Management platform recovery for a user device
Examples described here include systems and methods for refreshing the operating system (“OS”) of a device enrolled in a management platform. Execution of a first command file ensures that necessary components of the management platform residing on the device are stored in a partitioned portion of the device hard drive to preserve them during the OS refresh. After a new instance of the OS has been installed, execution of a second command file migrates the necessary components from the partitioned portion of the hard drive to the new OS instance. When the user logs back into the refreshed device, a third command file installs all necessary device management components at the new OS instance and re-enrolls the device with the management platform. In this manner, the OS of a managed device can be refreshed and re-enrolled in the management platform without significant input from a user or administrator.
1. A method for refreshing an operating system of a device enrolled in a management system, the method including:
receiving, at the device enrolled the management system, a request to refresh the operating system (“OS”) of the device;
storing a plurality of refresh process files, including a backup command file, a migration command file, and an unattended answer file, to a recovery folder of the OS;
executing the backup command file to store a plurality of items in the recovery folder of the OS, the plurality of items including:
a device ID;
a management platform enrollment key;
an authentication token for authenticating communications with a management server;
a management agent application installation file; and
at least one managed application installation file;
installing a new instance of the OS at the device while retaining the plurality of items stored in the recovery folder;
automatically executing, from the recovery folder outside the new instance of the OS, the migration command file that migrates the plurality of items from the recovery folder to the new OS instance;
upon a first login to the new instance of the OS by the user, executing, from the recovery folder, the unattended answer file that installs the management agent application and transmits at least a portion of the plurality of items to the management server to enroll the device with the management system.
2. The method of claim 1 , wherein the request to refresh the OS originates from an administrator console and is sent to the device by the management server.
3. The method of claim 1 , wherein the request to refresh the OS originates from the device.
4. The method of claim 1 , wherein the installing a new instance of the OS at the device includes partitioning a portion of a hard drive of the device and retaining the plurality of items stored in the recovery folder in the partitioned portion.
5. The method of claim 1 , wherein the plurality of items in the recovery folder further includes a management workspace application installation file or a management provisioning application installation file.
6. The method of claim 1 , further including, after receiving the request to refresh the OS:
determining that at least one of the plurality of refresh process files are not stored in the recovery folder;
sending a request to the management server for the at least one of the plurality of refresh process files; and
receiving, from the management server, the at least one of the plurality of refresh process files.
7. The method of claim 1 , wherein the unattended answer file contains a re-installation command file and a re-enrollment command file.
8. A non-transitory, computer-readable medium including instructions that, when executed by a processor, performs stages for refreshing an operating system of a device enrolled in a management platform, the stages including:
receiving, at the device enrolled in a management system, a request to refresh the operating system (OS) of the device;
storing a plurality of refresh process files, including a backup command file, a migration command file, and an unattended answer tile, to a recovery folder of the OS;
executing the backup command file to store a plurality of items in the recovery folder of the OS, the plurality of items including:
a device ID;
a management platform enrollment key;
an authentication token for authenticating communications with a management server;
a management agent application installation file; and
at least one managed application installation file;
installing a new instance of the OS at the device while retaining the plurality of items stored in the recovery folder;
automatically executing, from the recovery folder outside the new instance of the OS, the migration command file that migrates the plurality of items from the recovery folder to the new OS instance;
upon a first login to the new instance of the OS by the user, executing, from the recovery folder, the unattended answer file that installs the management agent application and transmits at least a portion of the plurality of items to the management server to enroll the device with the management system.
9. The non-transitory, computer-readable medium of claim 8 , wherein the request to refresh the OS originates from an administrator console and is sent to the device by the management server.
10. The non-transitory, computer-readable medium of claim 8 , wherein the request to refresh the OS originates from the device.
11. The non-transitory, computer-readable medium of claim 8 , wherein the installing a new instance of the OS at the device includes partitioning a portion of a hard drive of the device and retaining the plurality of items stored in the recovery folder in the partitioned portion.
12. The non-transitory, computer-readable medium of claim 8 , wherein the plurality of items in the recovery folder further includes a management workspace application installation file or a management provisioning application installation file.
13. The non-transitory, computer-readable medium of claim 8 , the stages further including, after receiving the request to refresh the OS:
determining that at least one of the plurality of refresh process files are not stored in the recovery folder;
sending a request to the management server for the at least one of the plurality of refresh process files; and
receiving, from the management server, the at least one of the plurality of refresh process files.
14. The non-transitory, computer-readable medium of claim 8 , wherein the unattended answer file contains a re-installation command file and a re-enrollment command file.
15. A system for refreshing an operating system of a device enrolled in a management platform, the system including:
a memory storage including a non-transitory, computer-readable medium including instructions; and
a computing device including a processor that executes the instructions to carry out stages including:
receiving, at the device enrolled in a management system, a request to refresh the operating system (“OS”) of the device;
storing a plurality of refresh process files, including a backup command file, a migration command file, and an unattended answer file, to a recovery folder of the OS;
executing the backup command file to store a plurality of items in the recovery folder of the OS, the plurality of items including:
a device ID;
a management platform enrollment key;
an authentication token for authenticating communications with a management server;
a management agent application installation file; and
at least one managed application installation file;
installing a new instance of the OS at the device while retaining the plurality of items stored in the recovery folder;
automatically executing, from the recovery folder outside the new instance of the OS, the migration command file that migrates the plurality of items from the recovery folder to the new OS instance;
upon a first login to the new in of the OS by the user, executing, from the recovery folder, the unattended answer file that installs the management agent application and transmits at least a portion of the plurality of items to the management server to enroll the device with the management system.
16. The system of claim 15 , wherein the request to refresh the OS originates from an administrator console and is sent to the device by the management server.
17. The system of claim 15 , wherein the installing a new instance of the OS at the device includes partitioning a portion of a hard drive of the device and retaining the plurality of items stored in the recovery folder in the partitioned portion.
18. The system of claim 15 , wherein the plurality of items in the recovery folder further includes a management workspace application installation file or a management provisioning application installation file.
19. The system of claim 15 , the stages further including, after receiving the request to refresh the OS:
determining that at least one of the plurality of refresh process files are not stored in the recovery folder;
sending a request to the management server for the at least one of the plurality of refresh process files; and
receiving, from the management server, the at least one of the plurality of refresh process files.
20. The system of claim 15 , wherein the unattended answer file contains a re-installation command file and a re-enrollment command file.