Category filter
Automate Device Management Tasks with Hexnode UEM
Quick Summary: The Automations feature in Hexnode UEM enables scheduled or event-triggered deployment of scripts, files, certificates, and restrictions. Unlike static Policies, Automations focus on the dynamic execution of operations based on time or device activity.
Platform Support Summary
| Platform | Support Status |
|---|---|
| Mobile | Android, iOS |
| Desktop | Windows, macOS, Linux |
| Others | tvOS, Zebra Printers |
1. Core Workflow: Creating an Automation
Phase 1: Initiation
- Navigate to Automate > New Automation.
- (Optional) Select Choose from templates for pre-configured workflows.
- Select the target Platform.
- Define Automation Name and Description.
Phase 2: Action Configuration
Choose the specific task to automate. Actions differ from “Remote Actions” as they are saved within a logic-based schedule rather than executed as a one-time command.
| Action Category | Supported Platforms | Key Capabilities |
|---|---|---|
| Patches/Updates | Windows, macOS | Auto or manual patching for security compliance. |
| App Distribution | Windows, macOS | Deploy Store and Enterprise apps with script handling. |
| Policy | All | Dynamically Associate or Remove specific policies. |
| Scripts | Windows, macOS, Linux, Zebra | Execute .ps1, .sh, .zpl, etc., from the repository. |
| Scans | All (except Apple TV) | Scan for Apps, Updates, Location, or Sync Local Accounts. The actions supported varies with OS platforms. |
| Alerts | All (except Apple TV, Linux, and Zebra printer) | Send custom messages to end-user devices. |
| Security | All | Lock, Wipe, Lost Mode, or Rotate Admin Passwords. The supported actions vary with OS platforms. |
| Kiosk | Android | Remotely activate/deactivate kiosk mode. |
| App Management | All | Install/Uninstall applications and request app feedback and remotely launch app. The actions supported varies with OS platforms. |
| Groups & Domains | Windows | Join/unjoin devices to/from an Active Directory domain. |
| Device Controls | All | Power Off, Restart, Rename, Set/Clear Password. The actions supported varies with OS platforms. |
| Network | iOS | Enable/Disable Data Roaming and Personal Hotspot. Also, remotely update eSIM. |
| User Controls | Windows, macOS, Linux | Create user accounts over the air. |
| Device Encryptions | Windows | Force BitLocker Encryption/Decryption, Unlock BitLocker, and Rotate BitLocker Recovery Password. |
| File Management | macOS, Android | Deploy/remove files from a specific location on devices. |
| Registry Configurations | Windows | Manage Windows Registry settings with 2 options: Registry Editor and Registry Snapshot. |
| Files | Zebra | Deploy fonts and templates to Zebra printers. |
| Updates | Zebra | Update firmware on Zebra printers. |
Phase 3: Settings and Schedule
Define when the automation triggers.
- Time-Based Triggers:
- Activity-Based Triggers:
- Enrollment: Execution upon initial device scan.
- SIM Status: Insertion, removal, or switching.
- Compliance: Device, Location (Geofencing) non-compliance. Create a compliance policy to define the device compliance criteria.
- Inactivity: Triggered when a device is offline for $X$ minutes (Android only). It can be used to initiate actions such as Lock Device, Enable Lost Mode, and Wipe Device.
Phase 4: Target Filtering
Narrow down the automation scope using Include/Exclude Groups or Custom Filters.
- Logic Operators: Use AND (must meet all criteria) or OR (must meet at least one).
- Filter Categories:
- Device: Model, Serial, OS Version, Battery Level, Storage.
- User: Username, Email, AD Department.
- Network: Wi-Fi SSID, IP Address, ICCID.
- Status: Rooted/Jailbroken, Lost Mode, Kiosk status.
The complete list of available filters
| Main category | Sub- categories |
|---|---|
| Device |
|
| User |
|
| Network |
|
| Device Status |
|
Phase 5: Review
Review the configurations. Click Save.
2. Managing the Automation Lifecycle
- Active Automations: Monitor status, versioning, and “Run Now” for manual overrides.
- Templates: Reusable workflows. Pre-configured templates by Hexnode are system-protected.
- Archives: Repository for disabled automations; allows for restoration or permanent deletion.
- Activity Feed: A chronological log of every automation event across the fleet.


