Skip to content

Mobile device management

List phones and tablets that connect with ActiveSync; wipe a lost device remotely and manage device access rules and the MDM policy.

Global administratorAdmin console › Tools and Migration › Profelis Mobile

Mobile synchronisation is provided by Z-Push; the panel talks to the Profelis agent on the Z-Push servers. Agent setup: Mobile agent.

The screen

Open Profelis Mobile. The toolbar has Settings (1), MDM Policy... (2) and, for the selected device, Wipe (3). The iOS, Android, user and device counts appear at the bottom.

Profelis Mobile: yellow banner when the agent cannot be reached

Profelis Mobile: yellow banner when the agent cannot be reached

If an agent cannot be reached, a yellow banner above the list shows the agent's name and the error (the picture is from a server without Z-Push). If no agent is installed, remove the agent row under Settings.

Connecting the agent

  1. Press Settings.
  2. One row per Z-Push server (Add agent): name, agent URL (http://127.0.0.1:8790 if it is the same server) and, as the agent password, the secret from the agent's agent.env file.
  3. OK, then Refresh. The banner disappears and devices are listed.

Settings window

Settings window

On installations with many devices the first Refresh can take up to 45 seconds.

Wiping a lost device

  1. Type part of the account in the Search by account... box.
  2. Select the device row, press Wipe and confirm.
  3. Select the device and follow the wipe status with Device info....

Cannot be undone

Remote wipe returns the device to factory settings. Remove only deletes the device record.

Access rules

New devices are allowed by default. You can give a device an Allow or Block rule, and return it to the default with Clear access rule. To require approval for all new devices, change the device access mode in the MDM policy.

MDM policy

  1. MDM Policy....
  2. Turn on MDM (Z-Push provisioning); set the device security options (PIN, minimum PIN length, inactivity lock, encryption) and device features (camera, Wi-Fi, Bluetooth, storage card, maximum attachment).
  3. OK; the policy is written to all agents. If an agent cannot be written, a red error line appears at the top of the window.

MDM Policy window

MDM Policy window

Empty list

If there is no banner and the list is empty, it is usually a timeout; make sure the agent is up to date. If the banner shows only a host name, the mail server cannot resolve that name.