Remote Commands for Mobile Devices

The remote commands available in the Jamf Software Server (JSS) allow you to remotely perform tasks on a mobile device.

You can send a remote command to a single mobile device. Some commands can also be sent to multiple devices at once using mass actions. For more information, see Performing Mass Actions for Mobile Devices.

Note: The remote commands available for a particular device vary depending on the device ownership type, device platform, device type, and OS version. For more information, see Mobile Device Management Capabilities.

The following table describes the remote commands that you can send from the JSS:

Remote Command

Description

iOS Device Requirements

Personally Owned Device Support

Update Inventory

Prompts the mobile device to contact the JSS and update its inventory

--

iOS and Android

Lock Device

Locks the mobile device

If the mobile device has a passcode, the user must enter it to unlock the device.

(Optional) Displays a message on the mobile device when it locks. This message is only sent if the mobile device has a passcode.

(Optional) Displays a phone number on the mobile device when it locks. The phone number is only displayed if the mobile device has a passcode.

--

iOS and Android

Note: The lock message and phone number display options are not available on Android devices.

Clear Passcode

Removes the passcode from the mobile device

If a configuration profile with a Passcode payload is installed on the device, the user is prompted to create a new passcode.

--

N/A

Clear Restrictions

Removes restrictions and the restrictions passcode from a supervised mobile device

  • iOS 8 or later

  • Supervised

iOS

Update Passcode Lock Grace Period

Sets the amount of time that a device's screen can be locked before requiring a passcode to unlock it.

  • iOS 9.3 or later

  • Enrolled via a PreStage enrollment with Shared iPad enabled

N/A

Unmanage Device

Stops communication between the mobile device and the JSS, which means you can no longer perform management tasks on the device

When you unmanage a device, the following items are removed from the device:

  • MDM profile

  • Device certificate

  • Self Service

  • Any configuration profiles that were distributed with the Casper Suite

  • Any managed apps that were distributed with the Remove app when MDM profile is removed checkbox selected

Note: Although an unmanaged device will no longer submit inventory, its inventory record remains in the JSS.

--

N/A

Wipe Device

Permanently erases all data on the device and deactivates the device. This command is available for both iOS and Apple TV devices (tvOS 10.2 or later). For devices with iOS 11 or later, you can choose to retain cellular data plans.

(Optional) Clears Activation Lock on the device

Note: Wiping a device does not remove the device from the JSS or change its inventory information.

To restore the device to the original factory settings, you must manually reactivate the device.

--

N/A

Restart Device

Restarts a device. This command is available for both iOS and Apple TV devices (tvOS 10.2 or later).

(Optional) Clears the passcode on the device. If this option is chosen, the Clear Passcode command is sent to the device before the device is restarted.

  • iOS 10.3 or later

  • Supervised

N/A

Send Blank Push

Sends a blank push notification, prompting the device to check in with Apple Push Notification service (APNs)

--

iOS and Android

Note: On Android, the device checks in with Google Cloud Messaging.

Set Wallpaper

Sets an image or photo as wallpaper for the Lock screen, Home screen, or both screens on a supervised device

You can upload an image file or choose an existing image file.

  • iOS 7 or later

  • Supervised

N/A

 

Enable/Disable Voice Roaming

Enable/Disable Data Roaming

Enables/disables voice or data roaming on the device

Note: Disabling voice roaming automatically disables data roaming.

  • iOS 5 or later

  • Cellular capability

N/A

Update iOS Version

Updates the iOS version on the mobile devices

You can choose to download the update for users to install, or to download and install the update and restart devices after installation.

Note: This command is only available as a mass action. For more information, see Performing Mass Actions for Mobile Devices.

  • iOS 9 or later

  • Supervised

  • Enrolled via a PreStage enrollment (devices with iOS 9-10.2)

N/A

Log Out User

Logs out the currently logged in user for Shared iPad only

  • iOS 9.3 or later

  • Supervised

  • Enrolled via a PreStage enrollment with Shared iPad enabled

N/A

 

Enable/Disable Lost Mode

Enables/disables Lost Mode on the device

Lost Mode locks the device and displays your custom messaging on the device's Lock screen. Global Positioning System (GPS) coordinates for the device's approximate location are also displayed in the inventory information for the device.

