Remote Device Management

Remote Device Management is the ability to monitor, configure, and control devices from a central platform without requiring physical access to those devices. Remote management actions typically include locking, wiping, pushing policies, deploying apps, and collecting device information.

Core Remote Actions

The most common remote management actions are pushing policies (changing device settings), deploying apps (installing or updating applications), executing lock (securing a lost device), and executing wipe (removing all data). These actions reach devices wherever they are located.

Communication Channel

Remote management works through a secure communication channel between managed devices and the MDM platform. Devices regularly check in with the server for new commands and policies. All communication is encrypted.

Policy Updates

Administrators make changes in the MDM console, and the changes are automatically pushed to managed devices. Devices apply the new policies immediately (or on schedule, depending on configuration). No manual intervention is required on devices.

App Deployment

Applications can be pushed to devices from the MDM console. Administrators can deploy to all devices, specific device groups, or individual devices. Users can also self-serve apps through Managed Google Play if configured.

Data Collection

MDM platforms continuously collect device information including hardware details, installed apps, security patch version, compliance status, and usage metrics. This data provides visibility into fleet health and compliance.

Remote Commands

Critical remote commands include locking a device (preventing access until unlocked), wiping a device (removing all data), restarting a device, and force-updating apps or policies. These commands are essential for responding to security incidents.

Offline Devices

Devices that are offline receive queued commands when they reconnect. If a device is offline during a critical command (like lock or wipe), the command is queued and executed as soon as the device reconnects.

Latency

Some commands execute immediately (lock, wipe), while others may take time to apply. App deployments might take hours to reach all devices in a large fleet depending on how often devices check in and their network connectivity.