How to view and monitor device details in Hexnode UEM

This article will guide you on viewing and monitoring the entire details associated with your managed devices.

Device monitoring and management is essential to ensure data security for businesses of all sizes. More and more organizations are resorting to telecommuting because they cannot afford to leave their devices unattended due to the growing security concerns. Hence, these setbacks are driving enterprises to use modern device management solutions to attend to their large fleet of devices.

With Hexnode, you can have a hawk’s eye view of all your managed devices and apply granular management controls over the air. Its monitoring capabilities make sure that the endpoints always adhere to the organizational policies. The device details page in Hexnode offers effortless management of Apple, Android, and Windows devices.

Device details page

The device details page houses the complete information about a device, such as its user, compliance info, number of installed applications, policies applied to it, and much more. It opens up a plethora of management and monitoring capabilities that can be executed from a single window.

To access the device details page,

1. Head on to Manage > Devices on the UEM portal.
2. Click on the required device to view its complete management info.
3. Initiate a Scan Device action to fetch the recent information about the device.

The entire device details page can be categorized into the following sections:

1. Basic info: This section presents the name and current user of a device. You can directly change the device name from here, which would automatically reflect in the UEM portal and the agent app on the device. However, changing the device name here will not change its name on the device. You can also optionally add a description to the device using the description field located below the name of the user.
2. The ribbon that shows the device management summary: The ribbon displays a quick overview of the device management info. It includes the following details:
   • Apps: It displays the total number of apps installed on the device. In the case of BYO devices, it’ll show only the number of apps installed via the UEM.
   • Policy: It displays the total number of policies associated with the device.
   • Active: It shows the activity status of the device, i.e., whether the device is active or not.
   • Kiosk Enabled (Android, iOS and Windows devices): It displays whether the kiosk mode is enabled on the device or not.
   • Data Protection (macOS devices): It checks whether the macOS device has enabled data protection (encryption) or not.
   • Passcode (iOS devices): It displays whether the iOS device has enabled a passcode on it.
   • Compliant: It shows whether the device complies with the compliance criteria set by the administrator.
   • Last Checked-in: It shows the last reported time of the device with the Hexnode server.
3. Remote Actions: The Actions dropdown menu lists many quick commands that can be instantly executed on the device. Some of the actions include scanning device locations, enforcing software updates, broadcasting messages, wiping or locking devices, and so on. The actions available for endpoints depend on their OS platforms, agent type, or device management mode.
4. Activity Feed: This event-based timeline displays all the logs associated with the device. It comprises all the policies, remote actions, notification alerts, compliance failure, geofence breach, and so on.
5. Device details tabs: Hexnode offers a multitude of device management tabs within the device details page. These tabs that simplify inventory management include:
   1. Device Summary: The Device Summary tab presents a quick summary of the device with the following details:
      Hardware Info

      It lists the entire information related to the device hardware, which includes:

      • Agent Type: It shows whether the Android device belongs to General Android, Samsung Knox, Kyocera, or LG GATE.
      • Enterprise Management Type: It refers to the management mode employed for managing Android devices. The available modes are Generic Android (legacy method) and Android Enterprise (Device Owner or Profile Owner).
      • Rooted: It shows whether the Android device is rooted or not.
      • Previously Rooted: Hexnode checks whether the Android device is previously rooted or not.
      • Supervision: It shows whether supervision has been enabled for iOS or tvOS devices.
      • Model: It displays the model of the device.
      • Manufacturer: It displays the manufacturer of the Windows device.
      • Type: The different device types include Smartphone, Tablet, Notebook, Laptop, and Apple TV.
      • OS Version: It displays the current OS version of the device. iOS and macOS devices also include the Rapid Security Updates version (denoted by alphabetical letters and enclosed in brackets) following the OS version.
      • RAM: It specifies the RAM of your macOS device.
      • Device Capacity: It gives an insight into the used and total storage space on the device.
      • Battery Level: It specifies how much battery is left on the device so that administrators can keep a close eye on the device’s battery life. They can also set notification alerts if the battery falls below a specified percentage.

      The hardware-related info given below is specific to Windows devices unless specified otherwise.