  • iOS 9.3 or later

  • Supervised

N/A

(Optional) Always enforces Lost Mode on the device. This option ensures Lost Mode is enabled after an enrollment event has completed. When selected, Lost Mode can be only disabled in the JSS.

(Optional) Plays a sound on the lost device.

  • iOS 10.3 or later

  • Supervised

  • Lost Mode enabled

N/A

Update Location

Updates the GPS coordinates collected for a mobile device in Lost Mode

  • iOS 9.3 or later

  • Supervised

  • Lost Mode enabled

N/A

Enable/Disable Diagnostic and Usage Reporting

Enable/Disable App Analytics

Enables/disables the sending of diagnostic and usage data to Apple

Enables/disables the sending of app analytics data to Apple

Note: Disabling diagnostic and usage reporting automatically disables app analytics.

  • iOS 9.3 or later

  • Supervised

  • Enrolled via a PreStage enrollment with Shared iPad enabled

N/A

Shut Down Device

Shuts down the device

(Optional) Clears the passcode on the device. If this option is chosen, the Clear Passcode command is sent to the device before the device is shutdown.

  • iOS 10.3 or later

  • Supervised

N/A

Personally Owned Devices Only

Wipe Institutional Data

Permanently erases institutional data and settings on the device

On a personal iOS device, the following items are removed:

  • MDM profile

  • Personal device profile, including any institutional settings and managed apps

  • Device certificate

On a personal Android device, the following items are removed:

  • MDM profile

  • Personal device profile, including any institutional settings

Note: On an Android device, the Self Service Mobile app is also deactivated as a device administrator.

On personal iOS and Android devices, the Wipe Institutional Data command makes the device unmanaged. This stops communication between the device and the JSS, which means you can no longer perform management tasks on the device.

Note: Although an unmanaged device will no longer submit inventory, its inventory record remains in the JSS.

--

iOS and Android

 

 

Sending a Remote Command

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Perform a simple or advanced mobile device search.
    For more information, see Simple Mobile Device Searches or Advanced Mobile Device Searches.

  4. Click the mobile device you want to send the remote command to.
    If you performed a simple search for an item other than mobile devices, you must click Expand images/download/thumbnails/16429877/Add_icon.png next to an item to view the devices related to that item.

  5. Click the Management tab, and then click the button for the remote command that you want to send.

    • If you are sending a Lock Device command, enter a lock message and phone number if desired, and then click Lock Mobile Device.

    • If you are sending a Wipe Device command, you can choose to clear the Activation Lock on the device.

    • If you are sending an Enable Lost Mode command, enter the information to display on the device's Lock screen, and then click Enable Lost Mode.

The remote command runs on the mobile device the next time the device contacts the JSS.

Viewing the Status of Remote Commands

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Perform a simple or advanced mobile device search.
    For more information, see Simple Mobile Device Searches or Advanced Mobile Device Searches.

  4. Click the mobile device you want to view remote commands for.
    If you performed a simple search for an item other than mobile devices, you must click Expand images/download/thumbnails/16429877/Add_icon.png next to an item to view the devices related to that item.

  5. Click the History tab.

  6. Use the Management History pane to view completed, pending, or failed commands.

Canceling a Remote Command

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Perform a simple or advanced mobile device search.
    For more information, see Simple Mobile Device Searches or Advanced Mobile Device Searches.

  4. Click the mobile device for which you want to cancel a remote command.
    If you performed a simple search for an item other than mobile devices, you must click Expand images/download/thumbnails/16429877/Add_icon.png next to an item to view the devices related to that item.

  5. Click the History tab, and then click Pending Commands.

  6. Find the command you want to cancel, and click Cancel across from it.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.