Managing devices in the MaaS360 Device Inventory

Administrators landing on the Device Inventory page in the MaaS360® Portal see this list of devices.

About this task

The Device Inventory page in the MaaS360® Portal lists all the devices that matches the count of devices displayed on the MaaS360 Portal Home page. This list includes managed devices that are actived, enrolled, and in pending removed control state with licenses assigned. This list does not include the devices that are hidden, mailbox sync’ed, or in user removed control state. There are filters for all device states, so administrators can apply required filters to view devices in other states.

Devices that are pending control removal will have the licenses removed when the devices receive and apply this action. For devices that did not get the action for prolonged time for any reason, the administrator can hide such devices which will remove the license from them. Unless hidden, these devices would continue to be included in the device count shown on the homepage.

Procedure

  1. From the MaaS360 Portal Home page, select Devices > Inventory.
    The Device Inventory window is displayed. The page includes a device grid that displays device details in the respective columns in the grid.
  2. Review the list of devices, and choose one of the following options:
    • Select the column header and filter for a specific type of device. For example, select the Platform column and then sort devices based on the device operating system.
    • Click the Refresh icon to refresh the list of devices.
    • Click Add Device to send an enrollment request to a device. For more information about adding devices in MaaS360, see the Adding devices in MaaS360 topic.
    • Click Locate Active Devices to display a map of the location of devices that are actively managed by MaaS360. For more information about locating active devices, see the Locating active devices in the MaaS360 Portal topic.
    • Click Delete Device to delete an inactive device.
    • Click More > Directory and Enrollment to configure the default authentication mode, unified enrollment settings, advanced management settings, and more enrollment settings for iOS, Android, Windows, and other devices.
  3. From the Summary page, select a device in the Device Inventory list to review the following information about the device:
    Option Description
    Summary Basic information about the device such as model, device ID, manufacturer along with a summary of the device that includes Workplace & Security, Network Information, and Custom Attributes.
    Hardware and OS Detailed hardware and storage information, including OS, OS version, platform serial number, and more information.
    Display active users list Lists the active users, and allows the administrator to delete and log out users. This option applies to Apple Education Shared devices only.
    Security and compliance Detailed information about password status, encryption, policies (Device and Persona), configuration profiles, and device restrictions.
    Threat management Information about IBM® Trusteer® or other malware detection software on the device.
    Exchange ActiveSync Information about the Exchange ActiveSync mailbox. This option applies to devices that are managed by ActiveSync only.
    Network information Detailed information about the cellular network, the wifi network, and other networks such as phone number, home carrier, wifi Mac address, and IP address.
    Location information A map that displays the last known location of a device.
    Apps installed The apps that are installed on the device and the provisioning profile on the device.
    Note: Android system apps are not included in the list.
    Modules (appears only if the Cloud Extender® is installed for use with the BlackBerry Enterprise Server) The modules on the device, including the version and size.
    Service books (appears only if the Cloud Extender is installed for use with the BlackBerry Enterprise Server) The service books on the device, including the service ID and the content ID.
    Running services The services on the device, including the app ID, memory used, and running time.
    App distributions The apps that are distributed to the device by MaaS360, including when the apps are deployed and installed.
    Missing OS patches Displays OS patches that are missing on the device. This option applies to UEM customers only.
    Missing app updates Displays app updates that are missing on the device. This option applies to UEM customers only.
    OS patch distributions Displays OS Patches that are distributed for a selected device. This action also lists pending restart and scheduled patch distributions for a device.
    App update distributions Displays app updates that are distributed for a selected device. This action also lists pending restart and scheduled app updates for a device.
    Docs downloaded The documents that are downloaded from MaaS360, including the version, whether the document is open, the opened document version, and the source of the document.
    Certificates The different certificates for the device, including certificate authority (CA) provided certificates and the certificate expiration date.
    Browser history (visited) Websites that the device user visited with the MaaS360 Secure Browser including the domain, the URL category, the number of visits, the username, the policy name, first and last visit, and allowed through exception.
    Browser history (blocked) Blocked websites that the device user attempted to visit with the MaaS360 Secure Browser including the access time, the URL, the URL category, the policy name, and the username.
    Mobile data usage Detailed information about the mobile usage plan, including in-network and roaming usage.
    Groups The groups that a device belongs to that are used for an assignment or for distribution.
    Custom attributes Shows attributes on the device that you want to monitor. Displays both legacy and administrator defined custom attributes.
    Note: In the Important Device (Skip Enforcement Action) attribute, set the value to Yes to exempt the device from compliance rules.
    History Information about actions that are taken on the device along with details such as action date, action, action by, IP address, status, and comments. Sort the history to view by the last 7 days, 30 days, 90 days, 180 days, current and last month, or by all records.
