Sending commands to mobile devices

From Kaspersky Endpoint Security Cloud Management Console, you can send commands to connected mobile devices (for example, to locate or lock a device).

To send a command to a device:

Open Kaspersky Endpoint Security Cloud Management Console.
Select the Devices section.
The Devices section contains a list of devices that have been added to Kaspersky Endpoint Security Cloud.
Select the check box in the list next to the name of the device to which you need to send a command.
In the list of devices, click the link with the device name.
This opens a page containing detailed information about the device. The right part of the page shows a list of commands that were sent to the device, including the date and time the commands were sent. The left part of the page shows the Commands list, which contains buttons with the commands that are available for the device.
Click the button with the name of the command.
The button name will change to Abort command <Name of selected command>. Execution of the command takes some time. Upon execution, the command is displayed in the list of executed commands in the right part of the page.

The set of supported commands depends on the operating system installed on the mobile device.

Set of supported commands for Android devices

Command	Command execution result
Lock	The mobile device is locked. The device can only be unlocked by using the 16-character code defined in the device properties.
Unlock	The mobile device is unlocked. After unlocking a device running Android 5.0 – 6, the screen unlock password is reset to "1234". After unlocking a device running Android 7.0 or later, the screen unlock password is not changed.
Reset to factory settings	All data is deleted from the mobile device and the settings are rolled back to their factory values. After this command is executed, the device will not be able to receive or execute subsequent commands. On devices running Android 14 or later, this response is only applicable if the device is operating in device owner mode.
Locate	The device location is determined. The device properties page displays a map with the device location.
Alarm	The mobile device sounds an alarm. The alarm is sounded for 5 minutes (or for 1 minute if the device battery is low).
Synchronize	The security profile is instantly applied to the device, and then the device transmits the details of all events to Kaspersky Endpoint Security Cloud.
Disable management	The Wipe corporate data command is sent to the device. The user is prompted to manually remove Kaspersky Endpoint Security for Android from the device. In Kaspersky Endpoint Security Cloud Management Console, the device is moved to the Marked for deletion list.

Set of supported commands for iOS and iPadOS devices

Command	Command execution result
Lock	The mobile device is locked.
Reset to factory settings	All installed configuration profiles, provisioning profiles, and the iOS MDM profile are deleted. After this command is executed, the device will not be able to receive or execute subsequent commands.
Wipe corporate data	Corporate data such as corporate Wi-Fi settings, corporate contact details, and calendar are deleted.
Synchronize	The security profile is instantly applied to the device.
Disable management	The Wipe corporate data command is sent to the device. In Kaspersky Endpoint Security Cloud Management Console, the device is moved to the Marked for deletion list.