In the Devices tab the user can remotely perform various operations: add new devices, install agents or applications, configure some functionalities, apply policies etc.
Devices list
Customizing devices list
Clicking a column name allows you to sort by any property in the list view. There is also a possibility to customise which columns are displayed, by using Customize table view button . All available columns are grouped on the left side of the Action box, while columns currently visible in the Devices list are displayed on the right side. The administrator can drag and drop any column to change the order or the list of displayed columns. To accept changes confirm by pressing Save.
Customizing devices list
Adding a new device to FAMOC
This feature allows you to enroll a single device using various methods: email, phone number or QR code; or set the device up in Device Owner mode using NFC or a QR code. To add a single device to the system, hover over the button in the DEVICES tab and choose the ‘Enroll a device’ option. A step-by-step modal window will appear and guide you through the enrollment process.
Enroll a device - modal window
First, select a platform. You can choose between Android, Apple or other devices (e.g. Windows). Next steps will differ slightly depending on the chosen platform.
In the second step select device user and, if needed, edit the user’s email and phone number. For Android devices you can select Enroll into BYOD option.
The third step displays policy and apps that will be assigned to the device. This is based on the device group or user group.
In the penultimate step select the desired enrollment method. The choices depend on the selected platform.
For Android Devices it is recommended to use Device Owner mode. It requires new or factory reset device but gives you access to more features.
Set up Device Owner
This choice allows your to enroll an Android device in the Device Owner mode. The first step of this process is optional and allows the administrator to configure a WLAN connection on the device during enrollment (Keep in mind that the device will require Internet access to communicate with FAMOC to properly configure and finish the enrollment process.) Then, select one of the two methods for enrollment in the Device Owner mode: NFC or QR enrollment.
The NFC method requires an NFC-enabled, admin-assigned device already enrolled (not necessarily in DO mode) to FAMOC. You need to select such a device for use as a master device for scanning. Choose the device and click ‘Start’. The master device will receive a request to start the NFC scan. Use the target device to scan the new device by positioning the devices back to back. When the new device is detected by the master device, tap the screen on the master device to start the enrollment process. The new device will be assigned to the selected user.Note: This method requires both devices to be NFC-enabled, with the functionality turned on master device. The new device must be factory reset or new with Android 6.x or higher.
The QR method does not require an additional device enrolled. The QR Reader can be easily accessed by tapping the welcome screen on a factory reset/new device 6 times. Upon scanning the code, the enrollment process will begin.
Note: This method is available only for devices with Android 7.x of higher.
Enroll a device - Device Owner
Other options of enrollment include sending enrollment link via e-mail or SMS or scanning QR code. This is default option for iOS and Windows devices. For android devices select Show legacy options to access those ways of enrollment.
Send Enrollment Link
A link to the enrollment page will be sent to the user’s email address or phone via SMS. Note: To use the sms option you need to have the SMS gateway in place.
Scan QR Code
You can scan the QR code using a device camera or QR code reader apps. Note: set the QR reader apps to open links automatically. Otherwise, the QR code will be counted as used before opening the link in the web browser. After scanning, the device displays the enrollment page.
After downloading the FAMOC app a new device record is automatically created in the system and the device is assigned to the selected user.
Creating a device entry for future enrollment
Another option is to create a new device entry in the system and enroll it after providing basic data about it. To do so, hover over the button in the DEVICES tab and choose the ‘Create entry (enroll later)’ option.
Follow these steps to create entry:
Select the device model and platform (optionally) from the Action box list and press Apply. It is possible to use the search box to specify these parameters:
Selecting the device model in the Action Box
Fill in other fields to describe the device (optionally).
Assign a predefined SIM card.
Assign the device user.
Finish by pressing Create.
Creating a new device
When all device details are ready, you can start the enrollment process, either from the list of DEVICES tab, or from the chosen device details view:
Select the device from the list or click on the device.
Use Enroll device button .
Starting enrollment process
When Action box appears, one of the Notification delivery methods needs to be selected:
Automatic selection
Email only
SMS only
No notification
Select whether the enrollment should start Now or be Scheduled for later.
The status of the enrollment operation can be checked in the device details in the Log tab.
Enrollment operations status
After the device receives the enrollment message, the user starts the installation of FAMOC agents.
When enrollment process is completed, you can view the device details and perform management actions.
Device details
In the device details view you can see information about the device including user name, sim card number, description, IMEI, WLAN MAC number, serial number and date of last contact. In the tabs below you can also see the status of the device, general parameters, applications, logs and assigned groups.
In the device status tab you can see graphic representation of Policy, Work profile, Notifications and Sync status. Green colour of the circle means everything is ok, Yellow - moderate warning, Red - important warning, Grey - n/a. Clicking each circle displays additional details.
Device: detailed information about the status of the policy applied on the device including security restrictions, mandatory apps and configurations
Work profile: detailed information about the status of the container on device, applied security restrictions, apps and configurations
Notifications: alerts related to the device
Sync status: information about device contact schedule
Exchange proxy status: detailed information about the connection and applied policy (only devices with Exchange proxy enabled)
The device details view
In the General tab you can find many useful details about the device including Base parameters like IMEI, Serial number, OS version as well as information about device state, disks, certificates, access points, device administrators and custom fields.
