Remote Commands

Sending remote commands to endpoint devices.

Overview

Remote commands let you control devices from the admin dashboard. Commands are queued on the server and picked up by agents during their next heartbeat or command poll.

Available Commands

CommandDescriptionRequires
`lock`Lock the device screen—
`wipe`Wipe agent data`confirm: true` in payload
`restart_agent`Restart the agent process—
`update_policy`Force immediate policy sync—
`force_encrypt`Enable disk encryption—
`collect_status`Request full status report—
`enable_guard`Enable a specific guardGuard name
`disable_guard`Disable a specific guardGuard name
`set_message`Display message on deviceMessage text
`run_scan`Run compliance scan—

Command Lifecycle

Admin sends command → pending → delivered → executed/failed
  1. pending — Command created, waiting for agent to poll
  2. delivered — Agent received the command
  3. executed — Agent successfully executed the command
  4. failed — Agent failed to execute (result includes error details)

Sending a Command

  1. Navigate to Devices → select a device
  2. Click Send Command
  3. Select the command type
  4. Add any required parameters
  5. Click Send

Platform-Specific Implementation

CommandWindowsmacOS
`lock``LockWorkStation` API`pmset displaysleepnow`
`set_message``MessageBox``osascript display dialog`
`force_encrypt`Enable BitLockerEnable FileVault
`restart_agent``os.execv()` self-restart`os.execv()` self-restart

Security

  • The wipe command requires explicit confirm: true in the payload to prevent accidental data loss
  • Only tenant_manager and above can send commands
  • All commands are logged in the audit trail