Windows device commands
Last updated July 26th, 2023
The available commands for a device vary based on its management mode.
|Lock Device||Locks the device. The following characters aren't supported in the lock screen message: \, ", [, and ].|
|Reboot Device||Restarts the device 5 minutes after this command is received. After restart, the device user must sign in.|
|Factory Reset||Factory resets and unenrolls the device.|
|Apply Latest Profiles||Pushes and applies the latest profile and app information to the device.|
|Enterprise Wipe||Unenrolls the device from Knox Manage and removes all enterprise data, including profiles and internal apps. Unlike a factory reset, personal user data is not deleted from the device.|
Installs an app on the device.
The app installation allowlist and blocklist policy take precedence over this command. If an app is blocked, then this command can't install it.
Uninstalls an app from the device
The app installation allowlist and blocklist policy take precedence over this command. If an app is explicitly allowed, then this command can't uninstall it.
Sends an emergency message to the device. The message is shown on the notification area of the device.
|Unenroll Device||Unenrolls the device.|
|Update User Information||
Updates the device user information such as the user activation status, username, user settings, and license information.
If the user is signed out from the enrolled device, you can send this device command to enable the user to sign in to Knox Manage automatically.
|Lock Screen of Knox Manage agent||
Locks the Knox Manage agent.
When the agent is locked, the device user must enter the agent's password that was configured during enrollment. If the user forgets the password, you can send the Delete Account command to sign out the user. Then, they can reset the password upon sign in.
|Unlock Knox Manage agent||Unlocks the Knox Manage agent.|
|Delete account||Removes the account stored by the Knox Manage agent.|
|Collect current location||
Pulls the current location information from the device.
|Sync Device Information||
Pulls the device's inventory and app information.
|Sync Installed App List||
Pulls the device's app list.
|Select||Allows you to execute remote code on devices to manually perform Windows management tasks that aren't currently available in Knox Manage. To access this feature, contact firstname.lastname@example.org.|
Is this page helpful?
Thank you for your feedback!