    Installed services Information about the MaaS360 app that is running on the device.
    License entitlements Shows licenses that are assigned on the device along with license MaaS360 license part name, license part number, and date when the license is applied on the device.
    Delete and logout user Deletes a user from a device and then logs out the user.
    G Suite Information about the G Suite Mailbox. This option applies to devices managed by G Suite.
  4. To take more actions on the device, choose from the following options:
    Option Description
    Locate Locates the device and provides a location address for the device.
    Message Sends a message to the device.
    Buzz Sends an alert tone to help the user locate the device in the immediate area. This option does not apply to Windows DTM or Windows Holographic devices.
    Refresh device information (request data refresh) Retrieves the most recent data from the device. This option does not apply to Windows DTM devices.
    Lock Sends a command that locks the device.
    Reset passcode Clears the current passcode from the device. This option does not apply to Windows laptops, Windows DTM, or Windows Holographic devices.
    Set device name Assigns a custom device name. This action is applicable to iOS supervised devices and all Android devices.
    Selective wipe Deletes the wifi profile, Exchange ActiveSync profiles, and web shortcuts configured on the device from the MaaS360 policy. This option also removes apps and documents, and confirms whether appropriate options are selected when apps are loaded in the App catalog or when documents are loaded in the Content Library. This option does not apply to Windows DTM devices.
    Revoke selective wipe Revokes the selected Wipe action. This option does not apply to Windows DTM devices.
    Cancel pending wipe If the Wipe action is pending due to a connection issue, this action cancels wiping the device.
    Wipe Erases all data on the device and resets the device back to the original factory settings.
    • For Android 2.2 devices, the Wipe device action resets the phone memory only.
    • For Android 2.3 devices, the Wipe device action resets both the phone memory and the SD card.
    • The Wipe device action on Windows 10 version 1709 and later is supported on MaaS360 through doWipeProtected. Unlike doWipe, which allows a device to circumvent the wipe action by making the device go through a power cycle, doWipeProtected continually tries to reset the device until the device is wiped.
      When doWipeProtected is successful, the device is wiped remotely by the administrator, where all data is removed completely from the device's internal drive. After the device is fully wiped, the following screen is displayed to the administrator:
      doWipeProtected screen
      Note: If a device is encrypted, the Wipe device action might place that device in a state where the operating system is corrupted. The administrator cannot install or recover the operating system on the device. The following screen is displayed to the administrator after an encrypted device is wiped:
      Screen after encrypted device wipe
    Change policy Changes the policy enforced on the device. This option does not apply to Windows DTM devices.
    Change rule set Assigns a different compliance rule to the device.
    Change license entitlements Assign new license or remove licenses from the device.
    Change plan Changes the MaaS360 Mobile Expense Management (MEM) plan. This option does not apply to Windows laptops, Windows DTM, or Windows Holographic devices.
    Distribute app Distributes an app to the device.
    Distribute doc Distributes a file (document, spreadsheet, or slide show) to the device. This option does not apply to Windows laptops, Windows DTM, or Windows Holographic devices.
    Initiate® AirPlay Uses the AirPlay option to trigger a device to share its screen with another device. Both devices must be on the same network. This option does not apply to Windows laptops, Windows Phones, Windows DTM, or Windows Holographic devices.
    Remove control Unregisters the device from MaaS360, where MaaS360 no longer manages the device. MaaS360 wipes the corporate data from the device first.
    Hide Marks a device as inactive in the MaaS360 reports, but does not remove control of the device. Use this option when a device is permanently offline or is not working.
    For more information about actions that are available for each device type, see the Device actions by the device operating system topic.
  5. Choose from the following actions to perform on columns on the Device Inventory page:
    Option Description
    Reset filters For each of the columns that are displayed, you can apply filters to sort user details. When you click Reset Filters, all filters that are applied on the columns are removed.
    Customize columns By default, the device name, user, platform, model, operating system, installed date, last reported, mailbox managed, email address, and managed status columns are displayed. Choose to customize columns based on the device details that you want to display. Extra columns that are available are device type, jail broken or rooted, device ID, IMEI/MEID, compliance status, and MDM policy.
    Note: If the selected columns exceed the grid table size while customizing columns, a horizontal scroll bar is displayed on the device grid. You can scroll to view all the customized columns in the grid.
    Export Exports the current columns that are displayed on the Device Inventory page as a .csv file.
  6. Select one or more devices in the Device Inventory list to view the following options:
    Option Description
    Locate Provides a location address for the selected devices.
    Save as group Creates a Device Group that consists of the selected devices.
    Distribute doc Distributes a file (document, spreadsheet, or slide show) to the selected devices.
    Send message Sends a message to the selected devices.
    Update certificate This option applies only to devices that are integrated with the Cloud Extender Certificate Integration module. This option updates or republishes the device identity certificates on the device.
    The actions that are displayed for a device depend on a number of factors, including the device type, how the device is managed, and whether Cloud Extender is installed for ActiveSync options.