• Active Directory
  • Application
  • Desktop & Mobile
  • Help Desk
  • Network
  • Server
  • IT Security
  • MSP
  • On-Demand
 
 
Device Management, made easy
Manage control and secure your workstations, mobile
devices and tablets
 
 
Help Desk for Everyone
IT Help Desk Software and Customer Support Software
 
 
Protect Your IT. Save Your Business
Build a secure fortress with our security management solutions
 
 
MSP
Manage services faster, with multi-tenanted, ITIL-ready, and unified RMM solutions
 
 
On-Demand Solutions
IT Help Desk, Active Directory, and Operations Management from the Cloud
 

Frequently asked Questions

This set of Frequently Asked Questions (FAQs) about Desktop Central answers queries that you may have about Desktop Central. Send us an e-mail message, if you have any questions that remain unanswered.

General

  1. What are the system requirements for Desktop Central?
  2. Which operating systems does Desktop Central support?
  3. Can Desktop Central UI be localized to other languages?
  4. What is the difference between the various editions of Desktop Central?
  5. Do I have to write scripts to use Desktop Central?
  6. What is Scope of Management (SoM)?
  7. Can I group and define configurations or do I have to define them individually?
  8. When and how do configurations get applied to computers and users?
  9. How do I access the User Interface (UI) of Desktop Central from a remote location?
  10. What do I use the Define Target feature for?
  11. My free trial expired before I could complete my evaluation of Desktop Central. Can I receive an extension?
  12. How is Desktop Central licensed?
  13. Why are configurations in Desktop Central created using a Web interface?
  14. Which ports are used by the Desktop Central application?
  15. Which database does Desktop Central support to store data?
  16. Which Web server does Desktop Central use?
  17. I have an IIS installed on the computer. Can I configure the settings in Desktop Central to use this IIS instead of its own?
  18. Can I install a software application if the User Account Control (UAC) setting is enabled?
  19. Will new computers that are added in the domain receive configurations automatically once they check in with desktop Central?
  20. Does Desktop Central support Home editions of Windows OS like Windows XP Home, Windows 7 Home Premium?
  21. Do we have any option for multiple Active Directory inputs in Desktop Central?
  22. How will the Desktop Central agent reach the Distribution Server if the port number used for their communication has been changed?
  23. What is IP Scope and What are its advantages?
  24. What will happen if the agents are unable to reach the Desktop Central Server to report the status after performing any task?
  25. What minimum access requirements are needed if I configure Desktop Central without using a domain admin account? does it ensure that all the features still work?
  26. Is Desktop Central capable of managing virtual computers?
  27. How to install Desktop Central agent in a different drive?
  28. When automatic patch deployment is applied to a OU, and a new computer is added to a OU, will the task pick the newly added computer?
  29. What is "dcagentupdater" scheduled task?
  30. Is it possible to use Desktop Central to manage computers without installing agents?
  31. Is it mandatory for all the managed computers have connection to the internet?
  32. Can I use Desktop Central to manage computers that does not belong to a domain?

Remote Control

  1. Which ports must I open to use the Remote Control feature?
  2. Which ports must I open to use the File Transfer feature during a remote control session?
  3. Can I view multiple monitors of a remote computer simultaneously?
  4. The page rendering while using the Remote Control feature is slow. How can I improve its speed?
  5. What is the difference between Fast and Best Compression levels?
  6. On which browsers can I use the Remote Control feature?
  7. Is it possible for multiple users to login remotely to a computer at the same time?
  8. How to lock a keyboard or a mouse or blacken the display on a remote computer?
  9. What will happen when I take a remote session of a Virtual Computer?
  10. Do you support MAC machines?
  11. How to locate the file where the remote control session is recorded?

Software Deployment

  1. Which type of software repository is recommended for computers in remote location; is it a network share or HTTP share?
  2. Why should I specify RunAs when Desktop Central already has the same credentials stored under Admin > SoM > Edit Credentials.?
  3. Why must I specify the MSI Root Path? It is identical to the MSI File Name with Network path?

