Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-04-21 13:37:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 91
fleet/docs/mdm-commands.yml
Steven Palmesano 3b562c2ffb
Fix Apple's spelling errors (#39464) 
stving -> string
PayloamVersion -> PayloadVersion
PaylpadRemovalDisallowed -> PayloadRemovalDisallowed

Originally reported at
https://macadmins.slack.com/archives/C0214NELAE7/p1770365345839839

Looks like we just copied from [Apple's
example](https://developer.apple.com/documentation/devicemanagement/install-profile-command),
which has the errors.
2026-02-06 13:37:40 -06:00

3367 lines
122 KiB
YAML
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

#
# █████╗ ██████╗ ██████╗ ██╗ ███████╗
# ██╔══██╗██╔══██╗██╔══██╗██║ ██╔════╝
# ███████║██████╔╝██████╔╝██║ █████╗
# ██╔══██║██╔═══╝ ██╔═══╝ ██║ ██╔══╝
# ██║ ██║██║ ██║ ███████╗███████╗
# ╚═╝ ╚═╝╚═╝ ╚═╝ ╚══════╝╚══════╝
#
- name: Install profile
platform: apple
category: Profile managment
description: Install a configuration profile on a device.
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/install-profile-command
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Payload</key>
<data>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</data>
<key>RequestType</key>
<string>InstallProfile</string>
</dict>
<key>CommandUUID</key>
<string>0001_InstallProfile</string>
</dict>
</plist>
- name: Profile list
platform: apple
category: Profile managment
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/profile-list-command
description: Get a list of installed profiles on a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ManagedOnly</key>
<false/>
<key>RequestType</key>
<string>ProfileList</string>
</dict>
<key>CommandUUID</key>
<string>0001_ProfileList</string>
</dict>
</plist>
- name: Remove profile
platform: apple
category: Profile managment
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/remove-profile-command
description: Remove a previously installed profile from the device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Identifier</key>
<string>com.acme.myprofile</string>
<key>RequestType</key>
<string>RemoveProfile</string>
</dict>
<key>CommandUUID</key>
<string>0001_RemoveProfile</string>
</dict>
</plist>
- name: Install provisioning profile
platform: apple
category: Profile managment
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/install-provisioning-profile-command
description: Install a provisioning profile on a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 11.0+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ProvisioningProfile</key>
<data>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</data>
<key>RequestType</key>
<string>InstallProvisioningProfile</string>
</dict>
<key>CommandUUID</key>
<string>0001_InstallProvisioningProfile</string>
</dict>
</plist>
- name: Provisioning profile list
platform: apple
category: Profile managment
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/provisioning-profile-list-command
description: Get a list of installed provisioning profiles on a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 11.0+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ManagedOnly</key>
<false/>
<key>RequestType</key>
<string>ProvisioningProfileList</string>
</dict>
<key>CommandUUID</key>
<string>0001_ProvisioningProfileList</string>
</dict>
</plist>
- name: Remove provisioning profile
platform: apple
category: Profile managment
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/remove-provisioning-profile-command
description: Remove a previously installed provisioning profile from a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 11.0+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>RemoveProvisioningProfile</string>
<key>UUID</key>
<string>493d9dc8-e4c0-4fd8-bd8e-8fd4c0dc7b0c</string>
</dict>
<key>CommandUUID</key>
<string>0001_RemoveProvisioningProfile</string>
</dict>
</plist>
- name: Device information
platform: apple
category: Device details
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/device-information-command
description: Get detailed information about a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Queries</key>
<array>
<string>UDID</string>
<string>Languages</string>
<string>Locales</string>
<string>DeviceID</string>
<string>OrganizationInfo</string>
<string>LastCloudBackupDate</string>
<string>AwaitingConfiguration</string>
<string>MDMOptions</string>
<string>iTunesStoreAccountIsActive</string>
<string>iTunesStoreAccountHash</string>
<string>DeviceName</string>
<string>OSVersion</string>
<string>BuildVersion</string>
<string>ModelName</string>
<string>Model</string>
<string>ProductName</string>
<string>SerialNumber</string>
<string>DeviceCapacity</string>
<string>AvailableDeviceCapacity</string>
<string>BatteryLevel</string>
<string>CellularTechnology</string>
<string>ICCID</string>
<string>BluetoothMAC</string>
<string>WiFiMAC</string>
<string>EthernetMACs</string>
<string>CurrentCarrierNetwork</string>
<string>SubscriberCarrierNetwork</string>
<string>CurrentMCC</string>
<string>CurrentMNC</string>
<string>SubscriberMCC</string>
<string>SubscriberMNC</string>
<string>SIMMCC</string>
<string>SIMMNC</string>
<string>SIMCarrierNetwork</string>
<string>CarrierSettingsVersion</string>
<string>PhoneNumber</string>
<string>DataRoamingEnabled</string>
<string>VoiceRoamingEnabled</string>
<string>PersonalHotspotEnabled</string>
<string>IsRoaming</string>
<string>IMEI</string>
<string>MEID</string>
<string>ModemFirmwareVersion</string>
<string>IsSupervised</string>
<string>IsDeviceLocatorServiceEnabled</string>
<string>IsActivationLockEnabled</string>
<string>IsDoNotDisturbInEffect</string>
<string>EASDeviceIdentifier</string>
<string>IsCloudBackupEnabled</string>
<string>OSUpdateSettings</string>
<string>LocalHostName</string>
<string>HostName</string>
<string>CatalogURL</string>
<string>IsDefaultCatalog</string>
<string>PreviousScanDate</string>
<string>PreviousScanResult</string>
<string>PerformPeriodicCheck</string>
<string>AutomaticCheckEnabled</string>
<string>BackgroundDownloadEnabled</string>
<string>AutomaticAppInstallationEnabled</string>
<string>AutomaticOSInstallationEnabled</string>
<string>AutomaticSecurityUpdatesEnabled</string>
<string>OSUpdateSettings</string>
<string>LocalHostName</string>
<string>HostName</string>
<string>IsMultiUser</string>
<string>IsMDMLostModeEnabled</string>
<string>MaximumResidentUsers</string>
<string>PushToken</string>
<string>DiagnosticSubmissionEnabled</string>
<string>AppAnalyticsEnabled</string>
<string>IsNetworkTethered</string>
<string>ServiceSubscriptions</string>
</array>
<key>RequestType</key>
<string>DeviceInformation</string>
</dict>
<key>CommandUUID</key>
<string>0001_DeviceInformation</string>
</dict>
</plist>
- name: Device configured
platform: apple
category: Device details
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/device-configured-command
description: Inform the device that it can allow the user to continue in Setup Assistant.
supportedDeviceTypes:
- iOS 9.0+
- iPadOS 9.0+
- macOS 10.11+
- tvOS 10.2+
- visionOS 2.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>DeviceConfigured</string>
</dict>
<key>CommandUUID</key>
<string>0001_DeviceConfigured</string>
</dict>
</plist>
- name: User configured
platform: apple
category: Device details
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/user-configured-command
description: Inform the device that it can allow the user to continue in Setup Assistant.
