Remote Commands
Remote commands let you manage devices from the GuardMDM dashboard. Commands are sent via Apple Push Notification service (APNs) and executed asynchronously by the device.
Supported Commands
Device Lock
Locks the device immediately. You can optionally set a lock screen message and a PIN that must be entered to unlock.
| Field | Required | Description |
|---|---|---|
| Lock Message | No | Message displayed on the lock screen |
| PIN | No | 6-digit PIN to unlock the device |
If no PIN is provided, the user can unlock with their existing passcode.
Restart Device
Restarts the device. Available on macOS only. The device powers off and boots back up — no user interaction is required.
Shut Down Device
Shuts down the device. Available on macOS only. The device powers off completely and must be started manually.
Sync Now
Forces the device to check in with GuardMDM immediately. This triggers a refresh of:
- Device information (name, model, OS version, serial number, capacity, battery, etc.)
- Security information (encryption status, passcode compliance, firewall, FileVault)
- Installed configuration profiles
- Installed applications
Use this command when you need up-to-date information without waiting for the next scheduled check-in.
Remove Profile
Removes a specific configuration profile from the device. You must select the profile to remove from the list of installed profiles.
Note: Some profiles (e.g., the MDM enrollment profile itself) cannot be removed this way. Removing a profile may affect device functionality if settings or restrictions depend on it.
Erase Device
Performs a factory reset on the device. This is a destructive action — all data and settings are permanently deleted.
| Platform | Behavior |
|---|---|
| iOS / iPadOS | Wipes all content and settings, returns to Setup Assistant |
| macOS | Wipes all content and settings (Apple Silicon) or erases disk (Intel) |
Warning: This action cannot be undone. Use with caution.
Command History
Every command sent to a device is recorded in the command history. The history shows:
- Command — the type of command sent
- Status — current state of the command
- Sent At — when the command was sent
- Completed At — when the device acknowledged completion (if applicable)
Command Statuses
| Status | Meaning |
|---|---|
| Pending | Command sent via APNs, awaiting device acknowledgment |
| Acknowledged | Device received and is processing the command |
| Completed | Command executed successfully |
| Failed | Command could not be executed |
| Not Now | Device received the command but deferred execution (e.g., user declined) |
How Commands Work
- You issue a command from the GuardMDM dashboard
- GuardMDM sends a push notification to the device via APNs
- The device wakes and checks in with GuardMDM to retrieve the command details
- The device executes the command and reports the result back
- The command status is updated in the command history
Because commands are asynchronous, there may be a delay between sending a command and seeing its result — especially if the device is offline.