View device report

This command displays detailed information about a device. You can export and save the device report.

View device actions

This command displays any actions that are in progress on a device.

Lock device

This command locks a device. The user must type the existing device password to unlock the device.

When you send this command, the device locks only if there is an existing device password. Otherwise, no action is taken on the device.

This command is supported only on devices running Windows 10 Mobile.

Generate device password and lock

This command generates a device password and locks the device. The generated password is sent to the user by email. You can use the preselected email address, or specify an email address. The generated password complies with any existing password rules.

This command is supported only on devices running Windows 10 Mobile.

Delete only work data

This command deletes work data, including the IT policy, profiles, apps, and certificates that are on the device and, optionally, deletes the device from BlackBerry UEM.

The user account is not deleted when you send this command.

After you send this command, you are given the option of deleting the device from UEM. If the device is unable to connect to UEM, you can remove it from UEM. If the device connects to UEM after you removed it, only the work data is deleted from the device, including the work space, if applicable.

Delete all device data

This command deletes all user information and app data that the device stores. It returns the device to factory defaults and, optionally, deletes the device from UEM.

After you send this command, you are given the option of deleting the device from UEM. If the device is unable to connect to UEM, you can remove it from UEM. If the device connects to UEM after you removed it, only the work data is deleted from the device, including the work space, if applicable.

Restart desktop/device

This command forces the device to restart.

Update device information

This command sends and receives updated device information. For example, you can send newly updated IT policy rules or profiles to a device and receive updated information about a device such as OS version or battery level.

The command also sends a request to the device to create a health certificate validation request. The device sends the request to the Microsoft Health Attestation Service to check for compliance. This feature is only supported in an on-premises environment.

Remove device

This command removes the device from UEM. The device may continue to receive email and other work data.