Mobile Device Management

  1. What are the prerequisites for Device Enrollment?
  2. What ports needs to open in MDM server and devices?
  3. What Operating systems are supported in DC-MDM?
  4. How can we manage BYOD devices?
  5. Do I need an Apple enterprise/developer account to manage iOS devices?
  6. What is the difference between AppStore Apps and Enterprise in-house Apps?
  7. What is Volume Purchase Program(VPP)?
  8. What is behavior of Restriction policy?
  9. What is difference between Complete Wipe and Corporate Wipe?
  10. Can a passcode policy forced on the mobile device be revoked by the user?
  11. How to impose policies on devices in such a way that the users cannot revoke it?
  12. What is an .apk file?
  13. What will happen if I distribute iOS apps to android devices?
  14. Why should i enable 'Device Administrator' in my mobile device?
  15. What do you mean by imposed policies?
  16. What is meant by violated policies?
  17. Can we wipe the data in the device's external memory?
  18. Can we install an AppStore app without entering the apple id?
  19. Can we revoke the license code after installing the app?
  20. What is the difference between Idle Timeout before lock and Grace Period for device lock?
  21. Do I need internet connection on the Desktop Central and the managed mobile devices?
  22. Why should I renew APNs before a month of its expiry?
  23. How to protect Corporate Data on the mobile devices?
  24. Should the user have to use the Apple ID password while installing the apps from App Catalog?
  25. Can I use Desktop Central to force install Apps on the managed Android devices?
  26. What are the Prerequisites for Self Enrollment?
  27. Do I need to re-enroll my mobile devices after changing the Public IP address for NAT settings?
  28. Can iOS update be restricted on the managed mobile device?
  29. What are the prerequisites for Windows Phone Enterprise App Distribution?
  30. What is AET? What is its purpose?

Chat

  1. How to clear chat history?
  2. What will happen if the port 8022 is already in use?
  3. Under which circumstances will chat session fail?
  4. What will happen when we try to connect a chat session with a person who is inactive?
  5. How often will the logged on user names be refreshed?

General

1. What are the system requirements for Desktop Central?

The system requirements for Desktop Central are as follows:

Hardware Requirements

No. of Computers Managed Processor RAM Hard Disk Space
Upto 250 Computers

Single processor Intel P4 ~1.5 GHz

1 GB 2 GB*
251 to 500 Computers Single processor (Intel P4 or Xeon 2.0 Ghz (Dual Core), 800+ Mhz FSB, 4 MB cache) 2 GB 2 GB*
501 to 1000 Computers Single processor (Intel Xeon ~2.4 Ghz Dual Core, 800+ Mhz FSB, 4MB cache) 4 GB 3 GB*
1001 to 3000 Computers Dual processor (Intel Xeon ~2.0 Ghz Dual Core, 1000 Mhz FSB,4 MB cache) 4 GB 5 GB*
3001 to 5000 Computers Dual Processor (Intel Xeon processors Quad-Core at 2 ~ 3 GHz, 1000+ MHz FSB, 4 MB Cache) 6+ GB @ 667 Mhz. ECC 20 GB (HDD speed @ 7200 ~ 10,000 rpm)
5001 to 10000 Computers Quad Processor (Intel Xeon processors Quad-Core at 2 ~ 3 GHz, 1000+ MHz FSB, 4 MB Cache) 8+ GB @ 667 Mhz. ECC 50 GB (HDD speed @ 7200 ~ 10,000 rpm)

* May grow dynamically depending on the frequency of scanning

Note: While managing more than 1000 computers, it is advised that you install Desktop Central on a Windows 2003 Server Enterprise Edition.

Software Requirements

This section gives you information about the software requirements for distribution servers, Desktop Central servers and agents.

