Available Device Actions
SOTI MobiControl device actions are predefined commands that administrators can remotely execute on managed devices. These actions are essential for maintaining control, enforcing policies, troubleshooting, and ensuring device compliance across an enterprise fleet.
Device actions are quick operations that can be performed on:
- A single device
- Multiple devices
- Entire device groups
The following table outlines the available device actions in SOTI MobiControl, including required permissions. See Performing Device Actions for instructions on sending device action.
Important: In July 2022, Samsung deprecated
Samsung E-FOTA and replaced it with Samsung Knox E-FOTA. As of SOTI MobiControl 2024.1, Samsung E-FOTA is no longer supported.
Instead, SOTI MobiControl integrates Samsung Knox E-FOTA to manage
firmware on enrolled Samsung devices through the Samsung Knox Admin Portal. For
more details, visit: https://www.samsungknox.com/.
| Device Action | Description | Permission Required |
|---|---|---|
| Activate DDM | Activates the Declarative Device Management (DDM) protocol on this
device. For details on activating this in your enrollment policy, see
Activate Declarative Device Management. Requires one of
the following:
Warning: There is no
deactivate Declarative Device Management (DDM) device action.
Unenroll the device to deactivate DDM. |
Activate Declarative Device Management |
| Allow SOTI Hub Access | Grants access to content within SOTI Hub. | Manage SOTI Hub |
| Allow SOTI Surf Access | Enables access to content within SOTI Surf. | Manage SOTI Surf |
| Allow Exchange Access | Provides access to Microsoft Exchange email through SOTI MobiControl Enterprise Resource Gateway or Microsoft Exchange Server integration. | Manage Device Exchange Access |
| App Feedback Update | Uploads a report containing status changes of managed apps to the
Google Play server. Note: You can only use this
action three times every 24 hours on a device. |
App Feedback Update |
| Approve Windows Updates | Approves and installs updates on Windows Modern devices or
groups. Sort available updates by their publishing date and install them as required. Note: See Windows Updates Policy | Configuration Details for details on managing Windows Updates using SOTI MobiControl. |
Manage Windows Updates |
| Block SOTI Hub Access | Prevents access to content within SOTI Hub. | Manage SOTI Hub |
| Block SOTI Surf Access | Prevents access to content within SOTI Surf. | Manage SOTI Surf |
| Block Exchange Access | Blocks access to Microsoft Exchange email through the SOTI MobiControl Enterprise Resource Gateway or Microsoft Exchange Server integration. | Manage Device Exchange Access |
| Block SOTI VPN | Blocks a device's access to SOTI Virtual Private Network (VPN). | Send Action Commands |
| Bypass Activation Lock | Overrides Apple’s activation lock on supervised iOS devices. | Bypass Activation Lock |
| Cancel Firmware Upgrade | Cancels scheduled Over the Air (OTA) Zebra device firmware upgrades. See Cancelling Scheduled Upgrades for more details. | Firmware over the Air |
| Check-In | Forces the devices to connect to SOTI MobiControl and retrieve updates or configuration changes. | Check-in |
| Clear SOTI Hub Cache | Deletes all cached content from SOTI Hub. | Manage SOTI Hub |
| Clear SOTI Surf Cache | Deletes all cached content from SOTI Surf. | Manage SOTI Surf |
| Clear Restrictions | Removes all user-configured restrictions from the device. | Clear Restrictions |
| Delete | Removes the device from SOTI MobiControl. | Delete |
| Delete (Local User) | Delete a local user. Note: While you can delete
users from the device, SOTI MobiControl may
recreate them due to profile assignment. To permanently remove a
user, delete them from both the device and the
profile. |
Manage Device User(s) |
| Delete User | Deletes a local user account on a macOS device. Requires macOS 10.13 or later. | Delete User |
| Disable | Disconnects a device from the SOTI MobiControl
deployment server. Disconnected devices do not receive configuration changes or updates from SOTI MobiControl until they are re-enabled. |
Enable/Disable |
| Disable Agent Upgrade | Prevents devices from upgrading to the latest version of the SOTI MobiControl device agent. | Upgrade Agent |
| Disable Kiosk Screen | Disables Kiosk on the device. Available only on the following platforms:
|
Manage Device Administrator |
| Disable Lost Mode | Disables managed lost mode on Apple devices. Note: If a passcode-protected
device loses network connectivity, you cannot disable Lost Mode
remotely. Use recovery mode to restore it. |
Enable/Disable Lost Mode |
| Disable Microsoft Shared Device Mode | Disables Microsoft Shared Device Mode (iOS) | Manage Microsoft Shared Device Mode permission |
| Disable Passcode Lock | Removes the screen lock passcode from devices. | Disable Passcode Lock |
| Disable Windows Sandbox | Disables the built-in Windows Sandbox feature for the selected Windows Modern device. | Manage Windows Sandbox |
| Enable | Reconnects a previously disconnected device. | Enable/Disable |
| Enable Agent Upgrade | Upgrades devices to the latest version of the SOTI MobiControl device agent. | Upgrade Agent |
| Enable Kiosk Screen | Enables Kiosk mode on the device. Available only on:
|
Manage Device Administrator |
| Enable Lost Mode | Enables managed lost mode on Apple devices. Note: Send the Disable Passcode
Lock action before enabling Lost Mode. |
Enable/Disable Lost Mode |
| Enable Microsoft Shared Device Mode | Enables Microsoft Shared Device Mode (iOS) | Manage Microsoft Shared Device Mode permission |
| Enable Windows Sandbox | Enables the built-in Windows Sandbox feature for the selected Windows Modern device. | Manage Windows Sandbox |
| Enter Admin Mode | Grants device users administrator access (Android only). | Manage Device Kiosk |