      • Processor
        • Name: It displays the name of the processor. It applies to both Mac and Windows devices.
        • Manufacturer: It shows the manufacturer of the Windows processor.
        • Processor count: It shows the number of cores present in the processor. It is available for both Windows and Mac devices.
        • Architecture: It shows whether the processor on your Windows device is 32-bit or 64-bit.
        • Clock Speed: It indicates the clock speed of the Windows processor.
      • Operating System
        • OS Name: It displays the name of the Windows operating system.
        • Version: It shows the Windows version of the device.
        • OS Build: It specifies the operating system build running on the device.
        • Windows Directory: It specifies the directory of the operating system.
        • System Directory: It specifies the path where the operating system files are stored.
        • System Type: It indicates whether the device is running a 32-bit or 64-bit version of Windows.
      • Physical Memory
        • Manufacturer: Displays the name of the manufacturer of the system RAM.
        • Type: It displays the type of RAM installed on the device.
        • Installed RAM: It shows the capacity of the memory module (RAM) installed on the system.
        • Speed: It displays the memory speed, i.e., the time taken to process data after receiving a request from the processor.
      • Graphics
        • Name: It shows the name of the graphic card (GPU) in the system.
        • Status: It displays the status of the graphics card to identify if it is functioning properly.
      • Disk
        • Media Type: It displays the disk type for the drive.
        • Model: It shows the model number of the hard disk.
        • Capacity: It displays the storage capacity of the hard disk.
      • Drive
        • Drive Name: It displays the name of the drive.
        • Description: It displays whether the drive is a compact disk or a local disk.
        • File System: It shows the type of file system on the device.
        • Usage: It shows the disk usage of the device.
        • Root Directory: It specifies the root folder of the drive.
        • BitLocker Encryption Status: It shows whether the drive is BitLocker encrypted or not.

      Enrollment Details

      • Enrollment status: It shows whether the device is currently enrolled in the portal or disenrolled from it.
      • FCM registration status (Android): It shows whether Google’s notification service can send notifications to the device. If the status remains failed, open Settings in the Hexnode app on the device > tap the options icon to the top-right > Update FCM.
      • Hexnode UEM App installed: It shows the installation status of the Hexnode UEM app. The app will be automatically installed on the Windows device as it gets enrolled in the portal.
      • Hexnode Service(Agent) App: It displays the installation status of the Hexnode agent app on your Windows device. If the app is not installed, the status will show “No.” You can use the refresh button beside the status to initiate the installation of the Hexnode agent app. If the app is installed, the status will show “Installed,” along with the version of the agent app.
      • Hexnode Remote Assist app installed: It displays the installation status of the Hexnode Remote Assist app on the Windows device. If the status is ‘No’, use the refresh button to reinitiate the installation process.
      • WNS registration status: It shows whether the Windows Push Notification Services (WNS) is active or not. If WNS registration fails, initiate sync from the device end (Settings > Accounts > choose the UEM account > Info > Sync).
      • Work Account Creation: It shows whether the work account creation is successful on the device enrolled via Android Enterprise.
      • UEM App installed: It shows whether the UEM agent app is installed on the iOS or macOS device. In case the status shows ‘No’ or ‘Unmanaged’, use the refresh icon to install or initiate management on the device, respectively.
      • Enrolled date: It indicates the date on which the device was enrolled in the portal.
      • Last checked-in: It refers to the last reported time of the device with the Hexnode server.
      • Last scanned: It indicates the time when the device was last successfully scanned from the UEfM server.
      • Kiosk mode status: It indicates whether the kiosk mode is active on the device. If no kiosk policy is attached to the device, it’ll show that the ‘Kiosk Mode is inactive as the policy is not applied’.
      • Device ID: It refers to the unique identifier of the device.

      Remote View

      The remote view module available in the Device Summary tab enables administrators to access remotely operating desktops, mobile devices and other endpoints in real-time. The feature works on Android, iOS, macOS, and Windows devices. Apart from the live preview of devices, you can also remotely administer and control Samsung Knox and rooted Android devices.

