Device actions by the device operating system

Information about the actions that are available to administrators for iOS, macOS, Android, Windows, BlackBerry, Gmail, HCL Traveler, or Exchange devices.

Note: For information on ActiveSync managed devices, see the Exchange device actions section.

iOS device actions

The following table lists the actions that are available for iOS devices.

iOS device action	Description
Locate	IBM® MaaS360® displays the last known location of the device. Note: Location data is available only if location services are enabled on the device.
Message	Sends a message to the device.
Buzz	Sends an alert to assist the user in locating their device in the immediate area.
Enable Debug Mode	Enables debugging content on the device. Note: This action significantly impacts battery life and performance on the device.
Disable Debug Mode	Disables debug mode on the device. Note: This action significantly impacts battery life and performance on the device.
Upload Logs	Allows uploading of diagnostic logs from the device.
Ping Device	The action is displayed when the device is feedback inactive. The device is enrolled, but is marked as inactive by Apple for lack of activity.
Set Device Name	Setting device name for iOS supervised devices.
Initiate Remote Support	Initiates attended or unattended remote support for a device.
Reset Restrictions	After this action is taken on the device, all restrictions that are enabled by the user at General > Restrictions including the Restrictions Passcode are cleared.
Request Data Refresh	Refreshes information that is displayed on the device and the IBM MaaS360 Portal. The updated device information is available when the device comes online with good data coverage.
Release App Licenses	List of issued app licenses that can be reclaimed. This function applies to VPP app licenses only.
Initiate AirPlay	Enables wireless streaming between devices of audio, video, device screens, and photos, together with related metadata. An AirPlay session is available only for supervised devices.
Assign User	This action is visible when a user is not assigned to the device.
Push OS Update	Pushes an iOS software update or enforces an iOS software update within a specified time frame on a device. For supervised devices (DEP iOS 9+ and non-DEP iOS 10.3+), an available iOS upgrade appears as an OS version upgrade on the device. For more information, see Deploying iOS updates in MaaS360.
Clear Activation Lock	Clears the activation lock. The activation lock protects your DEP Supervised device and your information in case the device is lost or stolen.
Update Device Cert	The setting applies to devices that are integrated with the Cloud Extender® (CE) certificate modules. An option to update or republish the device identity certificates.
Set up for Class	Manually pushes the payload to the Education device in case the Class does not reach the device.
Restart Device	Restarts the device. After the device is restarted, the device connects only to wifi when the device is unlocked.
Shutdown Device	The device is turned off.
Mark Device as Lost	The device is marked as lost. A device marked as lost cannot be unlocked by the user until the administrator marks the device as found.
Mark Device as Found	The device is marked as found. This action is visible only when the device is marked as lost by the administrator.
Wipe	Wipes the device to a factory reset state. IBM MaaS360 provides options to clear the Activation lock on iOS devices.
Selective Wipe	Removes IBM MaaS360 configured data while preserving personal data and applications. Wipes IBM MaaS360 configured corporate data such as apps, docs, email, and network configurations. Deletes wifi profile, Exchange ActiveSync profiles, and web shortcuts set in security policies. However, the device remains subject to policy restrictions.
Lock	The device can be locked through IBM MaaS360 Portal. It locks the device's screen to prevent unauthorized access.
Reset Passcode	Clears the passcode from the device.
Change Policy	Changes the policy enforced on the device.
Reapply Policy	Reapplies a policy to the device.
Change Rule Set	Changes the compliance rule set for the device.
Distribute App	Distributes an app to the device.
Distribute Doc	Distributes an document to the device.
Remove Control	Unregisters the device from IBM MaaS360, where IBM MaaS360 no longer manages the device.
Hide	Administrators can hide the device information.
Manage eSim Configuration	Deploy eSIM configuration to eSIM capable iPhones and iPads.

macOS device actions

The following table lists the actions that are available for macOS devices.

macOS device action	Description
Push macOS Update	Deploys the latest security patches and macOS updates to the device. For more information, see Deploying macOS updates in MaaS360. Note: This option is available only if a security patch or macOS update is available for the device.
Request Data Refresh	Refreshes information that is displayed on the device and the IBM MaaS360 Portal. The updated device information is available when the device comes online with good data coverage.
Release App Licenses	List of issued app licenses that are allowed to be reclaimed. This function applies to VPP app licenses only.
Initiate Remote Support	Initiates attended or unattended remote support for a device.
FileVault Recovery Key	View the Recovery Key that is assigned to the encrypted macOS. The value is displayed only if the FileVault payload is configured and assigned to the device through a macOS MDM Policy and the device started encryption.
Locate	IBM MaaS360 displays the last known location of the device.
Message	Sends a message to the device.
Lock	The device can be locked through IBM MaaS360 Portal. It locks the device's screen to prevent unauthorized access.
Wipe	Wipes the device to a factory reset state.
Change Policy	Changes the policy enforced on the device.
Reapply Policy	Reapplies a policy to the device.
Change Rule Set	Changes the compliance rule set for the device.
Distribute App	Distributes an app to the device.
Selective Wipe	Removes IBM MaaS360 configured data while preserving personal data and applications. Wipes IBM MaaS360 configured corporate data such as apps, docs, email, and network configurations. Deletes wifi profile, Exchange ActiveSync profiles, and web shortcuts set in security policies. However, the device remains subject to policy restrictions.
Remove Control	Unregisters the device from IBM MaaS360, where MaaS360 no longer manages the device.
Hide	Administrators can hide the device information.