Supported Operating Systems

You can manage your computers which have any of the following supported operating systems installed on them:

Desktop-related Operating Systems

  • Windows 2000 Professional
  • Windows XP Professional
  • Windows Vista
  • Windows 7
  • Microsoft Windows 7 (32 bit and 64 bit)
  • Microsoft Windows 8
  • Microsoft Windows 8.1
  • Mac 10.6
  • Mac 10.7
  • Mac 10.8
  • Mac 10.9

Server-related Operating Systems

  • Microsoft Windows 2000
  • Microsoft Windows 2003
  • Microsoft Windows 2008
  • Microsoft Windows 2008 R2
  • Microsoft Windows 2012
  • Microsoft Windows 2012 R2

Note: Desktop Central can also be installed on virtual computers, running any of the supported operating systems specified above, and terminal clients.

Supported Browsers

You are required to install any of the following browsers on your computer to run the Desktop Central console:

  • Microsoft Internet Explorer 5.5 and later versions
  • Google Chrome
  • Mozilla Firefox 1.0 and later versions

Note: The screen resolution should be 1024 x 768 pixels or higher.

For more information, see System Requirements.

Questions

2. Which operating systems does Desktop Central support?

Desktop Central supports the following operating systems:

  • Microsoft Windows 2000 Professional
  • Microsoft Windows XP Professional
  • Microsoft Windows Vista
  • Microsoft Windows 7
  • Microsoft Windows 8
  • Microsoft Windows 8.1
  • Mac 10.6
  • Mac 10.7
  • Mac 10.8
  • Mac 10.9
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2003 Server
  • Microsoft Windows 2008 Server
  • Microsoft Windows 2012 Server
  • Microsoft Windows 2012 R2
  • Virtual Servers (VM Ware) Mobile Devices
  • iOS 4.0 & above
  • Android 2.2 & above
Questions

3. Can Desktop Central UI be localized to other languages?

Yes, the user interface of Desktop Central, in addition to the default English language, can be localized to Chinese, German and Japanese languages. To change the language of the UI, click Personalize from top-right, choose the preferred language and save.

Questions

4. What is the difference between the various editions of Desktop Central?

Desktop Central has four editions:

  • Free Edition: This edition allows you to manage upto 25 desktops and 5 mobile devices for free. You can upgrade to either the standard, professional or enterprise editions whenever you want by buying a valid license from ManageEngine.
  • Patch Edition: This edition provides users with features related to Patch Management and associated Windows System Tools. Along with getting consolidated patch reports, users can also create custom query reports and schedule the reports in this edition.
  • Professional Edition: This edition allows you to manage a certain number of computers. This is specified when you buy the license. It comprises all the features of Desktop Central except the bandwidth management feature for remote offices.
  • Enterprise Edition: This edition has the same set of features as the Professional edition. However, it has the bandwidth management feature for remote offices with distribution servers.
  • Mobile Device Management Add-on: This add-on is available on all the editions discussed above and comes at an additional cost based on the number of devices managed.

For more detailed comparison, refer to the Compare Editions section on our Web site.

Questions

5. Do I have to write scripts to use Desktop Central?

No, you do not have to write scripts to use the predefined configurations provided by Desktop Central. You have to select a configuration, specify the required inputs, and deploy it.

Questions

6. What is Scope of Management (SoM)?

Scope of Management is a feature in Desktop Central that is used to specify which computers you can manage using Desktop Central. You can add and manage computers that are from an Active Directory, a workgroup or any other directory service like Novell eDirectory. The computers can either be in the same Local Area Network (LAN) or in a remote location connected through a Virtual Private Network (VPN) connection or through the Internet. For more information, see Defining the Scope of Management.

Questions

7. Can I group and define configurations or do I have to define them individually?

Desktop Central has predefined configurations available for users and computers. These configurations can be grouped and defined into collections if they are meant for the same user or computer. However, if they are meant for individual users or computers, they have to be defined and deployed individually.

For example if you want to deploy a custom wallpaper to a client computer and prevent the user of that computer from changing it, you will use a collection of the Display and Security Policies configurations for a user. However, if you want to deploy a custom wallpaper to 5 out of 10 client computers and prevent only 2 users from changing the wallpaper, you will have to deploy the Display and Security Policies configurations to the computers, individually.

