Device Actions Feature

Overview

This page introduces Josys's Device Actions feature.

With this feature, you can perform remote lock and wipe (data erasure) directly from Josys on devices managed by MDM (Microsoft Intune or Jamf).

This allows you to respond quickly to security incidents such as lost or stolen devices, and streamlines the offboarding process for departing employees' devices.

Target Audience

• IT administrators with Super Admin privileges

Objective

• To quickly protect lost or stolen devices
• To securely initialize departing employees' devices remotely to prevent data leaks
• To enable direct operations from Josys, reducing the hassle of accessing the MDM console each time

Key Features

• Remote Device Lock
  You can remotely lock laptops and mobile devices (iPhone / iPad).
• Remote Device Wipe
  You can remotely erase data from devices.
• PIN Code Generation
  After locking a laptop, you can check the PIN code required to unlock it from the device details screen.
  For Jamf, Josys generates the PIN. For Intune, Intune generates the PIN and displays it in Josys.
• Admin Control Settings
  Super Admins can configure whether to enable this feature.
  Additionally, the lock and wipe functions can be enabled or disabled individually.

• Action Tracking
  You can check the status and history of executed actions on the Scheduled Tasks page.

Use Cases

• Lost or Stolen Devices
  If an employee loses a device, you can immediately execute a remote lock from Josys.
• Offboarding
  By remotely wiping a departing employee's device, you can eliminate the hassle of operating the MDM console separately, streamlining the process.

How to Use

Enabling the Feature

First, enable the feature.

1. From the Josys side menu, click "Settings > Device Actions."
2. Click the icon on the right side of the feature you want to enable to turn it ON.

Executing Device Actions

1. From the Josys side menu, click "IT Devices" to open the Devices page.
2. From the Devices list, click the device you want to operate.
3. Click the three-dot icon in the top right and select the desired action from "IT Device Actions."
   
4. A confirmation screen will appear. Review the details and proceed with the operation.

Checking the Unlock PIN Code

Frequently Asked Questions (FAQ)

Q1: Which MDMs are supported?
A1: Microsoft Intune and Jamf.

Q2: Are lock and wipe enabled by default?
A2: No. For security reasons, they are disabled by default. A Super Admin must enable them.

Q3: Can I enable only the lock function?
A3: Yes. Lock and wipe can be controlled individually.

Q4: What happens when a device is locked?
A4: For laptops, unlocking with a PIN is required. For Jamf, Josys generates the PIN. For Intune, Intune generates the PIN and displays it in Josys. No PIN is required for mobile devices.

Q5: How can I check the success or failure of an executed action?
A5: You can check the status and history on the "Scheduled Tasks" screen.