Manage company computers with the Controller
Signed device settings, staged Passkey-X updates and remote actions on Business; software, local admin passwords and admin rights on Enterprise.
Steps
An owner or organization admin opens Controller › Keys & settings and creates the organization keys (two-step needed). Choose the vault that keeps them; keep it to your IT leads.
In Groups & baselines, create a group (a department, an office or an update ring) and choose its settings: screensaver and screen lock, wallpaper, the message before sign-in, firewall, automatic updates, USB storage, Passkey-X settings and its update channel.
Leave it on Report only first. Computers show what would change (drift); switch to Enforce when it looks right.
In Install pack, pick the group and copy the install command. Run it as administrator, or push it with Intune, Jamf or a login script.
Select computers to lock them, send a message, restart them, put them in lost mode or remove the Passkey-X data. Restarts, wipes and other sensitive actions are signed with your key.
Enterprise: add apps in Software and install or remove them in the background; turn on local admin passwords; approve requests in Admin rights.
Good to know
- Give your IT team a custom role with Control company computers. Local admin passwords and admin rights need Local admin passwords and admin rights as well.
- A setting Group Policy, Intune or Jamf already manages is left alone and shown as managed elsewhere.
- Every result is signed by the computer and chained to the previous one; Check the chain here (on a computer) shows if a record was changed or is missing.