Android device actions

The following table lists the actions that are available for Android devices.

Android device action	Description
Enter Programmer Mode (Android Enterprise)	After this action is taken on the device, the user can bump another device to download the IBM MaaS360 app for Device Owner (DO) mode enrollment. This action applies to Android Enterprise Profile Owner (PO) and Android Enterprise Device Owner (DO) mode.
Reboot Device (Android Enterprise)	This action applies to Android Enterprise Device Owner (DO) mode devices. The device is rebooted after this action is taken on the device.
Gather Bug Reports (Android Enterprise)	This action applies to Android Enterprise Device Owner (DO) mode device. The user is prompted on the device to share the bug report.
Initiate Remote Support	This action applies to TeamViewer devices. Initiates attended or unattended remote support for a device.
Push Custom XML (Zebra)	Allows the user to push custom XML to a device.
Push Profile (Zebra and Bluebird)	Allows the user to push a profile to a device that is already defined.
Remote View Device	This action applies to a device that is not a Samsung device. The administrator can view the screen of the remote device after acting on the device.
Remote Control Device	This action applies to Samsung devices. The administrator can view and control remote devices after acting on the device.
Update Device Cert	This action applies to devices that are integrated with the Cloud Extender (CE) certificate modules. An option to update or republish the device identity certificates.
Enable App Config Status	IBM MaaS360 tracks the status of the app configuration whenever configuration changes are applied to the app. The feedback can be a confirmation message that the configuration is successfully applied to the app or an error message if the app failed to apply the configuration. You can view the app configuration feedback in App Catalog and Device view.
Wipe	Wipes the device to a factory reset state. IBM MaaS360 provides options to clear Factory Reset Protection on Android devices. CAUTION: Applicable to Samsung devices only: Ensure that the device does not have Block Factory Reset enabled in OEM Config. Initiating a device wipe with this setting enabled can result in the device being rendered inoperable. If this occurs, the device needs to be taken to an authorized Samsung repair center for resolution.
Selective Wipe	Removes IBM MaaS360 configured data while preserving personal data and applications. Wipes IBM MaaS360 configured corporate data such as apps, docs, email, and network configurations. Deletes wifi profile, Exchange ActiveSync profiles, and web shortcuts set in security policies. However, the device remains subject to policy restrictions.
Locate	IBM MaaS360 displays the last known location of the device.
Lock	The device can be locked through IBM MaaS360 Portal. It locks the device's screen to prevent unauthorized access.
Reset Passcode	Clears the passcode from the device.
Set Device Name	Changes the name as it appears on the device and in the portal.
Change Policy	Changes the security policy on the device.
Change Rule Set	Changes the compliance rule set for the device.
Change Plan	Changes the expense plan for monitoring device data usage.
Distribute App	Distributes an app to the device.
Distribute Doc	Distributes a document to the device.
Hide	Marks a device as inactive in the IBM MaaS360 reports, but does not remove control of the device. Use this option when a device is permanently offline or is not working.
Upload Logs	It allows uploading of diagnostic logs from the device.
Generate dynamic passcode for admin bypass	This action applies to devices in Kiosk mode. Administrators can generate a dynamic passcode and share it with users. Users can enter the passcode to exit Kiosk mode.

Windows device actions

The following table lists the actions that are available for Windows devices.

