Category filter
Getting started with Windows device management
Microsoft’s Windows operating system is a family of graphical operating systems developed to run on personal computers and mobile devices. Hexnode UEM supports a wide range of features for Windows 10 or later devices. Get to know more about how to get started with Windows right here.
Enroll Windows devices
Hexnode UEM supports the management of PCs running Windows 10 or later. There are a number of methods to enroll your Windows device in Hexnode UEM. Follow the link below to learn more about Windows enrollment.
Configure restrictions
You can block certain features on your Windows devices by setting up appropriate restrictions. Hexnode UEM showcases a set of restrictions that prevent users from accessing restricted features on the device. Go through the link below to learn more about setting up restrictions on your Windows device.
Manage apps
Manage, distribute, and remove the apps from your Windows devices efficiently. You can also choose the device to show non-compliance in the presence of blocklisted apps.
The app gets installed silently on your device without any user intervention.
Learn more about installing store apps silently on your device.
Users can choose the device to show non-compliance in the presence of a blocklisted app. Allowlisting renders all apps other than the specified ones as blocklisted. Either way, Hexnode UEM identifies them and marks the devices with blocklisted apps as non-compliant.
Learn more about blocklisting or allowlisting apps on the device.
You can restrict the Windows device to a single app or a few selected applications with kiosk mode. Locking a device in kiosk mode blocks the users from accessing any other apps and functionalities on the device. Hexnode supports single and multi-app kiosk mode.
Single app kiosk mode enables you to lock down the endpoints to a purpose-specific device running only a single app. Learn more on how to set up single app kiosk mode.
Setting up single app kiosk mode…
Multi-app kiosk mode is a restrictive mode in which the device is locked-down to a set of work-critical apps. No apps other than the allowlisted ones can be accessed by the user. Learn more on how to set up multi-app kiosk mode.
Setting up multi app kiosk mode…
Prevent MDM Removal
The MDM profile on Windows 10/11 PC can be made non-removable using Hexnode UEM. This provides the organization with better control over the devices, and the users won’t be able to remove the Hexnode UEM profile without the administrator’s permission. Get to know more about making MDM non-removable from the following link.
Network security
Ensure utmost security for your network by configuring the Wi-Fi, VPN, Email and Exchange ActiveSync settings from the Hexnode UEM console. Get to know more about configuring network settings by following the links below:
Security
Ensure the safety of your device by performing full disk encryption on your device with the BitLocker feature of Hexnode UEM. Follow the link below to learn more about managing BitLocker with Hexnode UEM.
Hexnode Access enables users to log into Windows devices using their cloud-based identity provider (IdP) credentials. By integrating with services like Microsoft Entra ID and Google Workspace, Hexnode Access simplifies the login process and enhances security. Learn more about it using the following link.
Configuring the Simple Certificate Enrollment Protocol (SCEP) for Windows devices helps organizations with enabling certificate-based authentication for network services like Wi-Fi, VPN, and email. By setting up SCEP through the Hexnode UEM console, organizations can enhance security and prevent unauthorized access to their network services. Follow the link below to learn more.
Setting up media management settings on managed devices can control access to external media. Learn more about it using the link.
Threat management
To guard your Windows devices against malware and threats, you can remotely apply Windows Defender policies on your work devices. This offers comprehensive real-time protection for your devices. In addition, you can also configure the Windows Defender Application Guard, which ensures isolated browsing for non-trusted sites.
Learn more about Windows Defender configuration and management at the following link.
Configurations
Screensaver displays various visual elements when devices are inactive, enhancing both aesthetics and security. By setting up screensavers, administrators can showcase company branding and ensure a consistent visual identity across devices. Learn more through the following link.
Chrome extensions enhance the browsing experience by adding functionalities like ad blocking, password management, etc.
Patches & Updates
This feature ensures optimal performance by managing both Feature Updates and Quality Updates across all devices. Follow the link to learn more about it.
Configuring Windows Server Update Services (WSUS) helps in managing the distribution of Microsoft updates to Windows devices on a network. Learn more about it using the link below.
Configure Windows Server Update Services…
The Patches and Updates feature helps to manage Windows Update policies for devices. The Windows Update Preferences policy lets you configure settings for update installation, reboot behavior, and user notifications, ensuring a smooth and efficient update process within your organization. Learn more using the link below.
Configure Windows Update end-user experience…
Troubleshooting
This feature supports troubleshooting by allowing remote access to the device even when users are not present by their endpoints. Learn about it using the following link.