| Enter User Mode | Disables administrator access for the user (Android only). | Manage Device Kiosk |
| Install Device Plugin | Installs or upgrades to the latest plugin version (Android only). | Manage Device Plugins |
| Live View |
Opens SOTI XSight Live View in a new tab for selected devices. For details, see SOTI MobiControl Live View Device Action. Important:
Important: Without a
valid SOTI XSight license, Live View functionality is limited,
including showing live device positions. |
Locate |
| Lock | Activates the lock screen on selected devices. See Locking a Device. For Windows/Android configuration, see: | Lock |
| Log Out |
|
Manage Microsoft Shared Device Mode permission |
| Manage Group Membership | Change and manage group memberships for local users, including custom
groups. Note:
|
Manage Device User(s) and Configure Device/Device Groups |
| Manage Password | Manage the local user's password. Note: If you
chose an auto-generated password option, the existing password field
is pre-populated. |
|
| Play Sound | Plays a sound from the device to help locate it. | Lock |
| Refresh OS Update Status | Retrieves and displays the latest OS update status in the Device Information panel. | Refresh Software Update Information |
| Regenerate Personal Recovery Key | Regenerates the personal recovery key for device users. See Personal Recovery Key (PRK) Regeneration. | Regenerate Personal Recovery Key |
| Reinstall Application | Initiates the reinstallation of a previously deployed managed application. | Configure devices/device groups |
| Remote Ring | Sends a command to the device to make the device ring. | Remote Ring |
| Remove | Removes a device from a virtual device group, including inherited configurations. | Manage Devices and View Groups |
| Remove Managed App | Removes an application deployed through SOTI MobiControl. | Configure devices/device groups |
| Rename | Renames the device within SOTI MobiControl. | Rename |
| Report Incident | Creates a support ticket with the device details in SOTI XSight. Note: You must have
SOTI XSight installed and
configured. |
None |
| Reset Account | Resets enterprise binding for Managed Google Play accounts (Android Enterprise). Replaces the existing account with a new one from the selected binding. | Reset Account |
| Reset Exchange Access | Resets Microsoft Exchange email access to match compliance policies. | Manage Device Exchange Access |
| Reset Knox E-FOTA Client | Resets the Samsung Knox E-FOTA client for selected devices. | Manage Android Firmware Upgrade |
| Reset Passcode | Changes the device passcode to one specified by the administrator. | Set Passcode |
| Reset SOTI VPN | Regenerates the SOTI VPN key and restores SOTI VPN access if blocked. | Assign VPN Hubs |
| Scan for OS Updates | Scans Apple servers for newer OS versions. | Refresh Software Update Information |
| Scan for Viruses | Initiates an immediate virus scan on the device. | Antivirus Controls |
| Send Message | Sends a message to the SOTI MobiControl Device Agent for managed devices. | Send Messages |
| Send Script | Allows administrators to write and execute scripts on devices. | Send Scripts |
| Send SMS | Allows administrators to send SMS messages to devices. | Send Messages |
| Set as Managed Application | Marks an already installed application on the macOS device as a managed app. | Configure devices/device groups |
| Set Device Name | Changes the device name at the device level. Tip: Use macros to automatically
generate names. |
Rename |
| Set Firmware Password | Sets or clears the firmware password (macOS 10.13+ required). | Set Firmware Password |
| Set Managed Admin Password | Sets the password for the managed admin account on macOS (10.11+ required). | Manage Device Users |
| Set Wallpaper | Sets the device’s screen wallpaper. | Set Wallpaper |
| Soft Reset | Executes a soft reset, closing applications and clearing RAM. | Soft Reset |
| Sync Files Now | Forces immediate file sync between devices and SOTI MobiControl. | Sync Files Now |
| Sync Knox E-FOTA Device Status | Syncs devices from Samsung Knox E-FOTA with SOTI MobiControl. | Manage Android Firmware Upgrade |
| Sync LifeGuard OTA Device Status | Syncs devices from the Zebra OTA server with SOTI MobiControl. Note: Available only
for Zebra devices with a logged-in OTA server
account. |
Firmware over the air |
| Turn Off/Suspend | Turns the device off. | Turn Off/Suspend |
| Unenroll | Unenrolls the device from SOTI MobiControl management, allowing reassignment to a new user. | Unenroll |
| Unenroll for Knox E-FOTA | Unenrolls devices from Samsung Knox E-FOTA servers. Note: Devices remain uploaded even after
unenrollment. |
Manage Android Firmware Upgrade |
| Unlock User | Unlocks a locked macOS local user account (macOS 10.13+ required). | Unlock User |
| Update eSIM Cellular Plan | Sends a request to update the eSIM cellular plan (iOS 13+ required). | Update eSIM Cellular Plan |
| Update MDM Profile | Updates the MDM profile on Apple devices. | Update MDM profile on device |
| Update OS | Updates supported Apple devices to the latest OS version. Note: The device must be a supervised
device. Note: A version
number with a letter (for example, 16.4(a)) indicates a Rapid Security Response OS
version. |
Update Software |
| Update Virus Definitions | Updates the device's virus definitions for virus scans. | Antivirus Controls |
| Upgrade Agent Now | Downloads and installs the latest Device Agent version. | Upgrade Agent |
| Upgrade Firmware | Initiates an OTA Zebra device firmware upgrade. See Upgrading Firmware on Zebra Devices using LifeGuard OTA. | Firmware over the Air |
| Upload Device(s) to Knox E-FOTA | Uploads selected devices to Samsung Knox E-FOTA servers. Note: You must upload devices before
enrolling them. |
Manage Android Firmware Upgrade |
| Wipe | Erases all data on the device. | Wipe |