Category filter

Hexnode UEM General Settings

You can configure the global settings that can be used to manage the enrolled devices by setting up General Settings under the Admin tab. General settings refer to the common management and admin configurations that are applied across the MDM portal and the devices as a whole. It includes the basic settings like inactivity settings, scheduled device scan, periodic sync etc., which gets applied to the devices as they get enrolled. These settings can also be modified anytime and the changes are reflected across the devices, making the device management easier.

Inactivity Settings

Device inactivity refers to the time duration for which the enrolled device has lost communication with the MDM server. Check the option Mark Inactivity to enable the inactivity settings.

  • Duration – Select the duration in either days/hours/minutes format after which the device is to be marked as inactive.
  • Mark devices as inactive after – Provide the number of days/hours/minutes after which the device is to be marked as inactive.
    • Days can take values from 1 to 30.
    • Hours can take values from 1 to 23.
    • Minutes can be chosen either as 15 / 30 / 45 minutes from the drop-down list.


MDM Settings - Inactivity Settings

Scheduled Device Scan

A device scan initiated from the MDM portal instantaneously fetches the details of the enrolled device. Device scanning can be scheduled to be performed at regular intervals by setting up Scheduled Device Scan.

Choose either of the options Daily/ Weekly in the Time settings:

  • Daily
  • Schedule the device scan on a daily basis. Now, the desired time can be set in hh:mm format to start the scanning process.

    MDM Settings - Scheduled Device Scan Daily
  • Weekly
  • By checking the Weekly option, you can select the day(s) for which the scan is to be initiated. Then you can set the time for initiating the scan in hh:mm format.

MDM Settings - Scheduled Device Scan Weekly

Periodic Sync (Android)

Periodic sync in Android devices allows users to sync their devices to the Hexnode MDM server automatically. To automatically sync devices, you can choose the Periodic sync behavior as either Background service or Foreground service. Learn more.

Battery Optimization (Android)

Battery Optimization for Android devices conserves battery power by preventing apps from syncing or accessing networks. However, you can avoid Hexnode MDM or Hexnode For Work apps from being optimized by enabling this option. If the option is enabled, the device prompts the user to disable battery optimization for Hexnode MDM/Hexnode for Work apps if it is already enabled or when the user turns it on. It ensures that the Hexnode MDM app always runs in the background to manage the device without fail.


Optimize battery for Android devices

Notes:

  1. Make sure you have the latest versions of the Hexnode MDM app or Hexnode for Work app installed on the devices.
  2. Supported on 6.0+ Legacy Android, Samsung Knox, LG GATE, Kyocera business phones and devices enrolled in Android Enterprise as Device Owner.
  3. This functionality does not work on devices that restrict Hexnode UEM from detecting the battery optimization status.

Compliance Settings

Hexnode UEM marks your device as non-compliant if any of the selected requirements under Compliance Settings is not satisfied. Learn more.

Battery Level Alert

Specifying Battery Level Alert helps generate email notifications to admin/user when the device battery level goes below the given value.

MDM Settings - Battery Level Alert

After setting the desired battery level, enable notifications under Admin > Notifications > Notify the Administrators on/Notify the associated users on > Device battery level to notify the admin/users when the device battery level falls below the value.

Global Exit Settings (Android)

The Kiosk Global Settings in the Hexnode UEM is exclusively meant for Android devices. An exit passcode can be provided here to exit Android kiosk mode with Hexnode MDM.

MDM Settings - KIOSK-Global-Settings
Note:

When a local kiosk passcode is defined via Policies, you cannot escape from the Android kiosk mode using the global exit passcode.

FileVault Settings

FileVault is a full disk encryption program on macOS 10.3 and later to protect your data and prevent unauthorized users from retrieving the information stored on your Mac. Learn More

The Hexnode MDM FileVault Certificate can be downloaded by entering the password and clicking on the download button adjacent to it.

MDM Settings - FileVault
Note:

The Hexnode MDM FileVault Certificate is employed in decrypting Mac devices using Institutional Recovery Key.

Remote View & Control Settings (Android)

The Remote View & Control Settings enables remote monitoring of devices from the Hexnode MDM console. ‘Remote View’ allows the administrator to view the user’s device screen remotely. It is supported on iOS, Android and Windows devices. With the Remote Control feature, you can virtually tap and interact with an Android device remotely.

  • Enable Remote View
  • Enabling the option adds the ‘Remote View’ section on the ‘Device Summary’ page of the Hexnode MDM portal. To configure the remote view service, the user should allow the permission request prompted or enable the necessary settings on the device when the administrator initiates a remote view session from the portal.

    Note:

    Remote View feature is supported on:

    • iOS 11.0+
    • Standard Android v5.1+
    • Devices enrolled in Android Enterprise as Device Owner
    • Windows 10 PCs with the latest versions of Hexnode Remote Assist app and Hexnode agent app installed on them

  • Enable Remote Control
  • Select this option to enable remote control over Samsung Knox devices.

    Note:

    Remote Control feature is supported by Samsung Knox devices.

  • Prompt user to install Remote View app while in kiosk mode (Android)
  • Check this option to prompt the user to install Hexnode UEM’s Remote View App even in kiosk mode.

Remote View and Control settings in Hexnode MDM

Location Tracking

Location Tracking feature in Hexnode enables organizations to find lost or misplaced devices, fetch real-time device location as well as the complete history of locations traversed by the device previously.

Prompt-to-enable-location-tracking
  • Prompt to enable location services: On checking this option, Android devices will be prompted to enable location services if it is disabled. The user is also prompted when he/she tries to disable location tracking. Use high accuracy (location tracking using GPS, Wi-Fi, mobile networks and sensors) mode for better location accuracy.

