Commands for iOS and iPadOS devices
iOS
and iPadOS
devicesCommand | Description | Activation types |
---|---|---|
View device report | This command displays detailed information about a device. You can export and save the device report. | MDM controls User privacy |
View device actions | This command displays any actions that are in progress on a device. | MDM controls User privacy |
Delete all device data | This command deletes all user information and app data that the device stores and returns the device to factory default settings. If the device is unable to connect to BlackBerry UEM when you send this command, you can either cancel the command or remove the device from the console. If the device connects to UEM after you remove it, only the work data is deleted from the device.If you send the command to devices with iOS 17 or later, you can select the “Enable Return to Service” option and select a Wi-Fi profile to assign to the devices to assist the user in setting up the device again after data is deleted.If eSIM information is detected on one or more devices that you select, you are prompted to specify whether the data plan information must be preserved. | MDM controls |
Delete only work data | This command deletes work data, including the IT policy, profiles, apps, and certificates that are on the device. If the device is unable to connect to UEM when you send this command, you can either cancel the command or remove the device from the console. If the device connects to UEM after you remove it, the work data is deleted from the device. | MDM controls User privacy |
Lock device | This command locks a device. Apple appends "Lost iPhone" or "Lost iPad" to the title of the message you specify. The user must type the existing device password to unlock the device.When you send this command, the device locks only if there is an existing device password. Otherwise, no action is taken on the device. This command is not supported for Apple TV devices. | MDM controls |
Unlock and clear password | This command unlocks a device and deletes the existing password. The user is prompted to create a device password. You can use this command if the user forgets the device password. This command is not supported for Apple TV devices. | MDM controls |
Turn on Lost Mode | This command locks the device and allows you to display a phone number and message on the device. After you send this command you can view the location of the device in the management console. This command is supported for supervised devices only. This command is not supported for Apple TV devices. | MDM controls |
Deactivate BlackBerry 2FA | This command deactivates devices that are activated with the BlackBerry 2FA activation type. The device is removed from UEM and the user can't use the BlackBerry 2FA feature.This command is not supported for Apple TV devices. | MDM controls |
Update OS | This command forces devices to install an available OS update. This command is supported for supervised devices only. This command is not supported for Apple TV devices. | MDM controls |
Restart device | This command forces the device to restart. This command is supported for supervised devices only. This command is not supported for Apple TV devices. | MDM controls |
Turn off device | This command forces the device to turn off. This command is supported for supervised devices only. This command is not supported for Apple TV devices. | MDM controls |
Wipe apps | This command wipes data from all Microsoft Intune managed apps on the device. The apps are not removed from the device. | MDM controls |
Update device information | This command sends and receives updated device information. For example, you can send newly updated IT policy rules or profiles to a device, and receive updated information about a device such as OS version or battery level. | MDM controls User privacy |
Update time zone | This command sets the device time according to the region that you select. | MDM controls |
Remove device | This command removes the device from UEM but does not remove data from the device. The device may continue to receive email and other work data.This command is intended for devices that have been irretrievably lost or damaged and are not expected to contact the server again. If a device that has been removed attempts to contact UEM , the user receives a notification and the device won't be able to communicate with UEM unless it is reactivated. | MDM controls User privacy |
Refresh eSIM | For devices that have an eSIM-based cellular plan, this command queries updated plan details for the device from the device carrier URL. | MDM controls |