Device details - General tab - Base parameters info
Applications on device tab lists all the apps currently installed on the device. Compatible applications includes all the apps includes all the apps added to FAMOC which are compatible with the device model and OS. In the Logs tab you can see all the operations performed on the device with the possibility to customize displayed columns and export table to txt or csv format. In the Groups tab you an see the groups to which the device has been assigned.
Management actions
Basic actions are available on the menu above the device description. All management operations can be found in the Action Box which can be accessed from the menu by pressing .
Refreshing policy using the Action box
Functions available in the DEVICES tab and Action Menu.
Adding many devices to FAMOC
This feature allows you to automatically enroll devices in bulk by utilizing the Device Enrollment Program (for Apple devices), Android zero-touch (for Android devices) or KME (for Samsung Android devices). The process is easy and intuitive. To add many devices hover over the button in the Devices tab and choose the Bulk enrollment option.
Bulk enrollment
DEP
To synchronize a new DEP account, first, select the Apple DEP method. Then, click the Start now button. A familiar window will appear, guiding you through the process. After uploading the DEP token to FAMOC, a summary will display the basic information on the account: name, Apple ID of the administrator and the number of devices available on the account. After closing the modal window you will be able to edit specific settings for the account.
In the General section:
If the ‘Allow MDM removal by user’ option is enabled, the users will not be able to manually remove the MDM profile from the device.
If the ‘Require user credentials for enrollment’ option is enabled, devices will be automatically attached to users upon enrollment, otherwise the ‘Default users of the device’ selection will be used for new devices.
The ‘Organization info’ fields are optional, their contents will be displayed on the device during enrollment.
The Startup settings section allows you to select which panes of the setup assistant should be displayed after the profile installation.
After configuring the DEP account settings according to your needs, press the Synchronize button. The profile information will be sent to Apple and assigned to the devices belonging to the DEP account and the entries for these devices will be created in FAMOC. At this point, the devices are ready for enrollment, and the number of successfully synchronized devices will be displayed along with the server’s token expiration date. If you return to the Apple DEP screen, a DEP accounts table will be displayed.
FAMOC allows multiple DEP accounts within an organization. All account synchronizations will be displayed here.
The DEP account table displays: the names of available DEP accounts, Apple ID used to create the accounts, DEP accounts token expiration date, last synchronization dates, the number of devices currently enrolled and managed, the number of devices synchronized with DEP in total and the status of synchronizations. The button allows you to perform certain operations for any DEP account: edit the account’s settings, delete the account, stop the synchronization schedule, restart the synchronization, synchronize the account now and renew the server token. Any changes in the account’s settings require a synchronization (scheduled or manual) to take effect on the devices.
For further details concerning DEP read the FAMOC Apple DEP documentation.
DEP accounts table
Android zero-touch
To import Android device to your zero-touch account, first, select the Android zero-touch. Then, click the Start now button. On the first step you will be asked to authorize your account with proper email. Next step is deciding to which information will be displayed on the device during enrollment (e.g. company name). After selecting the devices to import, press Synchronize to import your devices.
For more information read ‘Android Enterprise zero-touch integration guide’.
Android zero-touch accounts table
KME
To enroll Samsung Android devices in bulk using Knox Mobile Enrollment, first, select the Samsung KME method. Then, click the Start now button. A familiar window will appear, guiding you through the process. After uploading CSV to FAMOC and then back to Samsung KNOX, a device import history table will be displayed from which you can redownload the device list CSV file if needed.
For further details concerning KME read the FAMOC KNOX Mobile Enrollment documentation.
KME import history table
Remote Access Support
Remote Access is a tool that allows administrators to remotely manage the end user’s device. The solution provides a real time view of the remote device screen and allows the administrator to take control of the keyboard after being granted consent by the user.
To run Remote Access go to devices list view, select a device and press in the Action Box. Now select Run Remote Support and click Apply.
Action box with Remote Access Support selected
You will see the “Waiting for user approval” message on your screen and “Reading configuration” message on your device. After a while you will be asked if you agree for a Remote Access, so click “Yes” and the device’ screen will appear on your computer.
Remote Support view in FAMOC console
Once the device is connected to FAMOC you can see the screen and make all necessary changes.
Additionally, on the bottom right corner there are three useful buttons.
Button refreshes the connections with the device.
By clicking Settings icon a new tab appears on the right side of the screen where you can decide about the quality of the displayed device’ screen. Save all changes by clicking Apply.
Remote Support settings
When you click the File Manager you will be able to see all the folders and files that are on the device you are currently accessing. In this section you can download the files to your computer, put the files from your computer to the device, add folders on the device and replace files among device’s folders.
Browsing files on a device using Remote Support in FAMOC console
You can minimize the window and close session by using the buttons in the top right corner and maximize the screen with in the right bottom corner.