supportedDeviceTypes:
- iOS 9.0+
- iPadOS 9.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>UserConfigured</string>
</dict>
<key>CommandUUID</key>
<string>0001_UserConfigured</string>
</dict>
</plist>
- name: Restrictions
platform: apple
category: Device details
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/restrictions-command
description: Get a list of restrictions on the device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ProfileRestrictions</key>
<false/>
<key>RequestType</key>
<string>Restrictions</string>
</dict>
<key>CommandUUID</key>
<string>0001_Restrictions</string>
</dict>
</plist>
- name: Erase device
platform: apple
category: Device state
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/erase-device-command
description: Remotely and immediately erase a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>DisallowProximitySetup</key>
<false/>
<key>PreserveDataPlan</key>
<true/>
<key>RequestType</key>
<string>EraseDevice</string>
</dict>
<key>CommandUUID</key>
<string>0001_EraseDevice</string>
</dict>
</plist>
- name: Device lock
platform: apple
category: Device state
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/device-lock-command
description: Remotely and immediately lock a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- visionOS 2.0+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Message</key>
<string>Lock Message</string>
<key>PhoneNumber</key>
<string>408-555-5555</string>
<key>RequestType</key>
<string>DeviceLock</string>
</dict>
<key>CommandUUID</key>
<string>0001_DeviceLock</string>
</dict>
</plist>
- name: Restart device
platform: apple
category: Device state
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/restart-device-command
description: Remotely and immediately restart a device.
supportedDeviceTypes:
- iOS 10.3+
- iPadOS 10.3+
- macOS 10.13+
- tvOS 10.2+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>RestartDevice</string>
</dict>
<key>CommandUUID</key>
<string>0001_RestartDevice</string>
</dict>
</plist>
- name: Shut down device
platform: apple
category: Device state
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/shut-down-device-command
description: Remotely and immediately shut down a device.
supportedDeviceTypes:
- iOS 10.3+
- iPadOS 10.3+
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ShutDownDevice</string>
</dict>
<key>CommandUUID</key>
<string>0001_ShutDownDevice</string>
</dict>
</plist>
- name: Install application
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/install-application-command
description: Install a third-party app on a device.
supportedDeviceTypes:
- iOS 5.0+
- iPadOS 5.0+
- macOS 10.9+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ManagementFlags</key>
<integer>0</integer>
<key>ManifestURL</key>
<string>https://yourmdmhost.example.com/files/myenterpriseapp.plist</string>
<key>RequestType</key>
<string>InstallApplication</string>
</dict>
<key>CommandUUID</key>
<string>0001_InstallApplication</string>
</dict>
</plist>
- name: Install enterprise application
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/install-enterprise-application-command
description: Install an enterprise app on a device.
supportedDeviceTypes:
- macOS 10.13.6+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ManifestURL</key>
<string>https://yourmdmhost.example.com/files/myenterpriseapp.plist</string>
<key>PinningRevocationCheckRequired</key>
<false/>
<key>RequestType</key>
<string>InstallEnterpriseApplication</string>
</dict>
<key>CommandUUID</key>
<string>0001_InstallEnterpriseApplication</string>
</dict>
</plist>
- name: Installed application list
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/installed-application-list-command
description: Get a list of the installed apps on a device.
supportedDeviceTypes:
- iOS 5.0+
- iPadOS 5.0+
- macOS 10.7+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ManagedAppsOnly</key>
<true/>
<key>RequestType</key>
<string>InstalledApplicationList</string>
</dict>
<key>CommandUUID</key>
<string>0001_InstalledApplicationList</string>
</dict>
</plist>
- name: Managed application list
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/managed-application-list-command
description: Get the status of all managed apps on a device.
supportedDeviceTypes:
- iOS 5.0+
- iPadOS 5.0+
- macOS 11.0+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ManagedApplicationList</string>
</dict>
<key>CommandUUID</key>
<string>0001_ManagedApplicationList</string>
</dict>
</plist>
- name: Remove application
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/remove-application-command
description: Remove an app.
supportedDeviceTypes:
- iOS 5.0+
- iPadOS 5.0+
- macOS 11.0+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Identifier</key>
<string>com.acme.myenterpriseapp</string>
<key>RequestType</key>
<string>RemoveApplication</string>
</dict>
<key>CommandUUID</key>
<string>0001_RemoveApplication</string>
</dict>
</plist>
- name: Apply redemption code
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/apply-redemption-code-command
description: Remove an app.
supportedDeviceTypes:
- iOS 5.0+
- iPadOS 5.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Identifier</key>
<string>com.example.app</string>
<key>RedemptionCode</key>
<string>SB56LT7YX8RH</string>
<key>RequestType</key>
<string>ApplyRedemptionCode</string>
</dict>
<key>CommandUUID</key>
<string>0001_ApplyRedemptionCode</string>
</dict>
</plist>
- name: Validate applications
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/validate-applications-command
description: Force validation of developer and universal provisioning profiles for enterprise apps.
supportedDeviceTypes:
- iOS 9.2+
- iPadOS 9.2+
- tvOS 10.2+
- visionOS 1.1+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ValidateApplications</string>
</dict>
<key>CommandUUID</key>
<string>0001_ValidateApplications</string>
</dict>
</plist>
- name: Managed application attributes
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/managed-application-attributes-command
description: Query attributes in managed apps on a device.
supportedDeviceTypes:
- iOS 7.0+
- iPadOS 7.0+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Identifiers</key>
<array>
<string>com.acme.myenterpriseapp</string>
</array>
<key>RequestType</key>
<string>ManagedApplicationAttributes</string>
</dict>
<key>CommandUUID</key>
<string>0001_ManagedApplicationAttributes</string>
</dict>
</plist>
- name: Managed application configuration
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/managed-application-attributes-command
description: Get app configurations from managed apps on a device.
supportedDeviceTypes:
- iOS 7.0+
- iPadOS 7.0+
- macOS 10.15+
- tvOS 10.2+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Identifiers</key>
<array>
<string>com.acme.myenterpriseapp</string>
</array>
<key>RequestType</key>
<string>ManagedApplicationConfiguration</string>
</dict>
<key>CommandUUID</key>
<string>0001_ManagedApplicationConfiguration</string>
</dict>
</plist>
- name: Managed application feedback
platform: apple
category: Managed apps
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/managed-application-attributes-command
description: Get app feedback from a managed app on the device.
supportedDeviceTypes:
- iOS 7.0+
- iPadOS 7.0+
- macOS 11.0+
- tvOS 10.2+
- visionOS 1.1+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>DeleteFeedback</key>
<false/>
<key>Identifiers</key>
<array>
<string>com.acme.myenterpriseapp</string>
</array>
<key>RequestType</key>
<string>ManagedApplicationFeedback</string>
</dict>
<key>CommandUUID</key>
<string>0001_ManagedApplicationFeedback</string>
</dict>
</plist>
- name: Install media
platform: apple
category: Managed media
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/install-media-command
description: Install a book on a device.
supportedDeviceTypes:
- iOS 8.0+
- iPadOS 8.0+
- macOS 10.19+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Author</key>
<string>Acme, Inc.</string>
<key>Kind</key>
<string>pdf</string>
<key>MediaType</key>
<string>Book</string>
<key>MediaURL</key>
<string>https://yourmdmhost.example.com/files/myenterprisebook.pdf</string>
<key>PersistentID</key>
<string>com.acme.pdf.myenterprisebook</string>
<key>RequestType</key>
<string>InstallMedia</string>
<key>Title</key>
<string>My Enterprise Book</string>
<key>Version</key>
<string>1.0</string>
</dict>
<key>CommandUUID</key>
<string>0001_InstallMedia</string>
</dict>
</plist>
- name: List managed media
platform: apple
category: Managed media
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/managed-media-list-command
description: Get a list of the managed books on a device.
supportedDeviceTypes:
- iOS 8.0+
- iPadOS 8.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ManagedMediaList</string>
</dict>
<key>CommandUUID</key>
<string>0001_ManagedMediaList</string>
</dict>
</plist>
- name: Remove media
platform: apple
category: Managed media
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/managed-media-list-command
description: Remove a previously installed book from a device.
