Category filter

Automate Device Management Tasks with Hexnode UEM

Quick Summary: The Automations feature in Hexnode UEM enables scheduled or event-triggered deployment of scripts, files, certificates, and restrictions. Unlike static Policies, Automations focus on the dynamic execution of operations based on time or device activity.

Platform Support Summary

Platform Support Status
Mobile Android, iOS
Desktop Windows, macOS, Linux
Others tvOS, Zebra Printers

1. Core Workflow: Creating an Automation

Phase 1: Initiation

  1. Navigate to Automate > New Automation.
  2. (Optional) Select Choose from templates for pre-configured workflows.
  3. Select the target Platform.
    Screenshot from Hexnode UEM where the OS platform to automate any device management tasks is being chosen. Navigate to the Automate tab in the hexnode console, click on New automation and choose platform.
  4. Define Automation Name and Description.

Phase 2: Action Configuration

Choose the specific task to automate. Actions differ from “Remote Actions” as they are saved within a logic-based schedule rather than executed as a one-time command.

Action Category Supported Platforms Key Capabilities
Patches/Updates Windows, macOS Auto or manual patching for security compliance.
App Distribution Windows, macOS Deploy Store and Enterprise apps with script handling.
Policy All Dynamically Associate or Remove specific policies.
Scripts Windows, macOS, Linux, Zebra Execute .ps1, .sh, .zpl, etc., from the repository.
Scans All (except Apple TV) Scan for Apps, Updates, Location, or Sync Local Accounts. The actions supported varies with OS platforms.
Alerts All (except Apple TV, Linux, and Zebra printer) Send custom messages to end-user devices.
Security All Lock, Wipe, Lost Mode, or Rotate Admin Passwords. The supported actions vary with OS platforms.
Kiosk Android Remotely activate/deactivate kiosk mode.
App Management All Install/Uninstall applications and request app feedback and remotely launch app. The actions supported varies with OS platforms.
Groups & Domains Windows Join/unjoin devices to/from an Active Directory domain.
Device Controls All Power Off, Restart, Rename, Set/Clear Password. The actions supported varies with OS platforms.
Network iOS Enable/Disable Data Roaming and Personal Hotspot. Also, remotely update eSIM.
User Controls Windows, macOS, Linux Create user accounts over the air.
Device Encryptions Windows Force BitLocker Encryption/Decryption, Unlock BitLocker, and Rotate BitLocker Recovery Password.
File Management macOS, Android Deploy/remove files from a specific location on devices.
Registry Configurations Windows Manage Windows Registry settings with 2 options: Registry Editor and Registry Snapshot.
Files Zebra Deploy fonts and templates to Zebra printers.
Updates Zebra Update firmware on Zebra printers.

Phase 3: Settings and Schedule

Define when the automation triggers.

  • Time-Based Triggers:
    • ASAP: Immediate execution upon saving.
    • Once: Specific MM/DD/YYYY and HH/MM.
      Screenshot of the Settings & Schedule page for creating an automation. The page is depicting how to trigger an automation at a particular time.
    • Repeat: Daily, Selected Days, or Monthly.
  • Activity-Based Triggers:
    • Enrollment: Execution upon initial device scan.
    • SIM Status: Insertion, removal, or switching.
    • Compliance: Device, Location (Geofencing) non-compliance. Create a compliance policy to define the device compliance criteria.
    • Inactivity: Triggered when a device is offline for $X$ minutes (Android only). It can be used to initiate actions such as Lock Device, Enable Lost Mode, and Wipe Device.

    Screenshot showing how to configure triggers for automation in Hexnode UEM purely based on device activities like device enrollment, SIM insertion/removal/switching or device/location compliance. Navigate to the Automate tab, create new automation, choose an action, then choose the required triggers from the Settings and Schedule page.

Phase 4: Target Filtering

Narrow down the automation scope using Include/Exclude Groups or Custom Filters.

  • Logic Operators: Use AND (must meet all criteria) or OR (must meet at least one).
  • Filter Categories:
    • Device: Model, Serial, OS Version, Battery Level, Storage.
    • User: Username, Email, AD Department.
    • Network: Wi-Fi SSID, IP Address, ICCID.
    • Status: Rooted/Jailbroken, Lost Mode, Kiosk status.

    Screenshot showing how to add conditions and filters to associate targets for an automation. Admins can use various filter categories like device, user, network or status and assign the designated values to target specific endpoints.

The complete list of available filters
Main category Sub- categories
Device
  • Apple ADE
  • Asset tag
  • Available internal storage
  • Battery level
  • BitLocker Policy Compliance
  • Department
  • Device ID
  • Device model
  • Device notes
  • Device type
  • Encryption Status
  • Enrolled time
  • Enterprise Management Type
  • Installed RAM
  • Last checked-in time
  • Manufacturer
  • MEID
  • OS name
  • OS version
  • Ownership
  • Platform
  • Processor name
  • Serial number
  • Supervision
  • Total internal storage
  • TPM version
  • UDID
  • Used internal storage
User
  • Alternate email
  • Department (AD)
  • Domain name
  • Email
  • Office location (AD)
  • sAMAccountName
  • Title (AD)
  • User type
  • Username
Network
  • Bluetooth MAC address
  • Current carrier network SIM 1
  • Current carrier network SIM 2
  • Current MCC
  • Current MNC
  • Ethernet IP Address
  • Ethernet MAC address
  • Home carrier
  • Home country
  • ICCID SIM 1
  • ICCID SIM 2
  • IMEI SIM 1
  • IMEI SIM 2
  • IMSI
  • International data roaming
  • Last connection date
  • Personal Hotspot
  • Phone number SIM 1
  • Phone number SIM 2
  • Roaming enabled
  • SIM carrier network
  • Subscriber carrier network (iOS)
  • Subscriber MCC
  • Subscriber MNC
  • Wi-Fi IP Address
  • Wi-Fi MAC address
  • Wi-Fi SSID
Device Status
  • Activity status
  • Application compliance status
  • Compliance status
  • Enrollment status
  • Geofence compliance status
  • Jailbroken
  • Kiosk mode
  • Lost mode
  • MDM profile
  • Password compliance status
  • Rooted

Phase 5: Review

Review the configurations. Click Save.

2. Managing the Automation Lifecycle

  • Active Automations: Monitor status, versioning, and “Run Now” for manual overrides.
  • Templates: Reusable workflows. Pre-configured templates by Hexnode are system-protected.
  • Archives: Repository for disabled automations; allows for restoration or permanent deletion.
  • Activity Feed: A chronological log of every automation event across the fleet.

Automations