Windows device action	Description
Windows MDM devices
Locate	IBM MaaS360 displays the last known location of the device. Note: Location data is available only if location services are enabled on the device.
Message	Sends a message to the device.
Lock	The device can be locked through IBM MaaS360 Portal. It locks the device's screen to prevent unauthorized access.
Wipe	Erases all data on the device and resets the device back to the original factory settings. For the Wipe device action on Windows 10+ version 1909 devices and later, the device is wiped remotely by the administrator, where all data is removed completely from the device's internal drive. After the device is wiped, the Let's start with region. Is this right screen is displayed to select the region. Note: If a device is encrypted, the Wipe device action places that device in a state where the operating system is corrupted and the administrator cannot install or recover the operating system on the device. The Choose and option screen is displayed to the administrator after an encrypted device is wiped.
Change Policy	Changes the policy enforced on the device. This option does not apply to Windows DTM devices.
Reapply Policy	Applies the same policy changes to the device.
Change Rule Set	Update and assigns a compliance rule set to all devices.
Distribute App	Distributes an app to the device.
Selective Wipe	Deletes the wifi profile, Exchange ActiveSync profiles, and web shortcuts configured on the device from the MaaS360 policy. This option also removes apps and documents, and confirms whether appropriate options are selected when apps are loaded in the App Catalog or when documents are loaded in the Content Library. This option does not apply to Windows DTM devices.
Remove Control	Unregisters the device from MaaS360, where MaaS360 no longer manages the device. MaaS360 wipes the corporate data from the device first.
Hide	Marks a device as inactive in the MaaS360 reports, but does not remove control of the device. Use this option when a device is permanently offline or is not working.
Request Data Refresh	Retrieves the most recent data from the device. This option does not apply to Windows DTM devices.
Start/Stop/Restart Service	Starts, stops, and restarts the Windows services that are present on the device.
Upload Logs	It allows uploading of diagnostic logs from the device.
Enable Debug Mode	Enables debug mode on the device. Note: This action significantly impacts battery life and performance on the device.
Reboot Device	The device is rebooted after acting on the device. Now: It immediately reboots the device. Later: It reboots the device based on the scheduled date and time.
Update License	Updates the license for the device.
Show Recovery Key	The Show Recovery Key shows recovery key(s) for a Corporate Owned / Corporate Shared device. The administrator can then click the Share Recovery Key button to email the recovery key information to the user to whom the device is assigned. Prerequisites: The policy setting Backup BitLocker Recovery Key to MaaS360 under Device Settings > Security > Device Encryption (Bit Locker) must be enabled for the relevant MDM policy. For more information, see Device encryption (Bit Locker) settings. One or more device drives must be encrypted through BitLocker. Notes: You can update the device ownership attribute individually on the device Inventory page at Device > Device Summary. You can update the device ownership attribute in bulk for device at Device > Device Attributes.
Initiate Remote Support	Initiates attended or unattended remote support for a device.
Windows Activated devices
Locate	IBM MaaS360 displays the last known location of the device.
Message	Sends a message to the device.
Change Rule Set	Update and assigns a compliance rule set to all devices.
Distribute App	Distributes an app to the device.
Hide	Marks a device as inactive in the MaaS360 reports, but does not remove control of the device. Use this option when a device is permanently offline or is not working.
Start/Stop/Restart Service	Starts Stop, and Restart the Windows services that are present on the device.
Upload Logs	It allows uploading of diagnostic logs from the device.
Enable Debug Mode	Enables debug mode on the device. Note: This action significantly impacts battery life and performance on the device.
Remove Control	Unregisters the device from MaaS360, where MaaS360 no longer manages the device. MaaS360 wipes the corporate data from the device first.
Lock	The device can be locked through IBM MaaS360 Portal. It locks the device's screen to prevent unauthorized access.
Reboot Device	The device is rebooted after this action is taken from IBM MaaS360 Portal for the device. Now: It immediately reboots the device. Later: It reboots the device based on the scheduled date and time.
ShutDown Device	The device can be turned off through IBM MaaS360 Portal. Now: It immediately turned off the device. Later: It turned off the device based on the scheduled date and time.
Initiate Remote Support	Initiates attended or unattended remote support for a device.
Windows HoloLens
Reboot Device	The device is rebooted after this action is taken on the device.
Update License	Applies the license key to the Windows operating system that is installed on the device.

Gmail device actions

The following table lists the actions that are available for Gmail devices.

Gmail device action	Description
Gmail Actions	Information about the Mailbox. This option applies only if GSuite manages the device.
Wipe (Gmail Actions)	Wipes data and settings that are deployed on the device from MaaS360.
Remove (Gmail Actions)	Removes the device records from your Gmail server.
Refresh device from G Suite (Gmail Actions)	Refreshes information that is displayed for the device from G Suite.
Approve (Gmail Actions)	Approves the G Suite mailbox.
Block (Gmail Actions)	Prevents the device from accessing your G Suite.

HCL Traveler device actions

The following table lists the actions that are available for HCL Traveler devices.

HCL Traveler device action	Description
Approve (HCL Traveler)	Approves the HCL Traveler mailbox.
Block (HCL Traveler	Prevents the device from accessing your HCL Traveler server.
Wipe (HCL Traveler)	Wipes data and settings that are deployed on the device from MaaS360.
Remove (HCL Traveler)	Removes the device records from your HCL Traveler server.

Exchange device actions

The following table lists the actions that are available for Exchange devices.

Exchange device action	Description
Exchange Actions	This option applies only if ActiveSync manages the device.
Wipe (Exchange Actions)	Wipes data and settings that are deployed on the device from MaaS360.
Remove (Exchange Actions)	Removes the device records from your Exchange ActiveSync server.
Refresh Email Client Information (Exchange Actions)	Refreshes the email client information that is displayed for the device from Exchange ActiveSync.
Approve (EAS)	Approves the EAS mailbox.
Block (EAS)	Prevents the device from accessing your Exchange ActiveSync server.
EAS Policy	This action is available in the Change Policy option for EAS. Changes the policy that is enforced on the device. These settings are specific to Exchange ActiveSync.
Request Data Refresh (Exchange ActiveSync, EAS)	Refreshes information that is displayed on the device and the MaaS360 Portal from Exchange ActiveSync.

Note: The actions that are displayed depend on several factors, including the device type, how the device is managed, and whether Cloud Extender is installed for ActiveSync options.