supportedDeviceTypes:
- iOS 8.0+
- iPadOS 8.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>MediaType</key>
<string>Book</string>
<key>PersistentID</key>
<string>com.acme.pdf.myenterprisebook</string>
<key>RequestType</key>
<string>RemoveMedia</string>
</dict>
</plist>
- name: Account configuration
platform: apple
category: Accounts
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/account-configuration-command
description: Create and configure a local administrator account on a device.
supportedDeviceTypes:
- macOS 10.11+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>AutoSetupAdminAccounts</key>
<array>
<dict>
<key>fullName</key>
<string>Administrator</string>
<key>hidden</key>
<false/>
<key>shortName</key>
<string>admin</string>
<key>passwordHash</key>
<data>
PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4K
PCFET0NUWVBFIHBsaXN0IFBVQkxJQyAiLS8vQXBwbGUvL0RURCBQ
TElTVCAxLjAvL0VOIiAiaHR0cDovL3d3dy5hcHBsZS5jb20vRFRE
cy9Qcm9wZXJ0eUxpc3QtMS4wLmR0ZCI+CjxwbGlzdCB2ZXJzaW9u
PSIxLjAiPgo8ZGljdD4KCTxrZXk+U0FMVEVELVNIQTUxMi1QQktE
RjI8L2tleT4KCTxkaWN0PgoJCTxrZXk+ZW50cm9weTwva2V5PgoJ
CTxkYXRhPgoJCXJiSXZtVGlQQlJ3cWZ6dmFQQnhPT1VLRHVnTnRM
YVVQZ2lIVnpBUWNsNDNjSmUzaGZ6ZW05TDVhczAyRQoJCXp2TEFl
aTJFT0tqMFNaOENpKzNXV0tQN2orMklSdWU0T1ZyTzBsYnhGOHR5
K3pZb0hTMTVRU3hGcUplagoJCU5qdkk1NTk1N1JjZUVLaXFSRjZ1
UEpQUTYvbUxEc0xnSTR4dko3NVpEa0JlYW51QkI0TT0KCQk8L2Rh
dGE+CgkJPGtleT5zYWx0PC9rZXk+CgkJPGRhdGE+CgkJTXVpS2g1
MjR3QkJMV0ZoQ3lzRFIzRnJPOGM0WlFIUGZTRE5JbDZvQjlCST0K
CQk8L2RhdGE+CgkJPGtleT5pdGVyYXRpb25zPC9rZXk+CgkJPGlu
dGVnZXI+NDAwMDA8L2ludGVnZXI+Cgk8L2RpY3Q+CjwvZGljdD4K
PC9wbGlzdD4K
</data>
</dict>
</array>
<key>DontAutoPopulatePrimaryAccountInfo</key>
<false/>
<key>LockPrimaryAccountInfo</key>
<true/>
<key>PrimaryAccountFullName</key>
<string>User</string>
<key>PrimaryAccountUserName</key>
<string>user</string>
<key>RequestType</key>
<string>AccountConfiguration</string>
<key>SetPrimarySetupAccountAsRegularUser</key>
<true/>
<key>SkipPrimarySetupAccountCreation</key>
<false/>
</dict>
<key>CommandUUID</key>
<string>0001_AccountConfiguration</string>
</dict>
</plist>
- name: Invite to program
platform: apple
category: Accounts
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/account-configuration-command
description: Invite a user to join the Volume Purchase Program (VPP).
supportedDeviceTypes:
- iOS 7.0+
- iPadOS 7.0+
- macOS 10.11+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>InvitationURL</key>
<string>https://buy.itunes.apple.com/WebObjects/MZFinance.woa/wa/associateVPPUserWithITSAccount?cc=us&amp;inviteCode=7770596534cf46b58fb0254e7112a5e5&amp;mt=8</string>
<key>ProgramID</key>
<string>com.apple.cloudvpp</string>
<key>RequestType</key>
<string>InviteToProgram</string>
</dict>
<key>CommandUUID</key>
<string>0001_InviteToProgram</string>
</dict>
</plist>
- name: Clear passcode
platform: apple
category: Passwords
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/clear-passcode-command
description: Remove the passcode from a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- visionOS 1.1+
- macOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ClearPasscode</string>
<key>UnlockToken</key>
<data>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</data>
</dict>
<key>CommandUUID</key>
<string>0001_ClearPasscode</string>
</dict>
</plist>
- name: Clear restrictions password
platform: apple
category: Passwords
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/clear-restrictions-password-command
description: Remove the passcode from a device.
supportedDeviceTypes:
- iOS 8.0+
- iPadOS 8.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ClearRestrictionsPassword</string>
</dict>
<key>CommandUUID</key>
<string>0001_ClearRestrictionsPassword</string>
</dict>
</plist>
- name: Unlock user account
platform: apple
category: Passwords
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/unlock-user-account-command
description: Unlock a user account that the system locked because of too many failed password attempts.
supportedDeviceTypes:
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>UnlockUserAccount</string>
<key>UserName</key>
<string>graham</string>
</dict>
<key>CommandUUID</key>
<string>0001_UnlockUserAccount</string>
</dict>
</plist>
- name: Set local admin password
platform: apple
category: Passwords
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/set-auto-admin-password-command
description: Update the local administrator account password.
supportedDeviceTypes:
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>GUID</key>
<string>F7C60A02-E0AB-4C87-8356-E0CC11568043</string>
<key>RequestType</key>
<string>SetAutoAdminPassword</string>
<key>passwordHash</key>
<data>
PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4K
PCFET0NUWVBFIHBsaXN0IFBVQkxJQyAiLS8vQXBwbGUvL0RURCBQ
TElTVCAxLjAvL0VOIiAiaHR0cDovL3d3dy5hcHBsZS5jb20vRFRE
cy9Qcm9wZXJ0eUxpc3QtMS4wLmR0ZCI+CjxwbGlzdCB2ZXJzaW9u
PSIxLjAiPgo8ZGljdD4KCTxrZXk+U0FMVEVELVNIQTUxMi1QQktE
RjI8L2tleT4KCTxkaWN0PgoJCTxrZXk+ZW50cm9weTwva2V5PgoJ
CTxkYXRhPgoJCVpxcWVkTU5Ya3BtVjhEbU5iRFdUYjBHTDNSNjAz
RHNVSllkb1BvV0NlK2gwRDNubC9mWCsxTlpKSUxPdgoJCTBxQTVC
Q0FBSEZCZ3REQzVqeEF3a2NyZ1puZVd4eWpGZGpvT0hsV2RoYWVF
T0MyaFBwVktIaC9WUk9uUQoJCXM2cWUvRGtaZ1djVDBQdk9VQ3NM
ZVhTd2dOTU9UNGFwMnJWR0IxOVFwSFBpdnJrNmp2dz0KCQk8L2Rh
dGE+CgkJPGtleT5pdGVyYXRpb25zPC9rZXk+CgkJPGludGVnZXI+
NDAwMDA8L2ludGVnZXI+CgkJPGtleT5zYWx0PC9rZXk+CgkJPGRh
dGE+CgkJZUl3Q3hxUk1NVm0wWGZ3VmpvbERCNEFUc2I0K3ZWMjdL
Z1hDdU5ZMkNlOD0KCQk8L2RhdGE+Cgk8L2RpY3Q+CjwvZGljdD4K
PC9wbGlzdD4K
</data>
</dict>
<key>CommandUUID</key>
<string>0001_SetAutoAdminPassword</string>
</dict>
</plist>
- name: Set firmware password
platform: apple
category: Passwords
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/set-firmware-password-command
description: Change or clear the firmware password on a device.
supportedDeviceTypes:
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>AllowOroms</key>
<false/>
<key>CurrentPassword</key>
<string>oldpassword</string>
<key>NewPassword</key>
<string>newpassword</string>
<key>RequestType</key>
<string>SetFirmwarePassword</string>
</dict>
<key>CommandUUID</key>
<string>0001_SetFirmwarePassword</string>
</dict>
</plist>
- name: Verify firmware password
platform: apple
category: Passwords
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/verify-firmware-password-command
description: Verify the firmware password on a device.
