when documents are loaded in the Content Library. This option does not apply to Windows DTM devices.
Remove Control Unregisters the device from MaaS360, where MaaS360 no longer manages the device. MaaS360 wipes the corporate data from the device first.
Note: OOBE enrolled devices disconnect from their work account, removing the device record and any associated BitLocker Keys if encrypted. Administrators must reset the PC locally, as the removal of the work account can cause the password to stop working, making the redeployment more difficult.
Hide Marks a device as inactive in the MaaS360 reports, but does not remove control of the device. Use this option when a device is permanently offline or is not working.
Request Data Refresh Retrieves the most recent data from the device. This option does not apply to Windows DTM devices.
Start/Stop/Restart Service Starts, stops, and restarts the Windows services that are present on the device.
Upload Logs Allows the uploading of diagnostic logs from the device.
Disable Debug Mode Disables debug mode on the device.

Note: This action significantly impacts battery life and performance on the device.

Reboot Device Device is rebooted after taking this action on the device.
Initiate Remote Support Initiates attended or unattended remote support for a device.
Update License Applies the license key to the Windows operating system that is installed on the device.
Windows 10 Phone  
Update License Applies the license key to the Windows operating system that is installed on the device.
Initiate Remote Support Initiates attended or unattended remote support for a device.
Windows DTM devices  
Start/Stop/Restart Service Starts, stops, and restarts the Windows services that are present on the device.
Shutdown/Reboot Shuts down the device and then reboots the device.
Collect Logs Collects diagnostic logs for the DTM agent.
Initiate Remote Support Initiates attended or unattended remote support for a device.
Windows HoloLens  
Reboot Device Device is rebooted after this action is taken on the device.
Update License Applies the license key to the Windows operating system that is installed on the device.

BlackBerry device actions

The following table lists the actions that are available for BlackBerry devices:

BlackBerry device action Description
Reset Device Passcode (BlackBerry) Clears the current passcode for the device.
Wipe Device (BlackBerry) Wipes data and settings that are deployed on the device from MaaS360.
Change BlackBerry MDM Policy (BlackBerry) Changes the policy that is enforced on the device.
Remove BlackBerry Control (BlackBerry) Removes the device records from your BES server.

Gmail device actions

The following table lists the actions that are available for Gmail devices:

Gmail device action Description
Gmail Actions Information about the Mailbox. This option applies only if the device is managed by G Suite.
Wipe (Gmail Actions) Wipes data and settings that are deployed on the device from MaaS360.
Remove (Gmail Actions) Removes the device records from your Gmail server.
Refresh device from G Suite (Gmail Actions) Refreshes information that is displayed for the device from G Suite.
Approve (Gmail Actions) Approves the G Suite mailbox.
Block (Gmail Actions) Prevents the device from accessing your G Suite.

HCL Traveler device actions

The following table lists the actions that are available for HCL Traveler devices:

HCL Traveler device action Description
Approve (HCL Traveler) Approves the HCL Traveler mailbox.
Block (HCL Traveler Prevents the device from accessing your HCL Traveler server.
Wipe (HCL Traveler) Wipes data and settings that are deployed on the device from MaaS360.
Remove (HCL Traveler) Removes the device records from your HCL Traveler server.

Exchange device actions

The following table lists the actions that are available for Exchange devices:

Exchange device action Description
Exchange Actions This option applies only if the device is managed by ActiveSync.
Wipe (Exchange Actions) Wipes data and settings that are deployed on the device from MaaS360.
Remove (Exchange Actions) Removes the device records from your Exchange ActiveSync server.
Refresh Email Client Information (Exchange Actions) Refreshes the email client information that is displayed for the device from Exchange ActiveSync.
Approve (EAS) Approves the EAS mailbox.
Block (EAS) Prevents the device from accessing your Exchange ActiveSync server.
EAS Policy This action is available in the Change Policy option for EAS. Changes the policy that is enforced on the device. These settings are specific to Exchange ActiveSync.
Request Data Refresh (Exchange ActiveSync, EAS) Refreshes information that is displayed on the device and the MaaS360 Portal from Exchange ActiveSync.

Note: The actions that are displayed depend on a number of factors, including the device type, how the device is managed, and whether Cloud Extender is installed for ActiveSync options.