Questions

8. When and how do configurations get applied to computers and users?

Every configuration that is applied to computers and users will be applied in the following scenarios:

  • User logon or system startup: All user configurations, except the Custom Script configuration, are applied when a user logs on or when a system is started.
  • System startup or shutdown or user logon or logoff: The Custom Script configuration is applied when a user logs on or logs off. This also takes place when a computer is switched on or switched off.
  • 90-minute refresh cycle

Let us see few examples:

A configuration is deployed to computers and users, to block USB devices,

If the computer is turned off - This configuration will get applied during the computer start up and the USB access will be blocked.

If the computer is turned on - This configuration will get applied during the next refresh cycle, when the agent communicates with the Desktop Central server. Assuming that a USB device was already plugged in and used in the computer, the access will be denied as soon the configuration gets applied.

If the User has logged off - This configuration will get applied to the user's profile when the user logs on to the computer. So that the particular user will not have permission to access USB devices.

If the User has logged on - This configuration will get applied during the subsequent refresh cycle. Assuming that the user has already plugged in a USB device and has been using the device, the access will be denied after the configuration gets applied.

Questions

9. How do I access the User Interface (UI) of Desktop Central from a remote location?

To access the Desktop Central UI from a remote location, follow the steps given below:

  1. Open a supported browser
  2. Enter http://<host name>:<port number> in the address bar

    Note: Here <host name> refers to the name / IP Address of the machine running Desktop Central, <port number> refers to the port where the product is started, the default being 8020. For example, 192.168.100.110:8020.
  3. Press Enter

You can now login to the Desktop Central UI.

Questions

10. What do I use the Define Target feature for?

The Define Target feature is used to identify targets, also called users or computers, to apply configurations to. The targets can be all the users or computers belonging to a site, domain, Organizational Unit (OU) or a group. They can also be a specific user or computer. For more information, see Defining Targets.

Questions

11. My free trial expired before I could complete my evaluation of Desktop Central. Can I receive an extension?

Customer satisfaction is our primary goal. During the trial period of 30 days, you can manage an unlimited number of desktops using Desktop Central. After the trial period is over, Desktop Central automatically switches to the free edition using which you can manage only 25 desktops and 5 mobile devices.

However, if your trial period is complete and you want to use the software application to manage more than 25 computers and 5 mobiles, contact us. You will receive a temporary license with a validity period to suit your requirements. The transition from the free edition of Desktop Central to the temporarily-licensed edition is smooth with no loss of data or configurations.

Questions

12. How is Desktop Central licensed?

Desktop Central is licensed on an annual-subscription basis depending on the number of computers you want to manage. You can get the price for a specific number of desktops from our online store. You may also buy a permanent license by paying an one-time fee. Contact us with the following details to get a quote from our sales team:

  • Number of computers you want to manage using Desktop Central
  • Edition that you are interested in buying
Questions

13. Why are configurations in Desktop Central created using a Web interface?

Desktop Central, with its Web-based interface, enables desktop administrators to access the application from anywhere within a network to complete various tasks; for example, to create configurations. This facilitates easy management of computers without being required to be present in any specific location.

Questions

14. Which ports are used by the Desktop Central application?

You must open the following ports for effective communication between an agent, the Desktop Central server and the distribution server:

Port Number
Type
Purpose
Connection
Traffic
8020
HTTP
Agent Server communication
Inbound to Server
inboundinbound
8444
HTTP
For sharing remote desktops
Inbound to Server
inboundinbound
8032
HTTP
For transferring files
Inbound to Server
inboundinbound
8027
TCP
To complete on-demand tasks like inventory scanning, patch scanning, remote control, remote shutdown and moving agents from one remote office to another
Inbound to Server
inboundinbound
8022
HTTP
To enable Chat and System Manager
Inbound to Server
inboundinbound
8021
HTTP
To enable communication between a Desktop Central agent and a distribution server
Inbound to Distribution Server
inboundinbound
8384
HTTPS
To enable communication between a Desktop Central agent and a distribution server
Inbound to Distribution Server
inboundinbound
8383
HTTPS
For communication between the agent or distribution server and the Desktop Central server
Inbound to Server
inboundinbound
8443
HTTPS
For Sharing Remote Desktops
Inbound to Server
inboundinbound
8031
HTTPS
For transferring files
Inbound to Server
inboundinbound
2195
HTTP
Should be open on the Desktop Central Server to reach the APNs. Host Address: gateway.push.apple.com Outbound from Server
inbound
443
HTTP
Should be open on the Desktop Central Server to reach the GCM server Outbound from Server
inbound
5223
HTTP
Should be open, if the mobile device connects to the internet through the Corporate WiFi, it is recommend to configure the IP range 17.0.0.0/8. Outbound from Corporate Network Firewall
inboundinbound
5228
HTTP
For the GCM to reach the managed mobile device Outbound from Corporate Network Firewalll
inboundinbound
5229
HTTP
For the GCM to reach the managed mobile device Outbound from Corporate Network Firewall
inboundinbound
5230
HTTP
For the GCM to reach the managed mobile device Outbound from Corporate Network Firewall
inboundinbound
135
TCP
To enable sharing of files and printers Outbound from Managed Computers
inboundinbound
445
TCP
To enable sharing of files and printers Outbound from Managed Computers
inboundinbound
135
TCP
To enable remote administration Outbound from Managed Computers
inboundinbound
Questions

15. Which database does Desktop Central support to store data?

Desktop Central supports MySQL, PGSQL and MS SQL database to store data.

Questions

16. Which Web server does Desktop Central use?

Desktop Central uses the Apache HTTP Server to enable remote access to it's Web console.

Questions

17. I have an Internet Information Services (IIS) application installed in my computer. Can I configure the settings in Desktop Central to use this IIS instead of its own?

No, currently Desktop Central does not support ISS.

Questions

18. Can I install a software application if the User Account Control (UAC) setting is enabled?

Yes, you can install a software application when the UAC feature is enabled if you are not required to enter information during installation.

However, if you have to enter information during the installation of a software application, you must create a user configuration without selecting the Run As option. When you use the Run As option in a user configuration, use the Default Administrator account.

Questions

19. Will new computers that are added in the domain receive configurations automatically once they check in with desktop Central?

Yes, computers that are newly added in the domain will receive all the deployed configurations automatically when they check in with the Desktop Central Server.

Questions

20. Does Desktop Central support Home editions of Windows OS like Windows XP Home, Windows 7 Home Premium?

All the features other than patch management works effectively while using Desktop Central in home edition of windows operating system.

Questions

21.Do we have any option for multiple active directory inputs in Desktop Central?

No, We do not accept multiple active directory inputs in Desktop Central at this point of time.

Questions

22. How will the Desktop Central agent reach the Distribution Server if the port number used for their communication has been changed?

When the agents of the remote location are unable to contact the Distribution Server, they contact the Desktop Central Server directly during the next 90 minutes refresh interval. They receive the modified port numbers of the Distribution Server and communicates with it henceforth.

Questions

23. What is IP Scope and What are its advantages?

Desktop Central has different agents for different locations, for example a local office agent will not be the same as the remote office agent. Similarly every remote office has different agents as well. When you are managing computers one or more remote locations, you can have a defined set of IP ranges for different offices. This enables the Desktop Central Server to identify the agents with respect to the IP range. So whenever a computer is moved from a local office to a remote location,  IP scope is used  to automatically detect and deploy the respective WAN agent. Desktop Central will check for the change in the IP address periodically and will deploy the appropriate agents whenever a change is detected.

Questions

24. What will happen if the agents are unable to reach the Desktop Central Server to report the status after performing any task?

Agents will report the status to the Desktop Central server after performing every task. In case if the Desktop Central Server is not reachable, then the agents will update the status during their subsequent refresh interval.