supportedDeviceTypes:
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>AllowOroms</key>
<false/>
<key>CurrentPassword</key>
<string>oldpassword</string>
<key>NewPassword</key>
<string>newpassword</string>
<key>RequestType</key>
<string>SetFirmwarePassword</string>
</dict>
<key>CommandUUID</key>
<string>0001_SetFirmwarePassword</string>
</dict>
</plist>
- name: Enable lost mode
platform: apple
category: Lost device
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/enable-lost-mode-command
description: Verify the firmware password on a device.
supportedDeviceTypes:
- iOS 9.3+
- ipadOS 9.3+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>Footnote</key>
<string>Return to Acme, Inc.</string>
<key>Message</key>
<string>Lock Message</string>
<key>PhoneNumber</key>
<string>408-555-555</string>
<key>RequestType</key>
<string>EnableLostMode</string>
</dict>
<key>CommandUUID</key>
<string>0001_EnableLostMode</string>
</dict>
</plist>
- name: Device location
platform: apple
category: Lost device
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/device-location-command
description: Request the location of a device when in Lost Mode.
supportedDeviceTypes:
- iOS 9.3+
- ipadOS 9.3+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>DeviceLocation</string>
</dict>
<key>CommandUUID</key>
<string>0001_DeviceLocation</string>
</dict>
</plist>
- name: Play lost mode sound
platform: apple
category: Lost device
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/play-lost-mode-sound-command
description: Play the Lost Mode sound on a device that’s in Lost Mode.
supportedDeviceTypes:
- iOS 10.3+
- ipadOS 10.3+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>PlayLostModeSound</string>
</dict>
<key>CommandUUID</key>
<string>0001_PlayLostModeSound</string>
</dict>
</plist>
- name: Disable lost mode
platform: apple
category: Lost device
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/disable-lost-mode-command
description: Take the device out of Lost Mode.
supportedDeviceTypes:
- iOS 9.3+
- ipadOS 9.3+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>DisableLostMode</string>
</dict>
<key>CommandUUID</key>
<string>0001_DisableLostMode</string>
</dict>
</plist>
- name: Set Recovery Lock
platform: apple
category: Recovery lock
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/set-recovery-lock-command
description: Set or clear the Recovery Lock password.
supportedDeviceTypes:
- macOS 11.5+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>SetRecoveryLock</string>
<key>NewPassword</key>
<string>Apple</string>
</dict>
</dict>
</plist>
- name: Verify Recovery Lock
platform: apple
category: Recovery lock
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/verify-recovery-lock-command
description: Verify the device’s Recovery Lock password.
supportedDeviceTypes:
- macOS 11.5+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>VerifyRecoveryLock</string>
<key>Password</key>
<string>Apple</string>
</dict>
</dict>
</plist>
- name: Content caching information
platform: apple
category: Content caching
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/content-caching-information-command
description: Get the status of the content caches on a device.
supportedDeviceTypes:
- macOS 10.15.4+
command: |
TODO
- name: Request AirPlay mirroring
platform: apple
category: Airplay mirroring
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/request-mirroring-command
description: Prompt the user to share their screen using AirPlay Mirroring.
supportedDeviceTypes:
- iOS 7.0+
- ipadOS 7.0+
- macOS 10.10+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>DestinationName</key>
<string>Apple TV</string>
<key>Password</key>
<string>password</string>
<key>RequestType</key>
<string>RequestMirroring</string>
<key>ScanTime</key>
<integer>30</integer>
</dict>
<key>CommandUUID</key>
<string>0001_RequestMirroring</string>
</dict>
</plist>
- name: Stop AirPlay mirroring
platform: apple
category: Airplay mirroring
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/stop-mirroring-command
description: Stop mirroring the display to another device.
supportedDeviceTypes:
- iOS 7.0+
- ipadOS 7.0+
- macOS 10.10+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>StopMirroring</string>
</dict>
<key>CommandUUID</key>
<string>0001_StopMirroring</string>
</dict>
</plist>
- name: Refresh cellular plans
platform: apple
category: eSim management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/refresh-cellular-plans-command
description: Query a carrier URL for active eSIM cellular-plan profiles on a device.
supportedDeviceTypes:
- iOS 13.0+
- ipadOS 13.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>RefreshCellularPlans</string>
<key>eSIMServerURL</key>
<string>http://example.server.com</string>
</dict>
<key>CommandUUID</key>
<string>0001_RefreshCellularPlans</string>
</dict>
</plist>
- name: Disable remote desktop
platform: apple
category: Managed settings
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/disable-remote-desktop-command
description: Disable Remote Desktop on a device.
supportedDeviceTypes:
- macOS 10.14.4+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>DisableRemoteDesktop</string>
</dict>
<key>CommandUUID</key>
<string>0001_DisableRemoteDesktop</string>
</dict>
</plist>
- name: Enable remote desktop
platform: apple
category: Managed settings
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/enable-remote-desktop-command
description: Enable Remote Desktop on a device.
supportedDeviceTypes:
- macOS 10.14.4+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>EnableRemoteDesktop</string>
</dict>
<key>CommandUUID</key>
<string>0001_EnableRemoteDesktop</string>
</dict>
</plist>
- name: Configure settings
platform: apple
category: Managed settings
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/settings-command
description: Configure settings on a device.
supportedDeviceTypes:
- iOS 5.0+
- iPadOS 5.0+
- macOS 10.9+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>Settings</string>
<key>Settings</key>
<array>
<dict>
<key>DeviceName</key>
<string>NewName</string>
<key>Item</key>
<string>DeviceName</string>
</dict>
</array>
</dict>
<key>CommandUUID</key>
<string>0001_Settings</string>
</dict>
</plist>
- name: LOM Device Request
platform: apple
category: Lights-Out management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/lom-device-request-command
description: Send requests to a device using lights-out management (LOM).
supportedDeviceTypes:
- macOS 11.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestList</key>
<array>
<dict>
<key>DeviceDNSName</key>
<string>lomdevice.com</string>
<key>DeviceRequestType</key>
<string>Reset</string>
<key>DeviceRequestUUID</key>
<string>0001</string>
<key>PrimaryIPv6AddressList</key>
<array>
<string>fe80::94f6:d6ff:fef3:c05b</string>
<string>fe80::94f6:d6ff:fef3:c1a4</string>
</array>
<key>SecondaryIPv6AddressList</key>
<array/>
</dict>
</array>
</dict>
<key>CommandUUID</key>
<string>0001_LOMDeviceRequest</string>
</dict>
</plist>
- name: LOM setup Request
platform: apple
category: Lights-Out management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/lom-setup-request-command
description: Get information from a device to set up lights-out management (LOM).
supportedDeviceTypes:
- macOS 11.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>LOMSetupRequest</string>
</dict>
<key>CommandUUID</key>
<string>0001_LOMSetupRequest</string>
</dict>
</plist>
- name: Security info
platform: apple
category: Security
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/security-info-command
description: Get security-related information about a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>SecurityInfo</string>
</dict>
<key>CommandUUID</key>
<string>0001_SecurityInfo</string>
</dict>
</plist>
- name: List certificate
platform: apple
category: Security
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/certificate-list-command
description: Get a list of installed certificates on a device.
supportedDeviceTypes:
- iOS 4.0+
- iPadOS 4.0+
- macOS 10.7+
- tvOS 9.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>ManagedOnly</key>
<false/>
<key>RequestType</key>
<string>CertificateList</string>
</dict>
<key>CommandUUID</key>
<string>0001_CertificateList</string>
</dict>
</plist>
- name: Activation Lock bypass code
platform: apple
category: Security
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/activation-lock-bypass-code-command
description: Get the code to bypass Activation Lock on a device.
