In the Devices tab the user can remotely perform various operations: add new devices, install agents or applications, configure some functionalities, apply policies etc.

Customizing devices list

Clicking a column name allows you to sort by any property in the list view. There is also a possibility to customise which columns are displayed, by using Customize table view button C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\6.png. All available columns are grouped on the left side of the Action box, while columns currently visible in the Devices list are displayed on the right side. The administrator can drag and drop any column to change the order or the list of displayed columns. To accept changes confirm by pressing Save.

Adding a new device to FAMOC

This feature allows you to enroll a single device using various methods: email, phone number or QR code; or set the device up in Device Owner mode using NFC or a QR code. To add a single device to the system, hover over the C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\5.pngbutton in the DEVICES tab and choose the ‘Enroll a device’ option. A step-by-step modal window will appear and guide you through the enrollment process.

First, select the device user and, if needed, edit the user’s email and phone number.

The second step displays policy and apps that will be assigned to the device. This is based on the device group or user group.

In the third step select the desired enrollment method. The choices are as follows:

Send Enrollment Link

A link to the enrollment page will be sent to the user’s email address or phone via SMS. Note: To use the sms option you need to have the SMS gateway in place.

Scan QR Code

You can scan the QR code using a device camera or QR code reader apps. Note: set the QR reader apps to open links automatically. Otherwise, the QR code will be counted as used before opening the link in the web browser. After scanning, the device displays the enrollment page.

After downloading the FAMOC app a new device record is automatically created in the system and the device is assigned to the selected user.

Set up Device Owner

This choice allows your to enroll an Android device in the Device Owner mode. The first step of this process is optional and allows the administrator to configure a WLAN connection on the device during enrollment (Keep in mind that the device will require Internet access to communicate with FAMOC to properly configure and finish the enrollment process.) Then, select one of the two methods for enrollment in the Device Owner mode: NFC or QR enrollment.

The NFC method requires an NFC-enabled, admin-assigned device already enrolled (not necessarily in DO mode) to FAMOC. You need to select such a device for use as a master device for scanning. Choose the device and click ‘Start’. The master device will receive a request to start the NFC scan. Use the target device to scan the new device by positioning the devices back to back. When the new device is detected by the master device, tap the screen on the master device to start the enrollment process. The new device will be assigned to the selected user.Note: This method requires both devices to be NFC-enabled, with the functionality turned on master device. The new device must be factory reset or new with Android 6.x or higher.

The QR method does not require an additional device enrolled. The QR Reader can be easily accessed by tapping the welcome screen on a factory reset/new device 6 times. Upon scanning the code, the enrollment process will begin.

Note: This method is available only for devices with Android 7.x of higher.

Once all of the steps have been completed, you reach the Confirmation window, displaying the current enrollment state. You can now follow progress messages on the screen, enroll another device or go to the newly added device’s details. The window can be safely closed at this point, as it is not necessary for the enrollment process to continue. The process can be monitored in the Logs view. 

Creating a device entry for future enrollment

Another option is to create a new device entry in the system and enroll it after providing basic data about it. To do so, hover over the C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\5.png button in the DEVICES tab and choose the ‘Create entry (enroll later)’ option.

Follow these steps to create entry:

  1. Select the device model and platform (optionally) from the Action box list and press Apply. It is possible to use the search box to specify these parameters:

  1. Fill in other fields to describe the device (optionally).

  2. Assign a predefined SIM card.

  3. Assign the device user.

  4. Finish by pressing Create.

When all device details are ready, you can start the enrollment process, either from the list of DEVICES tab, or from the chosen device details view:

  1. Select the device from the list or click on the device.

  2. Use Enroll device button C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\16.png.

  1. When Action box appears, one of the Notification delivery methods needs to be selected:

    • Automatic selection

    • Email only

    • SMS only

    • No notification

  2. Select whether the enrollment should start Now or be Scheduled for later.

  3. The status of the enrollment operation can be checked in the device details in the Log tab.

  1. After the device receives the enrollment message, the user starts the installation of FAMOC agents.

When enrollment process is completed, you can view the device details and perform management actions.

Device details

In the device details view you can see information about the device including user name, sim card number, description, IMEI, WLAN MAC number, serial number and date of last contact. In the tabs below you can also see the status of the device, general parameters, applications, logs and assigned groups.

In the device status tab you can see graphic representation of Policy, Work profile, Notifications and Sync status. Green colour of the circle means everything is ok, Yellow - moderate warning, Red - important warning, Grey - n/a. Clicking each circle displays additional details.

  • Device: detailed information about the status of the policy applied on the device including security restrictions, mandatory apps and configurations

  • Work profile: detailed information about the status of the container on device, applied security restrictions, apps and configurations

  • Notifications: alerts related to the device

  • Sync status: information about device contact schedule

  • Exchange proxy status: detailed information about the connection and applied policy (only devices with Exchange proxy enabled)

In the General tab you can find many useful details about the device including Base parameters like IMEI, Serial number, OS version as well as information about device state, disks, certificates, access points, device administrators and custom fields.

Management actions

Basic actions are available on the menu above the device description. All management operations can be found in the Action Box which can be accessed from the menu by pressing .

