View desktop report

This command displays detailed information about a device. You can export and save the report.

View device actions

This command displays any actions that are in progress on a device.

Lock desktop

This command allows you to set a PIN and lock the device.

Delete all device data

This command deletes all user information and app data from the device. It returns the device to factory defaults, locks the device with a PIN that you set, and optionally, deletes the device from BlackBerry UEM.

Delete only work data

This command deletes work data, including the IT policy, profiles, apps, and certificates that are on the device, and optionally, deletes the device from UEM.

Update desktop data

This command sends and receives updated device information. For example, you can send newly updated IT policy rules or profiles to a device, and receive updated information about a device such as OS version or battery level.

Restart device

This command allows you to restart the device.

Set local administrator password

If a macOS device is enrolled with Apple ADE, and the assigned activation profile was configured to set up a local administrator account on the device, you can use this command to generate a new password for the local administrator account. The assigned activation profile defines how long the password is valid after it is viewed (default 60 minutes).

View local administrator password

If a macOS device is enrolled with Apple ADE, and the assigned activation profile was configured to set up a local administrator account on the device, you can use this command to view the current password for the local administrator account. The assigned activation profile defines how long the password is valid after it is viewed (default 60 minutes).

Disk Encryption

This command retrieves and displays the latest details for FileVault disk encryption on the device. For more information, see Enabling FileVault disk encryption on macOS devices.

Turn off device

This command allows you to turn off the device.

Remove device

This command removes the device from UEM. The device may continue to receive email and other work data.