supportedDeviceTypes:
- iOS 7.1+
- iPadOS 7.1+
- macOS 10.15+
- visionOS 2.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ActivationLockBypassCode</string>
</dict>
<key>CommandUUID</key>
<string>0001_ActivationLockBypassCode</string>
</dict>
</plist>
- name: Clear Activation Lock bypass code
platform: apple
category: Security
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/activation-lock-bypass-code-command
description: Clear the Activation Lock bypass code on a device.
supportedDeviceTypes:
- iOS 7.1+
- iPadOS 7.1+
- macOS 10.15+
- visionOS 2.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>ClearActivationLockBypassCode</string>
</dict>
<key>CommandUUID</key>
<string>0001_ClearActivationLockBypassCode</string>
</dict>
</plist>
- name: Rotate FileVault key
platform: apple
category: Security
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/rotate-filevault-key-command
description: Clear the Activation Lock bypass code on a device.
supportedDeviceTypes:
- macOS 10.9+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>FileVaultUnlock</key>
<dict>
<key>Password</key>
<string>mypassword</string>
</dict>
<key>KeyType</key>
<string>personal</string>
<key>ReplyEncryptionCertificate</key>
<data>
MIIDKTCCAhGgAwIBAgIFAKGAf9cwDQYJKoZIhvcNAQELBQAwRTEfMB0GA1UEAwwWRmls
ZVZhdWx0IFJlY292ZXJ5IEtleTEiMCAGA1UEDQwZR3JhaGFtcy1NYWNCb29rLVByby5s
b2NhbDAeFw0yMDA2MTEyMzIwMjNaFw0yMTA2MTEyMzIwMjNaMEUxHzAdBgNVBAMMFkZp
bGVWYXVsdCBSZWNvdmVyeSBLZXkxIjAgBgNVBA0MHNdyYWhhbXMtTWFjQm9vay1Qcm8u
bG9jYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNk47J9l7Amit4JPf
YEj6PvqZ5nH4kPsRmoAO1FfACpzskN7gA1qui7N+O0NNjtleUI2pX8X9NvINxfPX/KTy
eP0VXlhixvYgKMiEUkrVFBrxRtQ+7Ow80MQUAKlDBe5FVj4GyN9sAPuAu7WaJtvDAWAW
rBSRJNqdOYpKEkgK8N9a52BmuDEBtmpaq5o5JgR2Vc+OmjcogknZi++11dKI7sDCzF3e
jO28e9E8XNBFRO716XdyEd/VU6rE8SQmpYqrfun1pRNtiiv3dTKKn9Gl42kg7RQHjMjx
OjmBjzWLdFrO51crcJqbT/IQ0pjWqjDcwOz9Z2gWqbtxTrrWyuJZAgMBAAGjIDAeMAsG
A1UdDwQEAwICtDAPBgNVHRMBAf8EBTADAQEAMA0GCSqGSIb3DQEBCwUAA4IBAQCcA999
lIN+t6u/DrTXhWlLKj8HXTmVVl8gkhxm42aZo/QsJr+gPsXF0yOWqkPpnhkrq6GVXgPx
T7xmNv5+nDIcHX/mKRXBAUdWi/HDa3Wiytk4g9wO4xYsnBIhL5y2PHid9bSA1peKZsLL
CX1v8vuA66trSp2fKYxW54VkLXR6xMqUcxTjp0qlfNRL6IHA6G/ogyjRkd0kt0+BwbYy
81dDKJHVxsYOUtQlmfa8dUl20SmLwZ/bujPFetfuvWmSHrnM//J5OT4HLoGRzqXhuC/m
XEildp3HTCm6epem3cP6Sx99aGIi08xddDzmH/5XoPmuG4uw2+ry+qbhD/UYbJbX
</data>
<key>RequestType</key>
<string>RotateFileVaultKey</string>
</dict>
<key>CommandUUID</key>
<string>0001_RotateFileVaultKey</string>
</dict>
</plist>
- name: Active NSExtensions
platform: apple
category: Extensions
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/active-nsextensions-command
description: Get a list of active extensions for a user on a device.
supportedDeviceTypes:
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>FilterExtensionPoints</key>
<array>
<string>com.apple.share-services</string>
</array>
<key>RequestType</key>
<string>ActiveNSExtensions</string>
</dict>
<key>CommandUUID</key>
<string>0001_ActiveNSExtensions</string>
</dict>
</plist>
- name: NSExtensions mappings
platform: apple
category: Extensions
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/nsextension-mappings-command
description: Get a list of the installed extensions for a user on a device.
supportedDeviceTypes:
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>NSExtensionMappings</string>
</dict>
<key>CommandUUID</key>
<string>0001_NSExtensionMappings</string>
</dict>
</plist>
- name: List users
platform: apple
category: User management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/user-list-command
description: Get a list of users with active accounts on a device.
supportedDeviceTypes:
- iOS 9.3+
- ipadOS 9.3+
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>UserList</string>
</dict>
<key>CommandUUID</key>
<string>0001_UserList</string>
</dict>
</plist>
- name: Log out user
platform: apple
category: User management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/log-out-user-command
description: Force the current user to log out of a device.
supportedDeviceTypes:
- iOS 9.3+
- ipadOS 9.3+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>LogOutUser</string>
</dict>
<key>CommandUUID</key>
<string>0001_LogOutUser</string>
</dict>
</plist>
- name: Delete user
platform: apple
category: User management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/log-out-user-command
description: Delete a user’s account from a device.
supportedDeviceTypes:
- iOS 9.3+
- ipadOS 9.3+
- macOS 10.13+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>LogOutUser</string>
</dict>
<key>CommandUUID</key>
<string>0001_LogOutUser</string>
</dict>
</plist>
- name: Declarative management
platform: apple
category: Declarative management
externalDocumentationUrl: https://developer.apple.com/documentation/devicemanagement/declarative-management-command
description: Enable your server to support declarative management or trigger a declarative management synchronization operation on the device.
supportedDeviceTypes:
- iOS 15.0+
- iPadOS 15.0+
- macOS 13.0+
- tvOS 16.0+
- visionOS 1.1+
- watchOS 10.0+
command: |
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Command</key>
<dict>
<key>CommandUUID</key>
<string>0001_DeclarativeManagement</string>
<key>Command</key>
<dict>
<key>RequestType</key>
<string>DeclarativeManagement</string>
<key>Data</key>
<data>
eyJTeW5jVG9rZW5zIjogeyJUaW1lc3RhbXAiOiAiMjAyMS0wNi0wMlQwMToy
ODowMFoiLCAiRGVjbGFyYXRpb25zVG9rZW4iOiAiYjY1NDQwMjdhMzE1Y2Qw
MDg1ZDRjZjA4MTc0NjI0YzJkMTQyNDQ0ODA0MzBhODdiMTc2YTI3MjdlNzM2
NjEzOCJ9fQ==
</data>
</dict>
</dict>
</dict>
</plist>
#
# ██╗ ██╗██╗███╗ ██╗██████╗ ██████╗ ██╗ ██╗███████╗
# ██║ ██║██║████╗ ██║██╔══██╗██╔═══██╗██║ ██║██╔════╝
# ██║ █╗ ██║██║██╔██╗ ██║██║ ██║██║ ██║██║ █╗ ██║███████╗
# ██║███╗██║██║██║╚██╗██║██║ ██║██║ ██║██║███╗██║╚════██║
# ╚███╔███╔╝██║██║ ╚████║██████╔╝╚██████╔╝╚███╔███╔╝███████║
# ╚══╝╚══╝ ╚═╝╚═╝ ╚═══╝╚═════╝ ╚═════╝ ╚══╝╚══╝ ╚══════╝
#
- name: RotateRecoveryPasswords
platform: windows
category: BitLocker
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#rotaterecoverypasswords
description: Triggers a one-time rotation of all numeric BitLocker recovery passwords for OS and fixed drives on Entra ID or hybrid-joined devices. Requires Active Directory backup of recovery passwords to be set to "required" before execution.
