Management platform recovery for a user device
Examples described here include systems and methods for refreshing the operating system (“OS”) of a device enrolled in a management platform. Execution of a first command file ensures that necessary components of the management platform residing on the device are stored in a partitioned portion of the device hard drive to preserve them during the OS refresh. After a new instance of the OS has been installed, execution of a second command file migrates the necessary components from the partitioned portion of the hard drive to the new OS instance. When the user logs back into the refreshed device, a third command file installs all necessary device management components at the new OS instance and re-enrolls the device with the management platform. In this manner, the OS of a managed device can be refreshed and re-enrolled in the management platform without significant input from a user or administrator.
1. A method for refreshing an operating system of a device enrolled in a management platform, the method including:
receiving, at the device enrolled in a management system, a request to refresh the operating system (“OS”) of the device;
storing a plurality of refresh process files, including a backup command file, a migration command file, and an unattended answer file, to a recovery folder of the OS;
executing the backup command file that stores device identification data, a management application installation file, and a managed application installation file to the recovery folder of the OS;
installing a new instance of the OS at the device while retaining the contents of the recovery folder in a partitioned portion of the device;
upon completion of the installation of the new instance of the OS, automatically executing, from the recovery folder, the migration command file that migrates the device identification data, the management application installation file, and the managed application installation file from the partitioned portion of the device to the new instance of the OS; and
upon a first login to the new instance of the OS by the user, executing, from the recovery folder, the unattended answer file that:
installs the management application and the managed application at the new instance of the OS; and
re-enrolls the device in the management system, including transmitting the device identification data to a management server.
2. The method of claim 1 , wherein the request to refresh the OS originates from an administrator console and is sent to the device by the management server.
3. The method of claim 1 , wherein the request to refresh the OS originates from the device.
4. The method of claim 1 , wherein the device identification data includes a device ID, an enrollment key, and a management server authentication token.
5. The method of claim 1 , wherein the management application installation file includes instructions to install at least one of a management agent application, a managed workspace application, and a management provisioning application.
6. The method of claim 1 , further including, after receiving the request to refresh the OS:
determining that at least one of the plurality of refresh process files are not stored in the recovery folder;
sending a request to the management server for the at least one of the plurality of refresh process files; and
receiving, from the management server, the at least one of the plurality of refresh process files.
7. The method of claim 1 , wherein the unattended answer file contains a re-installation command file and a re-enrollment command file.
8. A non-transitory, computer-readable medium including instructions that, when executed by a processor, performs stages for refreshing an operating system of a device enrolled in a management platform, the stages including:
receiving, at the device enrolled in a management system, a request to refresh the operating system (“OS”) of the device;
storing a plurality of refresh process files, including a backup command file, a migration command file, and an unattended answer file, to a recovery folder of the OS;
executing the backup command file that stores device identification data, a management application installation file, and a managed application installation file to the recovery folder of the OS;
installing a new instance of the OS at the device while retaining the contents of the recovery folder in a partitioned portion of the device;
upon completion of the installation of the new instance of the OS, automatically executing, from the recovery folder, the migration command file that migrates the device identification data, the management application installation file, and the managed application installation file from the partitioned portion of the device to the new instance of the OS; and
upon a first login to the new instance of the OS by the user, executing, from the recovery folder, the unattended answer file that:
installs the management application and the managed application at the new instance of the OS; and
re-enrolls the device in the management system, including transmitting the device identification data to a management server.
9. The non-transitory, computer-readable medium of claim 8 , wherein the request to refresh the OS originates from an administrator console and is sent to the device by the management server.
10. The non-transitory, computer-readable medium of claim 8 , wherein the request to refresh the OS originates from the device.
11. The non-transitory, computer-readable medium of claim 8 , wherein the device identification data includes a device ID, an enrollment key, and a management server authentication token.
12. The non-transitory, computer-readable medium of claim 8 , wherein the management application installation file includes instructions to install at least one of a management agent application, a managed workspace application, and a management provisioning application.
13. The non-transitory, computer-readable medium of claim 8 , the stages further including, after receiving the request to refresh the OS:
determining that at least one of the plurality of refresh process files are not stored in the recovery folder;
sending a request to the management server for the at least one of the plurality of refresh process files; and
receiving, from the management server, the at least one of the plurality of refresh process files.
14. The non-transitory, computer-readable medium of claim 8 , wherein the unattended answer file contains a re-installation command file and a re-enrollment command file.
15. A system for refreshing an operating system of a device enrolled in a management platform, the system including:
a memory storage including a non-transitory, computer-readable medium including instructions; and
a computing device including a processor that executes the instructions to carry out stages including:
receiving, at the device enrolled in a management system, a request to refresh the operating system (“OS”) of the device;
storing a plurality of refresh process files, including a backup command file, a migration command file, and an unattended answer file, to a recovery folder of the OS;
executing the backup command file that stores device identification data, a management application installation file, and a managed application installation file to the recovery folder of the OS;
installing a new instance of the OS at the device while retaining the contents of the recovery folder in a partitioned portion of the device;
upon completion of the installation of the new instance of the OS, automatically executing, from the recovery folder, the migration command file that migrates the device identification data, the management application installation file, and the managed application installation file from the partitioned portion of the device to the new instance of the OS; and
upon a first login to the new instance of the OS by the user, executing, from the recovery folder, the unattended answer file that:
installs the management application and the managed application at the new instance of the OS; and
re-enrolls the device in the management system, including transmitting the device identification data to a management server.
16. The system of claim 15 , wherein the request to refresh the OS originates from an administrator console and is sent to the device by the management server.
17. The system of claim 15 , wherein the device identification data includes a device ID, an enrollment key, and a management server authentication token.
18. The system of claim 15 , wherein the management application installation file includes instructions to install at least one of a management agent application installation file, a managed workspace application installation file, and a management provisioning application installation file.
19. The system of claim 15 , the stages further including, after receiving the request to refresh the OS:
determining that at least one of the plurality of refresh process files are not stored in the recovery folder;
sending a request to the management server for the at least one of the plurality of refresh process files; and
receiving, from the management server, the at least one of the plurality of refresh process files.
20. The system of claim 15 , wherein the unattended answer file contains a re-installation command file and a re-enrollment command file.