Authorized remote mobile device management of a targeted managed device
In certain aspects of the present disclosure, a computer-implemented includes generating a unique code for display on a managed device, and authorizing a manager device to selectively initiate at least one workflow on the managed device. The method includes, responsive to the manager device scanning the unique code, verifying the manager device is authorized. The method includes displaying on the manager device, based on verification that the manager device is authorized, an option corresponding to the at least one workflow. The method includes receiving, from the manager device, a selected workflow. The method includes, responsive to receiving the selected workflow, transmitting a message to a push notification server initiating the managed device to communicate with an MDM server. The method includes transmitting a command to the managed device causing performance of the selected workflow on the managed device. Systems and machine-readable media are also provided.
1 . A computer-implemented method comprising:
generating a unique code for display on a managed device, wherein the managed device is one of a tablet computer and a mobile phone, wherein the managed device is authorized for use to an employee, and wherein the unique code is displayed on a lock screen wallpaper of the managed device;
assigning a manager device to a manager, wherein the manager device comprises a pre-installed manager app unique to the manager device;
authorizing, via the manager app, the manager device to selectively initiate at least one workflow on the managed device assigned to the employee;
responsive to the manager device scanning, via the manager app, the unique code displayed on the managed device, verifying the manager device is authorized to selectively initiate at least one workflow on the managed device;
displaying on the manager device via the manager app, based on verification that the manager device is authorized, a customizable option corresponding to the at least one workflow, wherein the customizable option is customized to display at least an erase device task of the at least one workflow;
receiving, from the manager device via the manager app, a selected workflow corresponding to the customizable option selected from the at least one workflow;
responsive to receiving the selected workflow, transmitting a message to a push notification server, wherein the message initiates the managed device to communicate with a mobile device management server; and
transmitting, in response to the managed device communicating with the mobile device management server, a command to the managed device causing performance of the selected workflow on the managed device.
2 . The computer-implemented method of claim 1 , wherein authorizing the manager device to selectively initiate at least one workflow is limited to authorizing the manager device to selectively initiate only one workflow.
3 . The computer-implemented method of claim 1 , further comprising:
restricting, subsequent to performance of the selected workflow on the managed device, the manager device from initiating further workflows on the managed device.
4 . The computer-implemented method claim 1 , wherein the unique code is one of a QR code and a text code.
5 . The computer-implemented method of claim 1 , wherein the at least one workflow further comprises one of a sign out device task, an update inventory task, and an update extension attribute task.
6 . The computer-implemented method of claim 1 , wherein the selected workflow is a sign out device task, wherein the command to the managed device causes clearing of a passcode on the managed device and launching a reset app on the managed device.
7 . The computer-implemented method of claim 1 , wherein the selected workflow is an erase device task, wherein the command to the managed device causes one of erasing the managed device and configuring a lost mode state on the managed device.
8 . The computer-implemented method of claim 1 , wherein the selected workflow is an update inventory task, wherein the command to the managed device causes updating an inventory of the managed device.
9 . The computer-implemented method of claim 1 , wherein the selected workflow is an update extension attribute task, wherein the command to the managed device causes updating an extension attribute of the managed device.
10 . A system comprising:
a memory comprising instructions; and
a processor configured to execute the instructions which, when executed, cause the processor to:
generate a unique code for display on a managed device, wherein the managed device is one of a tablet computer and a mobile phone, wherein the managed device is authorized for use to an employee, and wherein the unique code is displayed on a lock screen wallpaper of the managed device;
assign a manager device to a manager, wherein the manager device comprises a pre-installed manager app unique to the manager device;
authorize, via the manager app, the manager device to selectively initiate at least one workflow on the managed device assigned to the employee;
responsive to the manager device scanning, via the manager app, the unique code displayed on the managed device, verify the manager device is authorized to selectively initiate at least one workflow on the managed device;
display on the manager device via the manager app, based on verification that the manager device is authorized, a customizable option corresponding to the at least one workflow, wherein the customizable option is customized to display at least an erase device task of the at least one workflow;
receive, from the manager device via the manager app, a selected workflow corresponding to the customizable option selected from the at least one workflow;
responsive to receiving the selected workflow, transmit a message to a push notification server, wherein the message initiates the managed device to communicate with a mobile device management server; and
transmit, in response to the managed device communicating with the mobile device management server, a command to the managed device causing performance of the selected workflow on the managed device.
11 . The system of claim 10 , wherein the manager device is authorized to selectively initiate only one workflow.
12 . The system of claim 10 , further comprising instructions to cause the processor to:
restrict, subsequent to performance of the selected workflow on the managed device, the manager device from initiating further workflows on the managed device.
13 . The system of claim 10 , wherein the unique code is one of a QR code and a text code.
14 . The system of claim 10 , wherein the at least one workflow comprises one of a sign out device task, an update inventory task, and an update extension attribute task.
15 . A non-transitory machine-readable storage medium comprising machine-readable instructions for causing a processor to execute a method, the method comprising:
generating a unique code for display on a managed device, wherein the managed device is authorized for use to an employee, and wherein the unique code is displayed on a lock screen wallpaper of the managed device;
assigning a manager device to a manager, wherein the manager device comprises a pre-installed manager app unique to the manager device;
authorizing, via the manager app, the manager device to selectively initiate at least one workflow on the managed device assigned to the employee, wherein the managed device is one of a tablet computer and a mobile phone;
responsive to the manager device scanning, via the manager app, the unique code displayed on the managed device, verifying the manager device is authorized to selectively initiate at least one workflow on the managed device;
displaying on the manager device via the manager app, based on verification that the manager device is authorized, a customizable option corresponding to the at least one workflow, wherein the customizable option is customized to display at least an erase device task of the at least one workflow;
receiving, from the manager device via the manager app, a selected workflow corresponding to the customizable option selected from the at least one workflow; responsive to receiving the selected workflow, transmitting a message to a push notification server, wherein the message initiates the managed device to communicate with a mobile device management server; and transmitting, in response to the managed device communicating with the mobile device management server, a command to the managed device causing performance of the selected workflow on the managed device.
16 . The non-transitory machine-readable storage medium of claim 15 , wherein authorizing the manager device to selectively initiate at least one workflow is limited to authorizing the manager device to selectively initiate only one workflow.
17 . The non-transitory machine-readable storage medium of claim 15 , further including instructions for causing the processor to execute the method comprising:
restricting, subsequent to performance of the selected workflow on the managed device, the manager device from initiating further workflows on the managed device.
18 . The non-transitory machine-readable storage medium of claim 15 , wherein the at least one workflow comprises one of a sign out device task, an update inventory task, and an update extension attribute task.