Deploying MDM actions

With BigFix 10 MDM, you can perform various actions like Lock Device, Wipe, Restart, Shutdown, Remove Policy, Deploy BigFix Agent, Deploy MDM Application, Enroll Windows 10 devices using MDM Actions.

Note:
  • You can deploy MDM actions only to the MDM managed devices.
  • You can also deploy MDM actions to correlated devices that have an MDM representation.
  • Certain actions are operating system specific, and each action has an operating system logo on it to notify the users. If you find both Windows and macOS logo, it represents that action can be applied to both the operating systems.
  • Deploying the Deploy BigFix Agent action requires installer packages to be pre-staged to work properly. For Mac, see Prestage BigFix installer for macOS. For Windows, see Prestage BigFix Installer for Windows.
To perform different MDM Actions, follow these steps:
  1. Open the WebUI application.
  2. Click Apps and select MDM from the list.
Lock Device
This action is used only to lock the remote devices that are stolen or lost. The Lock action helps you to safeguard the lost or stolen devices, and in case the device is found, the device can be unlocked using the recovery pin.
Note: Lock action is available only to the macOS devices. Lock action invoked against Windows MDM device will not lock the device.

  1. Select the Lock Device action.
  2. Click Edit Devices to add/remove the devices.
  3. Set Recovery Pin and Enter Lock Message.
  4. Click Deploy to deploy the action to the targeted devices.
Wipe
This action is used to erase the data on the remote device, even if the device is locked. The Wipe action helps you to completely erase the device(s) from the BigFix management without warning the end-user.
Note:
  • The recovery code only applies to macOS devices. Windows devices will execute the Wipe action while ignoring the recovery pin.
  • Users are only able to wipe one device at a time and cannot execute wipe on device groups.

  1. Select the Wipe action.
  2. Click Edit Devices to add/remove the devices.
  3. Set Recovery Pin.
  4. Click Deploy to deploy the action to the targeted devices.
Restart
This action is used to restart the targeted devices.

  1. Select the Restart action.
  2. Click Edit Devices to add/remove devices.
  3. Click Deploy to deploy the action to the targeted device.
Shutdown
This action is used to shutdown the targeted devices.

  1. Select the Shutdown action.
  2. Click Edit Devices to add/remove the devices.
  3. Click Deploy to deploy the action to the targeted devices.
    Note: Shutdown action is available only for macOS and not for Windows.
Remove Policy

You can remove policies from selected devices using this action. You can only remove policies on devices that are enrolled in MDM.

Note: Deploying remove policies on macOS devices that do not have the selected policy installed will result in a failed action.

  1. Select the Remove Policy action.
  2. Click Edit Devices to add/remove the devices.
  3. Click Edit Policies to select the policy that needs to be removed.
  4. Click Deploy to deploy the action to the targeted devices.