Remote Commands
Remote commands let you manage devices from the GuardMDM dashboard. Commands are sent via Apple Push Notification service (APNs) and executed asynchronously by the device.
Supported Commands
Device Lock
Locks the device immediately.
| Platform | Behavior |
|---|---|
| iOS / iPadOS | Locks the screen; optional lock screen message and contact phone number can be shown if the device has a passcode set. |
| macOS | Restarts and locks with an EFI/Find My PIN. You can set a lock screen message and unlock PIN (or leave PIN empty for macOS to generate a 6-digit code). Requires supervision. |
Note: To track location or play a sound while locked, use Lost Mode (supervised iOS/iPadOS only).
Restart Device
Restarts the device. The device powers off and boots back up — no user interaction is required.
Shut Down Device
Shuts down the device. The device powers off completely and must be started manually.
Sync Now
Forces the device to check in with GuardMDM immediately. This triggers a refresh of:
- Device information (name, model, OS version, serial number, capacity, battery, etc.)
- Security information (encryption status, passcode compliance, firewall, FileVault)
- Installed configuration profiles
- Installed applications
Use this command when you need up-to-date information without waiting for the next scheduled check-in.
Remove Profile
Removes a specific configuration profile from the device. You must select the profile to remove from the list of installed profiles.
Note: Some profiles (e.g., the MDM enrollment profile itself) cannot be removed this way. Removing a profile may affect device functionality if settings or restrictions depend on it.
Erase Device
Performs a factory reset on the device. This is a destructive action — all data and settings are permanently deleted.
| Platform | Behavior |
|---|---|
| iOS / iPadOS | Wipes all content and settings, returns to Setup Assistant |
| macOS | Wipes all content and settings (Apple Silicon) or erases disk (Intel) |
Warning: This action cannot be undone. Use with caution.
Command History
Every command sent to a device is recorded in the command history. The history shows:
- Command — the type of command sent
- Status — current state of the command
- Sent At — when the command was sent
Command Statuses
| Status | Meaning |
|---|---|
| Command Sent | Command sent via APNs, awaiting device response |
| Acknowledged | Device received and processed the command |
| Error | Command could not be executed or the device returned an error |
How Commands Work
- You issue a command from the GuardMDM dashboard
- GuardMDM sends a push notification to the device via APNs
- The device wakes and checks in with GuardMDM to retrieve the command details
- The device executes the command and reports the result back
- The command status is updated in the command history
Because commands are asynchronous, there may be a delay between sending a command and seeing its result — especially if the device is offline.