Mobile Device Remote Command Options

Jamf Pro Documentation 11.16.0
Solution
Application
Content Type
Technical Documentation
Utilities & Services
version
11.16.0
ft:locale
en-US
vrm_version
11.16.0
Update Inventory

Prompts the mobile device to contact Jamf Pro and update its inventory

Lock Device

Locks the mobile device

If the mobile device has a passcode, the user must enter it to unlock the device.

(Optional) Displays a message on the mobile device when it locks. This message is only sent if the mobile device has a passcode.

(Optional) Displays a phone number on the mobile device when it locks. The phone number is only displayed if the mobile device has a passcode.

Clear Passcode

Removes the passcode from the mobile device

If a configuration profile with a Passcode payload is installed on the device, the user is prompted to create a new passcode.

Clear Screen Time Passcode

Removes the Screen Time passcode from a device

Update Passcode Lock Grace Period

Sets the amount of time that a device's screen can be locked before requiring a passcode to unlock it

Unmanage Device

Stops communication between the mobile device and the Jamf Pro server, which means you can no longer perform management tasks on the device

When you unmanage a device, the following items are removed from the device:

  • MDM profile
  • Device certificate
  • Self Service
  • Any configuration profiles that were distributed with Jamf Pro
  • Any managed apps that were distributed with the Remove app when MDM profile is removed checkbox selected
Note:

Although an unmanaged device will no longer submit inventory, its inventory record remains in Jamf Pro.

Wipe Device

Permanently erases all data on the device and deactivates the device.

Optionally, you can:

  • Clear Activation Lock on the device
  • Retain cellular data plans (iOS 11 or later; iPadOS)
  • Suppress Proximity Setup on the device (iOS 11.3 or later; iPadOS)
Note:

Wiping a device does not remove the device from Jamf Pro or change its inventory information.

To restore the device to the original factory settings, you must manually reactivate the device.

A Return to Service option is also available in the Jamf Pro API. You can use returnToService to instruct iOS or iPadOS devices to automatically reconnect to Wi-Fi and re-enroll with Jamf Pro after erasure. For more information, see the Erase Device Command Options in the Jamf Pro API technical article.

Adjust Shared iPad Settings

Configures Shared iPad settings. You can set the following:

  • Temporary Session Only —

    You can enforce temporary sessions so users can log in only as guests (iPadOS 14.5 or later). To allow typical user sessions, users must log in with their Managed Apple Accounts.

  • Temporary Session Timeout —

    You can specify the period of inactivity on a device before the session is automatically closed.

  • Storage space type —

    You can specify how storage is allocated on a device:

    • Number of Users—The maximum number of users that can be stored with the iPad. You can specify up to 99 users. This limits the number of user accounts that can be stored locally on the iPad.
    • Storage Quota Size—The maximum amount of storage (MB) allocated for each user on a device. This overrides the maximum number of users. If devices are upgraded to iPadOS 13.4 or later, it is recommended that the device is wiped before setting the storage quota size.
      Note:

      Quota size is dependent on the device's storage capacity and must meet the following limitations:

      • Devices with a storage capacity of 64 GB or greater must have 2048 MB or greater entered for storage space.

      • Devices with a storage capacity of 32 GB or greater must have 1024 MB or greater entered for storage space.

All users must be logged out and removed from the device before the storage space type can be set.

Restart Device

Restarts a device

(Optional) Clears the passcode on the device. If this option is chosen, the Clear Passcode command is sent to the device before the device is restarted.

Send Blank Push

Sends a blank push notification, prompting the device to check in with Apple Push Notification service (APNs) and the declarative status channel

Set Wallpaper

Sets an image as wallpaper for the Lock screen, Home screen, or both screens on a supervised device

For more information, see Setting Wallpaper on Mobile Devices.

Enable/Disable Voice Roaming

Enables/disables voice or data roaming on the device

Note:

Disabling voice roaming automatically disables data roaming.

Update OS Version
Log Out User

Logs out the currently logged in user

Enable/Disable Lost Mode

Enables/disables Lost Mode on the device

Lost Mode locks a device, displays a custom message on the device's Lock Screen, and tracks its location.

For more information, see Enabling Lost Mode.

Update Location

Updates the GPS coordinates collected for a mobile device in Lost Mode

Enable/Disable Diagnostic and Usage Reporting

Enables/disables the sending of diagnostic and usage data to Apple

Note:

Disabling diagnostic and usage reporting automatically disables app analytics.

Enable/Disable App Analytics

Enables/disables the sending of app analytics data to Apple

Shut Down Device

Shuts down the device

(Optional) Clears the passcode on the device. If this option is chosen, the Clear Passcode command is sent to the device before the device is shutdown.

Enable/Disable Bluetooth

Enables/disables Bluetooth on the device

Set Activation Lock

Enables Activation Lock directly on a device

Allows a user to enable Activation Lock on the device

Note:

If Activation Lock is enabled on the device when this command is sent, Jamf Pro automatically clears the Activation Lock before allowing the user to re-enable it.

Disables and prevents Activation Lock

For more information, see the Leveraging Apple's Activation Lock Feature with Jamf Pro article.

Enable/Disable Personal Hotspot

Enables/disables the Personal Hotspot on the device

Manage Jamf Parent

Allows you to remove app restrictions set by Jamf Parent on students' school-issued devices or remove Jamf Parent management capabilities. Removing Jamf Parent management capabilities prevents Jamf Parent from managing the student device until the parent scans the QR code again. To remove Jamf Parent restrictions on student devices, you need a Jamf Pro user account with the "Remove restrictions set by Jamf Parent" privilege.

For more information, see Jamf Parent Integration with Jamf Pro.

Note:

This remote command is available as the following separate mass actions:

  • Remove restrictions set by Jamf Parent
  • Remove Jamf Parent management capabilities
Remove restrictions set by Jamf Teacher

Allows you to remove restrictions set by Jamf Teacher on students' school-issued devices. This option is only displayed if Jamf Teacher is enabled in the Jamf Teacher settings. To remove Jamf Teacher restrictions on student devices, you need a Jamf Pro user account with the "Remove restrictions set by Jamf Teacher" privilege.

For more information about how to enable Jamf Teacher, see Jamf Teacher Integration with Jamf Pro.

Refresh Cellular Plans

Refreshes a device’s cellular plan by querying a carrier URL for active eSIM cellular plan profiles

Note:

The device and carrier must support eSIM. For more information, see Find wireless carriers and worldwide service providers that offer eSIM service from Apple's support website.

Renew MDM Profile

Renews the MDM profile on the mobile device, along with the device identity certificate. The device identity certificate has a default expiration period of two years.

Note:

The Renew MDM Profile remote command is automatically issued when the built-in CA is renewed. The MDM profile will be renewed during the next mobile device check-in. For more information, see "Renewing the Built-in CA" in PKI Certificates.

Set Time Zone

Sets a time zone on a device

Recommend Software Update Version

Allows you to recommend a software version in the Software Update settings that users are allowed to install. You can recommend the following:

  • Latest major version only
  • Latest minor version only
  • Any available version

The default setting is to recommend any available version. If this is selected, then both updates for the latest major version and the latest minor version or displayed simultaneously, if available.

For more information about software updates, see About software updates for Apple devices in Apple Platform Deployment.

Disclaimer:

The Wipe Institutional Data remote command is deprecated and only applies to legacy Personal Device Profiles. User Enrollment is the Apple-preferred method for enrolling personally owned devices in a Bring Your Own Device (BYOD) program.