supportedDeviceTypes:
- Windows 10.0.18363
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>5f0096d1-c2aa-4934-b67a-0ed35d20d322</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/BitLocker/RotateRecoveryPasswords</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Enroll (Personal scope)
platform: windows
category: CertificateStore
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/certificatestore-csp#myscepuniqueidinstallenroll
description: Initiates SCEP certificate enrollment in the personal certificate store on the device.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>1a3a3666-2df6-4dcf-a785-46b2f28d2fbf</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/CertificateStore/MY/SCEP/{UniqueID}/Install/Enroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: RenewNow
platform: windows
category: CertificateStore
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/certificatestore-csp#mywsteprenewrenewnow
description: Triggers an immediate renewal of an existing certificate in the personal certificate store on the device.
supportedDeviceTypes:
- Windows 10.0.14393
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>cdd76df2-d665-4045-9503-7954cc491bf2</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/CertificateStore/MY/WSTEP/Renew/RenewNow</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Enroll (Device context)
platform: windows
category: ClientCertificateInstall
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/clientcertificateinstall-csp#devicescepuniqueidinstallenroll
description: Triggers the device to start SCEP certificate enrollment at the device scope. The device will not notify MDM server after cert enrollment is done. The MDM server could later query the device to find out whether new cert is added.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>96821528-e7c2-41ce-b4a8-6a20c61df80b</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/ClientCertificateInstall/SCEP/{UniqueID}/Install/Enroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Enroll (User context)
platform: windows
category: ClientCertificateInstall
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/clientcertificateinstall-csp#devicescepuniqueidinstallenroll
description: Triggers the user context to start SCEP certificate enrollment. The device will not notify MDM server after cert enrollment is done. The MDM server could later query the device to find out whether new cert is added.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>a901c1bc-3970-461d-9c92-932645cab9b3</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/ClientCertificateInstall/SCEP/{UniqueID}/Install/Enroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Enroll
platform: windows
category: DMClient
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/dmclient-csp#deviceproviderprovideridlinkedenrollmentenroll
description: Silently unenrolls the device from a Linked Enrollment without user interaction. All settings and resources applied by the Declared Configuration are rolled back automatically.
supportedDeviceTypes:
- Windows 10.0.22621
- Windows 10.0.22000.918
- Windows 10.0.19044.2193
- Windows 10.0.19043.2193
- Windows 10.0.19042.2193
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>307799ee-7535-472d-a06e-a846d8e6f214</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/DMClient/Provider/{ProviderID}/LinkedEnrollment/Enroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Unenroll (linked enrollment)
platform: windows
category: DMClient
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/dmclient-csp#deviceproviderprovideridlinkedenrollmentunenroll
description: Triggers the device to unenroll from its linked MDM enrollment
supportedDeviceTypes:
- Windows 10.0.22621
- Windows 10.0.22000.918
- Windows 10.0.19044.2193
- Windows 10.0.19043.2193
- Windows 10.0.19042.2193
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>48e557bd-c055-4239-bb13-d24fb5e0c526</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/DMClient/Provider/{ProviderID}/LinkedEnrollment/Unenroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: InitiateRecovery
platform: windows
category: DMClient
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/dmclient-csp#deviceproviderprovideridrecoveryinitiaterecovery
description: Initiates a device recovery action. The server can specify prerequisites that must be met before the recovery action proceeds.
supportedDeviceTypes:
- Windows 10.0.22621
- Windows 10.0.22000.1165
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>cc6ccbd3-3679-44c0-976a-581e8946a96a</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/DMClient/Provider/{ProviderID}/Recovery/InitiateRecovery</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">int</Format>
<Type>text/plain</Type>
</Meta>
<Data>0</Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Unenroll (provider)
platform: windows
category: DMClient
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/dmclient-csp#deviceproviderprovideridunenroll
description: Triggers the device to unenroll from a specific MDM provider. The Provider ID of the management server must be specified in the <Data> element of the command.
supportedDeviceTypes:
- Windows 10.0.10240
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>e43a2271-7661-4587-b452-df8880005fd8</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/DMClient/Provider/{ProviderID}//Unenroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Unenroll (device)
platform: windows
category: DMClient
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/dmclient-csp#deviceunenroll
description: Triggers the device to permanently unenroll from its current MDM management server. The Provider ID of the management server must be specified in the <Data> element of the command.
supportedDeviceTypes:
- Windows 10.0.10240
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>b1eae449-50af-4cb1-a680-a7ef8f583646</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/DMClient/Unenroll</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: OfflineScan
platform: windows
category: Defender
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/defender-csp#offlinescan
description: Starts a Microsoft Defender Offline scan on the device. After the next reboot, the device will start in Microsoft Defender Offline mode to perform a scan before Windows loads, helping detect and remove persistent or hard-to-find malware.
supportedDeviceTypes:
- Windows 10.0.17134
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>0370d798-9a85-4dee-a870-176146513415</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Defender/OfflineScan</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: RollbackEngine
platform: windows
category: Defender
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/defender-csp#rollbackengine
description: Rolls back the Microsoft Defender antimalware engine to its last known good version on the device.
supportedDeviceTypes:
- Windows 10.0.17134
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>d8d49362-a2df-46b6-b42b-dab967f822f8</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Defender/RollbackEngine</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: RollbackPlatform
platform: windows
category: Defender
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/defender-csp#rollbackplatform
description: Rolls back Microsoft Defender to its last known good installation location on the device.
supportedDeviceTypes:
- Windows 10.0.17134
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>25b353ea-3b5a-4da8-a9a0-3aa602cf08a3</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Defender/RollbackPlatform</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Scan
platform: windows
category: Defender
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/defender-csp#scan
description: Starts a Windows Defender scan on the device
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>9326cc3a-8960-4e7a-b46f-c414e871ca5b</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Defender/Scan</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: UpdateSignature
platform: windows
category: Defender
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/defender-csp#updatesignature
description: Performs a Windows Defender signature update on the device.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>034c6f94-db50-4ec1-87f5-71900cb730a2</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Defender/UpdateSignature</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: MdmConfiguration
platform: windows
category: DiagnosticLog
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/diagnosticlog-csp#devicestatedatamdmconfiguration
description: Triggers a snapshot of the device’s management state data, capturing the current MDM configuration for diagnostic purposes.
supportedDeviceTypes:
- Windows 10.0.14393
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>86e88d1e-9474-4098-91af-ec28d066b072</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/DiagnosticLog/DeviceStateData/MdmConfiguration</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
<Data>SNAP</Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: ArchiveDefinition
platform: windows
category: DiagnosticLog
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/diagnosticlog-csp#diagnosticarchivearchivedefinition
description: Definition and collection point for diagnostic archives on the device.