Devices Menu

Description

C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\4.png

Select

C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\5.png

Add new device

C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\6.png

Customize table view

Refresh general policy

Refresh security policy

C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\15.png

Get device monitor data

Enroll device

Install application

Apply configuration

C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\19.png

Delete

Action Box


qa.png

Quick actions

  • Apply configuration

  • Delete

  • Enroll device

  • Firmware update

  • Get current location

  • Get device monitor data

  • Install application

  • Install certificate

  • Remove configuration

  • Reset lock code

  • Restart device

  • Run Remote Support

  • Send message

  • Run application

  • Send message

  • Shutdown device

  • Uninstall application 

EO.png

Emergency operations

  • Disable Android Work Profile

  • Disable Lost Mode

  • Enable Android work profile

  • Enable Lost Mode

  • Enterprise wipe

  • Locate lost device

  • Lock device

  • Mark as wiped

  • Remove stolen device status

  • Report stolen device

  • Wipe Device

A.png

Assignment

  • Assign to group

  • Change user

  • Detach from group

p.png

Policy

  • Refresh Android Policy

  • Refresh general policy

  • Refresh Knox policy

  • Refresh security policy

k.png

KNOX

  • Lock KNOX container

  • Reset KNOX lock code

  • Unlock KNOX container

  • Wipe KNOX container

dl.png

Device logs

  • Disable logging

  • Enable logging

  • Get device logs

Adding many devices to FAMOC

This feature allows you to automatically enroll devices in bulk by utilizing the Device Enrollment Program (for Apple devices), Android zero-touch (for Android devices) or KME (for Samsung Android devices). The process is easy and intuitive. To add many devices hover over the C:\Users\lukasz.orzeszek\Desktop\Dokumenty\GUI - devices guide\screeny\5.png button in the Devices tab and choose the Bulk enrollment option.

DEP

To synchronize a new DEP account, first, select the Apple DEP method. Then, click the Start now button. A familiar window will appear, guiding you through the process. After uploading the DEP token to FAMOC, a summary will display the basic information on the account: name, Apple ID of the administrator and the number of devices available on the account. After closing the modal window you will be able to edit specific settings for the account.

In the General section:

  • If the ‘Allow MDM removal by user’ option is enabled, the users will not be able to manually remove the MDM profile from the device.

  • If the ‘Require user credentials for enrollment’ option is enabled, devices will be automatically attached to users upon enrollment, otherwise the ‘Default users of the device’ selection will be used for new devices.

  • The ‘Organization info’ fields are optional, their contents will be displayed on the device during enrollment.

The Startup settings section allows you to select which panes of the setup assistant should be displayed after the profile installation.

After configuring the DEP account settings according to your needs, press the Synchronize button. The profile information will be sent to Apple and assigned to the devices belonging to the DEP account and the entries for these devices will be created in FAMOC. At this point, the devices are ready for enrollment, and the number of successfully synchronized devices will be displayed along with the server’s token expiration date. If you return to the Apple DEP screen, a DEP accounts table will be displayed.

FAMOC allows multiple DEP accounts within an organization. All account synchronizations will be displayed here.

The DEP account table displays: the names of available DEP accounts, Apple ID used to create the accounts, DEP accounts token expiration date, last synchronization dates, the number of devices currently enrolled and managed, the number of devices synchronized with DEP in total and the status of synchronizations. The  button allows you to perform certain operations for any DEP account: edit the account’s settings, delete the account, stop the synchronization schedule, restart the synchronization, synchronize the account now and renew the server token. Any changes in the account’s settings require a synchronization (scheduled or manual) to take effect on the devices.

For further details concerning DEP read the FAMOC Apple DEP documentation.

Android zero-touch

To import Android device to your zero-touch account, first, select the Android zero-touch. Then, click the Start now button. On the first step you will be asked to authorize your account with proper email. Next step is deciding to which information will be displayed on the device during enrollment (e.g. company name). After selecting the devices to import, press Synchronize to import your devices.

For more information read ‘Android Enterprise zero-touch integration guide’.

KME

To enroll Samsung Android devices in bulk using Knox Mobile Enrollment, first, select the Samsung KME method. Then, click the Start now button. A familiar window will appear, guiding you through the process. After uploading CSV to FAMOC and then back to Samsung KNOX, a device import history table will be displayed from which you can redownload the device list CSV file if needed.

For further details concerning KME read the FAMOC KNOX Mobile Enrollment documentation.

Remote Access Support

Remote Access is a tool that allows administrators to remotely manage the end user’s device. The solution provides a real time view of the remote device screen and allows the administrator to take control of the keyboard after being granted consent by the user.

To run Remote Access go to devices list view, select a device and press  in the Action Box. Now select Run Remote Support and click Apply.

You will see the “Waiting for user approval” message on your screen and “Reading configuration” message on your device. After a while you will be asked if you agree for a Remote Access, so click “Yes” and the device’ screen will appear on your computer. 

2017-05-05 16_22_30-FAMOC - Devices.pngScreenshot_2017-05-09-09-53-04.png

Once the device is connected to FAMOC you can see the screen and make all necessary changes.

Additionally, on the bottom right corner there are three useful buttons. 

Button refresh.png refreshes the connections with the device.

By clicking Settings icon settings.pnga new tab appears on the right side of the screen where you can decide about the quality of the displayed device’ screen. Save all changes by clicking Apply.

When you click the File Manager file manager.png you will be able to see all the folders and files that are on the device you are currently accessing. In this section you can download the files to your computer, put the files from your computer to the device, add folders on the device and replace files among device’s folders.

You can minimize the window and close session by using the buttons in the top right corner minimize.png and maximize the screen with oko.png in the right bottom corner.