Data Restriction Settings (Android)

Data Restriction for Android lets you generate prompts on the devices for the users to activate VPN for mobile data management.

Notes:

  • Make sure you have installed the latest version of the Hexnode MDM/ Hexnode for Work app on Android devices.
  • Ensure that ‘Configure VPN’ under Policies > Android > Advanced Restrictions is enabled in all the policies associated with the devices undergoing mobile data management.


MDM Settings - Data Restriction Settings
  • Prompt to activate VPN: Checking this option gives a prompt to activate VPN for mobile data management during device enrollment process or after an update of the Hexnode app.
  • Prompt to activate VPN while in kiosk: Once the Hexnode app updates, the device prompts VPN activation while in kiosk. Checking this option gives a prompt to activate VPN while the device is in kiosk mode, whereas unchecking results in disabling VPN activation prompts, preventing mobile data management as well.

Android Lost Mode Settings

Hexnode UEM’s Lost Mode secures valuable information on your corporate devices in case of device theft. It lets you remotely lock down the lost Android devices. Any access to the device features will be restricted, even the notifications. Learn More

  • Auto Lockdown
  • When you check this option and provide the number of days of inactivity, the devices will be automatically locked down after the specified days of inactivity.

  • Show Wi-Fi button in the launcher
  • Check this option so that a user can see the Wi-Fi button in the device launcher even if the device has been locked down.

  • Show Mobile data button in the launcher
  • Check this option for enabling a user to see the Mobile data button in the device launcher even while in the locked down mode.

  • Phone Number
  • Enter a valid contact number that can be dialled from the lock screen to reach the owner.

  • Message
  • Enter a short message to be displayed on the lock screen.

  • Footnote
  • Enter a valid footnote to be displayed at the bottom of the lock screen.

  • Disable ‘Lost Mode’ on ROM enrolled devices
  • Check this option to disable lost mode after ROM enrollment. A custom ROM configured device boots up in ‘Lost Mode’ with options to connect to the internet. Once the device is connected to the internet, it gets enrolled in Hexnode UEM. Unchecking this option lets the device to continue in ‘Lost Mode’ even after enrollment.

MDM Settings - Android-Lost-Mode

Windows Custom Recovery Message

When you configure the Windows Custom Recovery Message and URL, it appears on the pre-boot recovery screen of the Windows 10 PC’s device, encrypted using BitLocker, thereby helping the users recover their BitLocker Recovery key.

MDM Settings - Windows Custom Recovery Message

Knox Settings

Checking Enforce Knox Launcher from Hexnode UEM enables the Hexnode Kiosk Launcher for Samsung devices using the Samsung API.

MDM Settings - Knox-Settings

Timezone settings for the Reports

Hexnode UEM with its Timezone settings lets you choose your desired time zone using which various reports are to be generated.

Timezone-settings-for-the-reports

Live Chat Support Settings

Check the Disable Chat Module option to disable the chat button on the bottom-right corner of the Hexnode MDM console.

MDM Settings - Disable-Chat-Module

Map Settings

Hexnode UEM allows 2,500 location fetches as well as 25,000 map loads a day for all the devices in the portal either by using the default map or with the Google Maps. OpenStreetMap using Leaflet is the default map available in the portal. To fetch location details using Google Maps, you must integrate the Google Maps API Key and Google Cloud Platform billing account with Hexnode.

View maps on the portal with Default Map or Google Maps

Note:

Adding an invalid Google Map JavaScript API key will prevent Hexnode UEM from fetching locations using Google Maps on the portal.

Hexnode System Agent Settings

During the ROM configured enrollment of Android devices, the Hexnode System Agent app comes in handy. System Agent app grants the system permission to the Hexnode MDM app.

The Hexnode MDM app is to be left unsigned whereas the System Agent app needs to be signed and deployed by the OEM vendor. With this, you no longer have to manually download and re-sign every new Hexnode MDM app version. The latest updates can be received directly from the Play Store.

Activate Device Administration for System Agent app and block its removal by placing it in system/priv-app folder.

MDM Settings - System Agent App Settings
  • Enable Hexnode System Agent: Check this option to enable the communication between the Hexnode MDM app and the Hexnode System Agent app.
  • Show Hexnode System Agent icon: Check this option to display the Hexnode System Agent app icon on the device launcher.

Hexnode Update Helper

Hexnode Update Helper downloads and installs Hexnode app updates silently on Windows devices.

  • Update Hexnode apps silently on Windows devices: All the Hexnode apps like Hexnode MDM agent, Hexnode Update Helper service, etc., will be automatically updated to their latest versions when the option remains enabled.
  • Install/Update Hexnode Remote Assist app on Windows devices: Hexnode Remote Assist app installed on the device facilitates remote view on Windows devices. When the option is checked, the Hexnode Remote Assist app gets installed silently on the enrolled devices. It also enables automatic update of the Hexnode Remote Assist app on the previously installed devices.

Configure Hexnode Update Helper settings from the Admin tab

Hexnode Application Settings

Hexnode Application settings let admins specify whether to update the Hexnode MDM app on Android devices automatically. The app can be updated silently only on Samsung Knox, LG Gate, Kyocera business phones, rooted Android, Android Enterprise devices, Android devices with Hexnode MDM installed as a system app, and on devices that have Hexnode System Agent app as a system app.
Hexnode Application Settings
Check the option ‘Auto Update Hexnode MDM App’, to update the Hexnode MDM app silently.

  • Admin Settings