      Live Terminal (macOS)

      Hexnode’s Live Terminal for Mac lets admins launch the terminal and execute commands without even physically accessing the device.

      Recent Location

      The Recent Location wizard showcases the locations and last reported time of the device. The ‘See History’ option allows you to view the complete list of locations traversed by the device. Note that location tracking must be enabled for the device to fetch its recent location.

      Compliance Info

      Compliance policies refer to the set of company requirements that the users and devices must meet to help protect organizational data. The Compliance Info provides details on the device’s compliance with each of these criteria set by the administrator. The different compliance parameters available for monitoring endpoints include:

      • UEM profile present: It specifies whether the UEM profile is present on the device or not.
      • Passcode compliance: The device will be marked as non-compliant if it doesn’t meet the password rules enforced via the password policy or if there is no password set on the device.
      • Application compliance: This compliance parameter checks for missing required apps or the presence of blocklisted apps on the device. By clicking on the ‘Blocklisted app count’ option, you can view the complete list of blocklisted apps on the device. Similarly, the ‘Missing app count’ option will showcase the missing required apps on the device. You can also apply an instant install command to install the missing apps on the device by clicking on the ‘Install Missing Apps’ button.
      • Profile compliance: It shows whether the device complies with the UEM profile associated with it.
      • Data protection enabled: It displays whether the device is encrypted or not.

   2. Device Info:

      The Device Info page presents the device’s hardware, software, network, and security-related information.

      Device Info

      • Model Name: It shows the name of the device model.
      • Model Identifier: It displays the identifier of the iPhone or iPad model.
      • Manufacturer: It displays the name of the manufacturer of the Android device.
      • Type: It displays the details regarding the device type, i.e., whether it is a smartphone, tablet, notebook, laptop or Apple TV.
      • OS Version: It displays the current OS version on the device. iOS and macOS devices also include the Rapid Security Updates version (denoted by alphabetical letters and enclosed in brackets) following the OS version.
      • OS Name: It shows the name of the operating system on the Windows device.
      • License Activation Date: It is the date when a Windows device’s operating system was officially activated using a valid product key or digital license. Here, the license activation date retrieved is the OS installation date.
      • Version: It displays the Windows version of the device.
      • OS Build: It shows the operating system build running on the Windows device.
      • Serial No: It shows the serial number of the device. The serial number of an Android device can be fetched only if it is enrolled in the Android Enterprise program.
      • UDID: It refers to the unique ID assigned to the device for identification purposes.
      • IMEI: It displays the International Mobile Equipment Identity (IMEI), which may be useful for retrieving stolen devices.
      • MEID: It shows the Mobile Equipment Identifier (MEID) of the device.
      • Ownership: It shows whether the device is corporate-owned or personal-owned.
      • Device Capacity: It shows the total storage capacity of the device.
      • Battery Level: It displays how much battery is left on the device. Here, you can also set notification alerts if the battery falls below a specified percentage.
      • Locator Services (Find My): It shows whether ‘Find My’ has been set up on the iPhone or iPad.
      • Department: It defines the department to which the device belongs. Here, you can add a new department or edit the existing department of the device.
      • Asset Tag: Here, you can add or edit the unique identification code or number associated with the device.
      • Device Notes: Any custom notes that you’ve defined for the device will be displayed here.

      Activation Lock (Only for iOS and macOS)

      • Activation Lock: It shows whether Activation Lock is enabled or disabled on the device.
      • Activation Lock Bypass Code: It displays the code required to bypass the Activation Lock mode on the device.