supportedDeviceTypes:
- Windows 10.0.18362
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>91bde209-058a-4d1a-9805-702aeab4976a</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/DiagnosticLog/DiagnosticArchive/ArchiveDefinition</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Export
platform: windows
category: DiagnosticLog
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/diagnosticlog-csp#etwlogchannelschannelnameexport
description: Triggers exporting events from the associated Windows event channel into a log file with the standard .evtx extension.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>22ba5bc3-70cf-4742-94e4-c7c7658a64a2</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/DiagnosticLog/EtwLog/Channels/Export</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: TraceControl
platform: windows
category: DiagnosticLog
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/diagnosticlog-csp#etwlogcollectorscollectornametracecontrol
description: Triggers the start or stop of the associated trace session.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>a563bffc-2c4c-4f2f-a5e5-6545bab6ad95</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/DiagnosticLog/EtwLog/Collectors/{CollectorName}/TraceControl</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: DownloadInstall (Device context)
platform: windows
category: EnterpriseDesktopAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisedesktopappmanagement-csp#devicemsiproductiddownloadinstall
description: Executes the download and installation of an application. An optional <DownloadFromAad> tag in the <Enforcement> section of the XML (default 0) can be set to 1 to include the AAD user token when retrieving the download URL.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>02802f7e-1266-494a-b4b0-9878a122fafa</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseDesktopAppManagement/MSI/{ProductID}/DownloadInstall</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: DownloadInstall (User context)
platform: windows
category: EnterpriseDesktopAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisedesktopappmanagement-csp#usermsiproductiddownloadinstall
description: Executes the download and installation of an application. An optional <DownloadFromAad> tag in the <Enforcement> XML section (default 0) can be set to 1 to include the AAD user token when retrieving the download URL.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>bbb7ee46-9032-4020-b1f5-0252104ab3a8</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseDesktopAppManagement/MSI/{ProductID}/DownloadInstall</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: HostedInstall (Device context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#deviceappinstallationpackagefamilynamehostedinstall
description: Installs an app package from a hosted location, such as a local drive, UNC path, or HTTPS source.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>ba628a02-12d5-48c4-9586-34fa039a4a00</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppInstallation/{PackageFamilyName}/HostedInstall</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: StoreInstall (Device context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#deviceappinstallationpackagefamilynamestoreinstall
description: Installs an app along with its license from the Microsoft Store under the device context.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>19e07f1f-bce0-43a1-a364-477c1cd500ab</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppInstallation/{PackageFamilyName}/StoreInstall</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: AddLicense (Device context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#deviceapplicensesstorelicenseslicenseidaddlicense
description: Adds a specified app license to the device using the provided license ID.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>2a7e4bc2-5b0d-4cf1-b66d-05f828177582</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppLicenses/StoreLicenses/{LicenseID}/AddLicense</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: GetLicenseFromStore (Device context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#deviceapplicensesstorelicenseslicenseidgetlicensefromstore
description: Retrieves a specified app license from the Microsoft Store using the provided license ID.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>aba692b8-bd1b-4bd1-90b6-eef510b03562</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppLicenses/StoreLicenses/{LicenseID}/GetLicenseFromStore</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: ResetPackage (Device context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#deviceappmanagementresetpackage
description: Restores a specified Windows app to its initial state by resetting all configurations and data associated with the package.
supportedDeviceTypes:
- Windows 10.0.22000
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>5f301e26-48ec-4a40-bad5-9c8b4e438ca2</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/ResetPackage</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: UpdateScan (Device context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#deviceappmanagementupdatescan
description: Starts a Windows Update scan on the device.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>44702317-0b9b-4dc0-945f-e5303a967e8c</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/UpdateScan</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: HostedInstall (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userappinstallationpackagefamilynamehostedinstall
description: Installs an app package from a hosted location, such as a local drive, UNC path, or HTTPS source.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>ab117216-9adc-49cf-b3b1-3a1a7d9b43d0</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppInstallation/HostedInstall</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: StoreInstall (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userappinstallationpackagefamilynamestoreinstall
description: Command to perform an install of an app and a license from the Microsoft Store.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>48a53564-56b8-4ddf-b27f-8e0fa0d0f513</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppInstallation/StoreInstall</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: AddLicense (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userapplicensesstorelicenseslicenseidaddlicense
description: Adds a specified app license to the device using the provided license ID.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>9b0b3d42-e244-4359-8471-46f8cf62558e</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppLicenses/StoreLicenses/{LicenseID}/AddLicense</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: GetLicenseFromStore (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userapplicensesstorelicenseslicenseidgetlicensefromstore
description: Retrieves a specified app license from the Microsoft Store using the provided license ID.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>f4796a1e-5bf9-4828-a602-d3a0ac9f5930</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppLicenses/StoreLicenses/{LicenseID}/GetLicenseFromStore</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: RemovePackage (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userappmanagementremovepackage
description: Removes a specified Windows app package from the device.
supportedDeviceTypes:
- Windows 10.0.15063
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>70fe3f35-ce6f-484d-a14f-1f8ceb9edda3</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/RemovePackage</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
<Data>
<Package Name="{PackageFullName}" RemoveForAllUsers="1" />
</Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: ResetPackage (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userappmanagementresetpackage
description: Restores a specified Windows app to its initial state by resetting all configurations and data associated with the package.
supportedDeviceTypes:
- Windows 10.0.22000
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>ceeeeabd-f3d0-4c15-bdf2-07326cf27bbd</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/ResetPackage</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: UpdateScan (User context)
platform: windows
category: EnterpriseModernAppManagement
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/enterprisemodernappmanagement-csp#userappmanagementupdatescan
description: Starts a Windows Update scan under the user context to check for available app updates.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>f4a37fe3-e8f4-4961-a80e-e4d33550d496</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/UpdateScan</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: TriggerAttestation
platform: windows
category: HealthAttestation
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/healthattestation-csp#triggerattestation
description: Triggers an asynchronous device health attestation session, prompting the device to collect and submit its current health status for verification.
supportedDeviceTypes:
- Windows 10.0.22000
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>47b2a850-2c56-4044-b2de-98e49d9cfcb9</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/HealthAttestation/TriggerAttestation</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: VerifyHealth
platform: windows
category: HealthAttestation
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/healthattestation-csp#verifyhealth
description: Notifies the device to prepare a device health verification request.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>b442558e-a685-48c4-9fa1-71e5c6c9338f</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/HealthAttestation/VerifyHealth</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: ResetPassword
platform: windows
category: Local Administrator Password Solution (LAPS)
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/laps-csp#actionsresetpassword
description: Immediately generates and securely stores a new random password for the managed local administrator account on the device using Local Administrator Password Solution (LAPS).
supportedDeviceTypes:
- Windows 10.0.25145
- Windows 10.0.22621.1480
- Windows 10.0.22000.1754
- Windows 10.0.20348.1663
- Windows 10.0.19041.2784
- Windows 10.0.17763.4244
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>fa8a8f93-b3ed-48ef-940f-6232e74c087a</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/LAPS/Actions/ResetPassword</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Install (User context)
platform: windows
category: Office
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/office-csp#deviceinstallationidinstall
description: Installs Microsoft Office for the user based on the provided XML configuration.
supportedDeviceTypes:
- Windows 10.0.15063
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>b06743fc-3682-4aba-9f65-90a134b3dd6d</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Office/Installation/{id}/Install</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Install (Device context)
platform: windows
category: Office
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/office-csp#userinstallationidinstall
description: Installs Microsoft Office on the device using the provided XML configuration data.
supportedDeviceTypes:
- Windows 10.0.15063
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>2e9f2aba-db2e-44a4-9c78-6d05fd5ef4a4</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/Office/Installation/{id}/Install</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: Install
platform: windows
category: PrinterProvisioning
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/printerprovisioning-csp#upprinterinstallsprintersharedidinstall
description: Installs a Universal Print printer for the user asynchronously.
supportedDeviceTypes:
- Windows 10.0.22000
- Windows 10.0.19044.1806
- Windows 10.0.19043.1806
- Windows 10.0.19042.1806
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>0d2f967d-2c8b-45a6-9a5e-6969cb58b10a</CmdID>
<Item>
<Target>
<LocURI>./User/Vendor/MSFT/PrinterProvisioning/UPPrinterInstalls/{PrinterSharedID}/Install</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: RebootNow
platform: windows
category: Reboot
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/reboot-csp#rebootnow
description: Triggers an immediate device reboot, typically within 5 minutes to allow the user to finish active work. If executed during a sync session, the device will reboot at the end of the session.
