Using IT administration commands to manage devices

The Universal Device Service includes IT administration commands that you can send to a device over the wireless network to help protect your organization's data on a device. If the device supports the commands, you can use them to lock the device, unlock the device, reset the device password, permanently delete work data, or return the device settings to the default values.

IT administration command

Description

Activation types

Specify device password and lock

For Android devices, this command allows you to create a new device password and lock the device. You must create a password that complies with existing password rules. When the user unlocks the device, the device prompts the user to accept or reject the new password.

You can use this command if the device is lost or stolen.

  • MDM controls
  • Work and personal - full control

Lock device

This command locks a device. The user must type the existing device password to unlock the device.

You can use this command if the device is lost or stolen.

  • MDM controls
  • Work and personal - full control

Unlock and clear password

This command allows you to unlock a device and clear the existing password. The user is prompted to create a new device password.

You can use this command if the user forgets the device password.

  • MDM controls
  • Work and personal - full control

Delete only work data

This command deletes any profiles that are assigned to the device and removes the device from the Universal Device Service. Work apps that are installed on the device are not deleted.

If the device has a work space, the work space information is deleted and the work space is removed from the device.

You can send this command to a personal device when a user no longer works at your organization and you want to delete the work data from the device.

The user account is not deleted when you send this command.

  • MDM controls
  • Work and personal - full control
  • Work and personal - user privacy

Delete all device data

This command deletes all user information and application data that the device stores including information in the work space, returns the device to factory defaults, and removes the device from the Universal Device Service. For Motorola devices that support the Enterprise Device Management API, information on the media card is also deleted.

You can send this command to a device when you want to redistribute a previously used device to another user in your organization, or to a device that is lost and unlikely to be recovered.

You can specify whether you want to delete or disable a user account from the Universal Device Service after the device deletes all user information and application data.

  • MDM controls
  • Work and personal - full control

Lock work space

This command locks the work space on a device so that the user must type the existing work space password to unlock the device.

You can use this command if the device is lost or stolen.

  • Work and personal - full control
  • Work and personal - user privacy

Disable/enable work space

This command allows you to temporarily prevent access to the work space apps on the device.

  • Work and personal - full control
  • Work and personal - user privacy