      Network Info

      • Phone No SIM: It shows the phone number of the SIM.
      • IMEI SIM: It displays the IMEI of the SIM.
      • IMSI SIM: It shows the International Mobile Subscriber Identity (IMSI) of the SIM.
      • Is Roaming SIM: It shows whether the SIM can operate on more than one network within its home country.
      • ICCID: It shows the Integrated Circuit Card Identifier (ICCID) of the SIM card.
      • SIM Carrier Network: It shows the SIM carrier network on the device.
      • Subscriber Carrier Network: It displays the subscriber carrier network on the device.
      • Current Carrier Network: It displays the current carrier network on the device.
      • Carrier Setting Network: It shows the carrier setting network on the device.
      • Roaming Enabled: It shows whether roaming is enabled on the device or not.
      • Is Roaming: It shows whether the device connects to the internet on any network other than the home network.
      • International Data Roaming: It shows whether the device uses data when it is in a foreign country.
      • Home Carrier: It shows the home network carrier of the connection.
      • Home Country: It displays the home country of the network connection.
      • Current Carrier: It shows the mobile network operator used by the Android device.
      • Current Country: It displays the current country code of the Android device.
      • Network Type: It displays the kind of network the Android device is connected to.
      • Last Connection Date: It refers to the date on which the last network connection was established on the Android device.
      • Wi-Fi IP Address: It displays the IP address of your router.
      • Ethernet MAC Address (Windows): When dealing with multiple Ethernet interfaces, it retrieves the MAC addresses for each individual interface.
        1. Ethernet MAC Address (Interface 1): It displays the MAC address of the first ethernet interface.
        2. Ethernet MAC Address (Interface 2): It displays the MAC address of the second ethernet interface.
      • Ethernet IP Address: It shows the IP address of your Android device on your local network.
      • Hotspot Enabled: It shows whether the device is sharing its data connection using the Personal Hotspot feature.
      • Bluetooth MAC: It shows the Bluetooth address that can be used to uniquely identify a Bluetooth device.
      • Ethernet MAC: It displays the MAC address of the ethernet connection.
      • Wi-Fi MAC: It displays the unique MAC address of the Wi-Fi network.
      • Wi-Fi SSID: It shows the Wi-Fi network’s Service Set Identifier (SSID).
      • Subscriber MCC: It displays the subscriber Mobile Country Code (MCC) used in conjunction with the MNC to identify the mobile network operator used by the devices.
      • Subscriber MNC: It displays the subscriber Mobile Network Code (MNC) that works in combination with MCC to identify the device’s mobile network operator (carrier).
      • Current MCC: It shows the current 3-digit MCC.
      • Current MNC: It displays the current 3-digit MNC.

      Device Status Info (Only for Windows)

      • AntiSpyware Signature Status: It shows the signature status of the antispyware on the device, indicating whether it is up to date, inactive, or needs updates.
      • Antivirus Signature Status: It shows the signature status of the antivirus on the device, indicating whether it is up to date, needs updates or not applicable.
      • Antivirus Status: It displays the current state of the antivirus software on the device, indicating whether it is active, disabled, monitoring is inactive, or not applicable.
      • Device Guard Hypervisor Enforced Code Integrity (HVCI) status: It shows the current state of HVCI, indicating whether it is active, requires a reboot, not configured, or if virtualization-based security (VBS) is inactive. HVCI uses virtualization to enforce strict policies, allowing only trusted code to run at the hypervisor level. This effectively protects the operating system from malicious attacks.
      • Device Guard Local System Authority (LSA) credential guard status: It displays the current state of LSA Credential Guard, indicating whether it is active, needs a reboot, lacks licensing, isn’t configured, or is VBS inactive. LSA Credential Guard protects sensitive information such as credentials, even if the kernel or privileged parts of the operating system are compromised.
      • Device Guard System Guard status: Device Guard System Guard determines the level of protection against unauthorized software execution. The field shows the status of Device Guard System Guard, whether active, requiring a reboot, not configured, or indicating that the system doesn’t meet hardware requirements.
      • Device Guard Virtualization-based security hardware requirement status: It displays whether the system has the essential hardware to support VBS. Possible statuses include System meets hardware requirements, Secure Boot required, DMA (Direct Memory Access) protection required, Not supported for guest VM, and Unavailable.
      • Device Guard Virtualization-based security status: It provides the VBS status of Device Guard, indicating if it’s active, requires a reboot, necessitates a 64-bit architecture, is unlicensed, remains unconfigured, the system fails to meet hardware requirements, or if there’s an error.
      • Firewall status: It indicates the Firewall Status of the device, whether it’s active, disabled, monitoring inactive, temporarily monitoring inactive, or not applicable.
      • Secure boot status: It indicates the status of the Secure boot, with possible statuses being active, disabled, or not supported.
      • TPM manufacturer ID: It displays the TPM manufacturer ID as text.
      • TPM manufacturer version: It displays the TPM manufacturer version as a string.
      • TPM Specification version: It displays the TPM specification version as a string.