supportedDeviceTypes:
- Windows 10.0.14393
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>d21ff8f2-a1ae-43c9-8763-26d7554f4a94</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/Reboot/RebootNow</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doAutomaticRedeployment
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#automaticredeploymentdoautomaticredeployment
description: Triggers an Autopilot reset on the device. Unlike a standard reset, the device remains enrolled in Azure AD and MDM, and preserves Wi-Fi profiles, region, language, keyboard settings, and other key configurations.
supportedDeviceTypes:
- Windows 10.0.17763
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>1259012e-3aa2-4f65-a191-eee74d7208c1</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/AutomaticRedeployment/doAutomaticRedeployment</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipe
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipe
description: Performs a remote wipe on the device. The return status indicates whether the device accepted the command. When used with OMA Client Provisioning, include a dummy value of "1" for this element.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>d85af4e3-ed77-4b4e-8a6f-d50ae80d35e4</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipe</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipeCloud
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipecloud
description: Performs a cloud-based remote wipe on the device. The return status indicates whether the device accepted the command.
supportedDeviceTypes:
- Windows 10.0.22621
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>f1b40cb3-d964-4378-bdd8-132305dcc879</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipeCloud</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipeCloudPersistProvisionedData
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipecloudpersistprovisioneddata
description: Performs a cloud-based remote wipe while preserving provisioning data by backing it up to a persistent location. The backed-up data is restored and applied when the device resumes. The return status indicates whether the device accepted the command.
supportedDeviceTypes:
- Windows 10.0.22621
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>d07f227f-74c1-4a0d-8e79-f0a9bcf1ffe2</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipeCloudPersistProvisionedData</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipeCloudPersistUserData
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipecloudpersistuserdata
description: Performs a cloud-based remote reset while preserving user accounts and data. The return status indicates whether the device accepted the command.
supportedDeviceTypes:
- Windows 10.0.22621
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>ef6fd567-f6ac-43c9-854d-c8df66684f0d</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipeCloudPersistUserData</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipePersistProvisionedData
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipepersistprovisioneddata
description: Performs a remote wipe while preserving provisioning data by backing it up to a persistent location. The backed-up data is restored and applied when the device resumes. The return status indicates whether the device accepted the command. When using OMA Client Provisioning, include a dummy value of "1" for this element.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>505af1a0-407c-4971-a193-1a25a94abb2b</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipePersistProvisionedData</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipePersistUserData
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipepersistuserdata
description: Performs a remote reset of the device while preserving user accounts and data. The return status indicates whether the device accepted the command.
supportedDeviceTypes:
- Windows 10.0.16299
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>faa34fe4-7ab5-4815-ac4d-3e99b4f79ad3</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipePersistUserData</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: doWipeProtected
platform: windows
category: RemoteWipe
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp#dowipeprotected
description: Performs a remote wipe that fully cleans the internal drive and continues retrying until complete, even after power cycles. Unlike doWipe, which can be interrupted by a simple power cycle, doWipeProtected ensures the wipe finishes. May render the device unbootable on some configurations.
supportedDeviceTypes:
- Windows 10.0.15063
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>0d0f7e7b-82b7-4fff-a4d1-101c9edb795d</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/RemoteWipe/doWipeProtected</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: InstallWindowsDefenderApplicationGuard
platform: windows
category: WindowsDefenderApplicationGuard
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp#installwindowsdefenderapplicationguard
description: Remotely installs the Windows Defender Application Guard feature on the device.
supportedDeviceTypes:
- Windows 10.0.16299
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>be527684-1679-449f-b4f1-7d2f6fe48ce7</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/WindowsDefenderApplicationGuard/InstallWindowsDefenderApplicationGuard</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: ChangeProductKey
platform: windows
category: WindowsLicensing
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowslicensing-csp#changeproductkey
description: Installs a new Windows product key on the device without requiring a reboot.
supportedDeviceTypes:
- Windows 10.0.15063
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>e416bea9-8407-4a72-a7db-415cd4dcf622</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/WindowsLicensing/ChangeProductKey</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: CheckApplicability
platform: windows
category: WindowsLicensing
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowslicensing-csp#checkapplicability
description: Checks if the provided product key is valid for upgrading the Windows edition on the device, returning TRUE if applicable.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>e3f7b84a-1984-4511-843f-c33001392d14</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/WindowsLicensing/CheckApplicability</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: SwitchFromSMode
platform: windows
category: WindowsLicensing
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowslicensing-csp#smodeswitchfromsmode
description: Switches the device from Windows 10/11 S mode to a standard edition, if eligible. No reboot is required.
supportedDeviceTypes:
- Windows 10.0.17763
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>848dc97d-0d6d-489e-bb32-9a90fa2e3afb</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/WindowsLicensing/SMode/SwitchFromSMode</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: RemoveSubscription
platform: windows
category: WindowsLicensing
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowslicensing-csp#subscriptionsremovesubscription
description: Removes the subscription license from the device and resets the subscription type to a user-based subscription.
supportedDeviceTypes:
- Windows 99.9.99999
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>da9c456a-2f0e-4d8a-9748-0fbde572ee76</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/WindowsLicensing/Subscriptions/RemoveSubscription</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">null</Format>
<Type>text/plain</Type>
</Meta>
<Data></Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: UpgradeEditionWithLicense
platform: windows
category: WindowsLicensing
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowslicensing-csp#upgradeeditionwithlicense
description: Upgrades the Windows edition on the device by applying a provided license. No reboot is required to complete the upgrade.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>472afd03-6963-4c7b-aebb-99d561724086</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/WindowsLicensing/UpgradeEditionWithLicense</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">xml</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
- name: UpgradeEditionWithProductKey
platform: windows
category: WindowsLicensing
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/windowslicensing-csp#upgradeeditionwithproductkey
description: Upgrades the Windows edition on the device by applying a specified product key. A reboot is required to complete the upgrade.
supportedDeviceTypes:
- Windows 10.0.10586
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>3d13b6f6-5e79-4a28-b8f5-062f884a1de1</CmdID>
<Item>
<Target>
<LocURI>./Vendor/MSFT/WindowsLicensing/UpgradeEditionWithProductKey</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
<Data>XXXXX-XXXXX-XXXXX-XXXXX-XXXXX</Data>
</Item>
</Exec>
</syncbody>
</syncml>
- name: ResetToFactoryState
platform: windows
category: eUICCs
externalDocumentationUrl: https://learn.microsoft.com/en-us/windows/client-management/mdm/euiccs-csp#euiccactionsresettofactorystate
description: Triggers an eUICC (embedded Universal Integrated Circuit Card) factory reset, permanently deleting all eSIM (embedded Subscriber Identity Module) profiles stored on the eUICC.
supportedDeviceTypes:
- Windows 10.0.16299
command: |
<syncml xmlns="SYNCML:SYNCML1.2">
<syncbody>
<Exec>
<CmdID>ebb2aec5-4865-4419-9fa1-3458d32fcab6</CmdID>
<Item>
<Target>
<LocURI>./Device/Vendor/MSFT/eUICCs/{eUICC}/Actions/ResetToFactoryState</LocURI>
</Target>
<Meta>
<Format xmlns="syncml:metinf">chr</Format>
<Type>text/plain</Type>
</Meta>
</Item>
</Exec>
</syncbody>
</syncml>
Reference in a new issue View git blame Copy permalink