Monitor Mobile Devices

Legacy Mobile Device Management (MDM) service retiral: November 1, 2021.

From November 1st, any Android, Windows Mobile or legacy MDM iOS devices (these are iOS devices that are not enrolled in Apple Device Management(ADM) service) will no longer be supported. You are not required to take action on these devices as we will automatically retire the service.

Go to the Mobile Device Management page for further information.

This change does not affect iOS devices enrolled in ourApple Device Management(ADM) service) which will continue to be supported and offers numerous advanced management options not available in the legacy MDM service.

Devices are added individually or where there are multiple devices to monitor, a CSV file containing their details can be uploaded for bulk invites.

The option to Add Mobile Devices is available from add_iconAdd Mobile Device under the Mobile Devices tab on the Dashboard or from the File menu go to Add Device, Add Mobile Device, then populate the required information.

Once the entered details are accepted a provisioning email - and SMS where configured - is sent to the contact. This invitation contains the information required to register the mobile device including the activation code for Google Android and Microsoft Windows Phone 8.1^ as well as the territory's server for Microsoft Windows Phone 8.1^.

To install MobleGuardian the user simply opens the registration invitation email or SMS's provisioning page on their mobile device, selects the version of MobileGuardian that corresponds to their device's platform and follows the installation instructions.

We use the following tools to manage the device and retrieve the required information:

Platform

Apple iOS User Installed App Configuration Profile
Google Android User Installed App
Microsoft Windows Phone 8.1^ User Installed App Built-in MDM Client

Devices appear in the Unregistered Devices section of the Mobile Devices tab until MobileGuardian is installed and at this point they then move under the Active Devices section.

mdm_unregistered

mdm_registered

The provisioning invitation can be resent by selecting the device in the north pane of the Dashboard and from the Mobile Device drop-down (or right-click on the Mobile Device) go to Resend Provisioning and choose whether to Resent E-Mail or Resend SMS to the original recipient or enter the details of another addressee. Please note, until registered the device's Activation Code is displayed in the Activation Code column when the All Mobile Devices or Unregistered Devices filter is selected.

mdm_provisioning_drop

Apple introduced changes to its MDM configuration settings in iOS 13. When upgrading to iOS 13 on a device already running the non- Apple Device Management version of MDM, iOS forcibly removes MobileGuardian from the device. To continue monitoring, re-enroll MDM on the device to apply the Apple Device Management version.

For Apple iOS we utilize the device’s in-built MDM framework APIs which are controlled via the Apple Push Notification Service (APNS) and to permit the APNS traffic when connecting via Wi-Fi specific ports must be open in the firewall.

The User Audit Report records mobile device additions to the Dashboard under the Mobile Device filter.

^ Windows 10 is currently unsupported.