Contents
Sending commands to users' devices
This section describes how to send commands to your users' Windows devices and mobile devices.
Wiping data from a Windows device
From
, you can send a command to remotely wipe data from a user's device that is running Windows.This feature is available only if you activated Kaspersky Endpoint Security Cloud under a Kaspersky Endpoint Security Cloud Pro license.
Depending on the data wipe settings, you can remotely wipe some or all of the following data:
- Documents
Files in the standard Documents folder of the operating system, and its subfolders.
- Cookies
Files in which the browser saves data from the websites visited by the user (such as user authorization data).
- Desktop
Files in the standard Desktop folder of the operating system, and its subfolders.
- Temporary Internet Explorer files
Temporary files related to the operation of Internet Explorer, such as copies of web pages, images, and media files.
- Temporary files
Temporary files related to the operation of applications installed on the computer. For example, Microsoft Office applications create temporary files containing backup copies of documents.
- Outlook files
Files related to the operation of the Outlook mail client: data files (PST), offline data files (OST), offline address book files (OAB), and personal address book files (PAB).
- User profile
Set of files and folders that store operating system settings for the local user account.
To wipe data from a device:
- Open Kaspersky Endpoint Security Cloud Management Console.
- Select the Devices section.
The Devices section contains a list of devices that have been added to Kaspersky Endpoint Security Cloud.
- Click the link with the device name.
This opens a page containing detailed information about the device. The left part of the page shows the Commands list, which contains buttons with the commands that are available for the device.
- Click the Wipe data button.
- In the Wipe data from <Device name> window that opens, define the data wipe settings:
- How to wipe:
- Completely
Files are overwritten with random data. It is practically impossible to restore data after it is deleted.
- Quickly
Files are deleted by using the operating system resources, as if you delete them manually to the recycle bin, and then empty the recycle bin.
- Completely
- What to wipe:
- All standard folders
All of the above-mentioned data is deleted.
- Custom folders
Select the specific data to be deleted.
- All standard folders
- How to wipe:
- Click the Wipe button.
- In the Wipe data window that opens, click the Confirm button to confirm the data wipe.
The specified data is wiped from the selected device.
Page topSending commands to mobile devices
From Kaspersky Endpoint Security Cloud Management Console, you can send commands to connected mobile devices (for example, to locate or lock a device).
To send a command to a device:
- Open Kaspersky Endpoint Security Cloud Management Console.
- Select the Devices section.
The Devices section contains a list of devices that have been added to Kaspersky Endpoint Security Cloud.
- Select the check box in the list next to the name of the device to which you need to send a command.
- In the list of devices, click the link with the device name.
This opens a page containing detailed information about the device. The right part of the page shows a list of commands that were sent to the device, including the date and time the commands were sent. The left part of the page shows the Commands list, which contains buttons with the commands that are available for the device.
- Click the button with the name of the command.
The button name will change to Abort command <Name of selected command>. Execution of the command takes some time. Upon execution, the command is displayed in the list of executed commands in the right part of the page.
The set of supported commands depends on the operating system installed on the mobile device.
Set of supported commands for Android devices
Command |
Command execution result |
---|---|
Lock |
The device is locked. The device can only be unlocked by using the 16-character code defined in the device properties. |
Unlock |
Device locking with a PIN code is disabled. The previously specified PIN code is reset. |
Reset to factory settings |
All data on the device is deleted. |
Locate |
The device location is determined. The device properties page displays a map with the device location. |
Alarm |
The device emits a sound signal. The device is locked. |
Synchronize |
The security profile is instantly applied to the device, and then the device transmits the details of all events to Kaspersky Endpoint Security Cloud. |
Disable management |
The Wipe corporate data command is sent to the device. The user is prompted to manually remove Kaspersky Endpoint Security for Android from the device. In Kaspersky Endpoint Security Cloud Management Console, the device is moved to the Marked for deletion list. |
Set of supported commands for iOS and iPadOS devices
Command |
Command execution result |
---|---|
Lock |
The device is locked. |
Reset to factory settings |
All installed configuration profiles, provisioning profiles, and the iOS MDM profile are deleted. |
Wipe corporate data |
Corporate data such as corporate Wi-Fi settings, corporate contact details, and calendar are deleted. |
Synchronize |
The security profile is instantly applied to the device. |
Disable management |
The Wipe corporate data command is sent to the device. In Kaspersky Endpoint Security Cloud Management Console, the device is moved to the Marked for deletion list. |