      Security Info

      • FileVault: This setting is exclusive to macOS devices. It shows whether the device is encrypted via FileVault.
      • FileVault Recovery Key: It displays the personal recovery key escrowed to Hexnode.

   3. Security

      The Security tab in Hexnode shows the complete list of restrictions and configuration profiles associated with the device. These restrictions may include but are not limited to device functionality, apps, content, security, and other restrictions enforced via Hexnode. This tab is currently available for iOS, Android, and Windows devices.

   4. Applications

      The Applications tab lists all the applications installed on the device. However, for personal devices enrolled in Hexnode, only the apps installed via Hexnode can be viewed from this page.

      Hexnode also offers the following list of app filters to sort the apps installed on the device:

      • All Apps
      • Required Apps
      • Allowlisted Apps
      • Blocklisted Apps
      • Managed Apps
      • Unmanaged Apps
      • Missing Apps
      • Kiosk Apps

      Apart from viewing the installed applications, Hexnode provides the following quick actions within the Applications sub-tab:

      • For supervised devices running iOS 9.0 and later, you can convert unmanaged apps to managed apps using the gear icon corresponding to the required apps.
      • In the case of Samsung Knox devices, you can clear the app data for individual or multiple apps within the same window.
      • For devices enrolled in Android Enterprise as Device Owner or Profile Owner, you can view the feedback logs associated with the apps.
      • You can remotely uninstall managed apps using the Uninstall App command that appears when you click on the gear icon corresponding to the app.
      • Depending on the app filter used, you can export the list of applications installed on the device as a PDF or CSV file.
   5. File Explorer (Android)

      The File Explorer is a file manager tool in Hexnode that allows you to remotely access files and folders on your Android devices. A bunch of remote management actions are available within the tool to move, copy, or delete files and folders within the SD card or internal storage. You can also see the available free space left on your device. In addition, you can also create new folders while moving or copying files.

   6. Policies:

      The Policies tab summarizes the complete list of policies associated with the device. This tab allows you to quickly assign already saved policies to the device. Clicking on the trash icon corresponding to a policy will disassociate the policy from the device. Note that the policy can be detached this way only if it is associated with a specific device. If the policy is assigned to a group, the policy cannot be deleted using this method.

   7. Data Management

      The Data Management page summarizes the device’s data usage – both Wi-Fi- and mobile data, data restrictions, and the apps that are blocked from using mobile or Wi-Fi data. A summary of an app’s data usage can also be viewed from the same tab. This data management summary of individual devices can be exported as a CSV or PDF file. This report can also be filtered based on a time frame.

   8. Device Groups

      All the device groups – custom or dynamic that accommodate the selected device are listed under the Device Groups page. This page shows the group names, types, descriptions, and the dates on which they were created.

   9. Location History

      The complete history of the location traversed by a location tracking-enabled device can be viewed and analyzed from this page. The location history and the last fetched location of the device will be shown on the map. The device’s location can be viewed using two different mapping services — Google Maps and Hexnode’s default map. To fetch the device’s physical address using Google Maps, add the Google Maps API Key and Google Cloud Platform billing account to Hexnode.

   10. Action History

       This tab provides information on the latest remote management actions or policies associated with the device. These actions can be filtered based on the action status (In progress, Pending, Success, Cancelled, or Failed). If required, the Action History tab also makes it easier to stop actions that are yet to reach the device. This can be done by deleting the pending actions. However, once initiated, the Wipe action cannot be deleted.

   11. Logs (Android)

       The Logs tab displays the entire Android app logs requested by the admin from the Hexnode portal and manually sent by the users from their devices. Admins can also download these logs as ZIP files.

   12. Messenger

       Any messages broadcasted to the device via Hexnode can be inspected from the Messenger tab. The admins can view the message sent, the time it was sent, the message status and the technician who has sent it. They can also check whether the user has seen this message.