Questions

25.What minimum access requirements are needed if I configure Desktop Central without using a domain admin account? does it ensure that all the features still work?

If you need to configure Desktop Central without using domain admin account, then you need a common user created in all the computers with admin privilege. However you will not be able to install agents automatically and agent installation can be done using a GPO.

Questions

26. Is Desktop Central capable of managing Virtual computers?

Yes, Desktop Central is capable of managing virtual computers.

Questions

27. How to install Desktop Central agent in a different drive?

Download the agent and navigate to the downloaded location using command prompt. For example, if you wanted to download the agent in D drive, execute the below mentioned command.

DesktopCentralAgent.msi TARGETDIR="D:\DesktopCentral_Agent\" REBOOT=ReallySuppress

Questions

28. When automatic patch deployment is applied to a OU, and a new computer is added to a OU, will the task pick the newly added computer?

Yes, all the configurations applied to the OU will be automatically applied to the newly added computers.

Questions

29.what is "dcagentupdater" scheduled task?

This is a scheduled task created in the agents. This task runs on the client computer and scheduled every hour to ensure that the agent version is up to date.

Questions

30. Is it possible to use Desktop Central to manage computers without installing agents?

No, Desktop Central needs agents to perform any desktop management activity.

Questions

31. Is it mandatory for all the managed computers have connection to the internet?

No, it is not necessary for all the managed computers to have internet connection. However Desktop Central server would need connection to the internet in order to download the patches and software applications from the respective vendors website.

Questions

32. Can I use Desktop Central to manage computers that does not belong to a domain?

Yes, Desktop Central can be used to manage computers even if they do not belong to a domain.

Questions

Remote Control

1. Which ports must I open to use the Remote Control feature?

You must open the the following ports to use the Remote Control feature:

  • 8443 for secure connections
  • 8444 for normal connections

By default, the Remote Control feature uses a secure connection. These ports have to be opened on the Desktop Central server.

Questions

2. Which ports must I open to use the File Transfer feature during a remote control session?

You must open the following ports to use the File Transfer feature during a remote control session:

  • 8031 for secure communication
  • 8032 in case of normal communication

These ports have to be opened on the computer on which the Desktop Central server is installed.

Questions

3. Can I view multiple monitors of a remote computer simultaneously?

Yes, you can view multiple monitors of a remote computer simultaneously by using the Remote Control feature. You can switch between monitors using the multi-monitor icon available in the Active X viewer. Viewing multiple monitors simultaneously is currently not supported in a Java viewer. For more information, see How to switch between multiple monitors during a remote session?

Questions

4. The UI-rendering while using the Remote Control feature is slow. How can I improve its speed?

You can set the compression level to Fast, when using the Remote Control feature, to improve the page-rendering speed. The bandwidth consumption will be comparatively higher when compared to best compression level, however the page-rendering will be comparatively faster.

Questions

5. What is the difference between Fast and Best Compression levels?

When you set the compression level to Fast, the compression ratio is lower, resulting in an increase in the speed of the rendering of the UI. This is recommended when the computer that you are connecting remotely to is in the same LAN as the computer you are connecting from.

When you set the compression level to Best, the compression ratio is higher, resulting in a decrease in the consumption of the bandwidth. However, the rendering of the UI will be comparatively slower. This setting is recommended when the computer that you are connecting to remotely is at a different geographical location.

Questions

6. On which browsers can I use the Remote Control feature?

You can use the Remote Control feature on the following browsers:

  • Internet Explorer
  • Mozilla Firefox
  • Google Chrome
Questions

7. Is it possible for multiple users to login remotely to a computer at the same time?

Yes, it is possible for multiple users to login remotely to a computer at the same time. However, only one of the users who has logged in can take control. The other users can only view the changes that are being made.

Questions

8. How do I lock a keyboard or a mouse or blacken the display on a remote computer?

You can lock a keyboard or a mouse to ensure that you can make changes effectively. To lock the remote computers keyboard and mouse, click the Lock Keyboard/Mouse icon from the viewer.

Similarly, you can blacken the monitor of a remote computer when you do not want the user to view the changes that you are making. To blacken the remote monitor, click on the Blacken Monitor icon from the viewer.

Questions

9. What will happen when I take a remote session of a Virtual Computer?

When you take a remote session of a virtual computer, you will result in viewing the screen of the physical machine in which the remote session is hosted.

Questions

10.Do you support Mac machines?

Yes, Desktop Central supports managing computers running Mac operating systems.

Questions

11. How to locate the file where the remote control session is recorded?

To locate the file where a remote control session is recorded, first navigate to the directory where the Desktop Central server is installed. Then, go to 

<Installed_Directory>\DesktopCentral_Server\webapps\DesktopCentral\server-data\<customerID>\rds\scr-rec

Extract the zip file in this location to view the recorded video clip.

Questions

Software Deployment

1. Which type of software repository is recommended for computers in remote location; is it a network share or HTTP share?

We would recommend using a HTTP share as the software repository for computers in the remote location. This would ensure that all the computers can reach the software repository easily.

Questions

2. Why must I specify "Run As" when Desktop Central already has the credentials stored under Admin > SoM > Edit Credentials?

"Run As" is the option which is used for the applications that need to be installed as a different User. Since Desktop Central supports Multiple Active Directory domains and work-groups, we need to associate the credential supplied in SoM with the corresponding Domain or work-group.  In order to handle such scenarios, Desktop Central gets the additional user name and password for RunAs.  However, if "Run As" is not specified then system credentials will be taken by default.

Questions

3. Why must I specify the MSI Root Path? It is identical to the MSI file name with network path.

The MSI Root Path is mainly used for the following:

  • Copying the files to the client computer.
  • Setting the working directory for installation.

If the MSI file is browsed and chosen then the MSI Root Path is automatically taken.  It becomes mandatory only when the MSI file name with network path is manually entered.

Questions

Mobile Device Management

1. What are the prerequisites for Device Enrollment?

The prerequisites for enrolling a mobile device are;

  1. Creating APNs (applicable only for iOS)
  2. Configuring proxy settings
  3. Configuring mail server settings
  4. Setting up the user authentication type

The device that needs to enrolled should be accessible through the internet in order to receive the email with enrollment settings.

Questions

2. What are the ports that need to open for mobile device management?

The following ports should be opened for managing mobile devices using Desktop Central,

TCP Ports to be opened on the Desktop Central Server:

Note: All the ports are inbound to the Desktop Central Server, whereas the data flow could be in both the directions.

  • 8383 - Used for secured communication between the agent and the Desktop Central server
  • 2195 - Should be open for the Desktop Central server to reach the APNs.
  • 443 - Should be open for the Desktop Central server to reach the GCM.

TCP Port to be opened on the WiFi from which the mobile device connects to the internet: (iOS devices)

  • 5223: Used by APNs to reach the managed mobile device.

TCP Ports to be opened on the WiFi from which the mobile device connects to the internet: (Android devices)

  • 5228: Used by GCM to reach the managed mobile device.
  • 5229: Used by GCM to reach the managed mobile device.
  • 5230: Used by GCM to reach the managed mobile device.
Questions

3. What Operating systems are supported in DC-MDM?

Currently we manage mobile devices, using the following software;

  • iOS version 4.0 and above
  • Android 2.2 and above
  • Windows Phone 8.0 and above
Questions

4.How can we manage BYOD?

"Bring Your Own Device" BYOD being the integral part of Desktop Central MDM, you can ensure the security of corporate data. Whenever any user's personal device is lost, or the employee quits an organization, administrators can execute security commands like corporate wipe or complete wipe to ensure data security. Hence Desktop Central MDM is a smart choice for every enterprise to manage BYOD.

Questions

5.Do I need an Apple enterprise/developer account to manage iOS devices?

No, you do not require an apple developer account to manage the iOS devices using Desktop Central.

Questions

6.What is the difference between AppStore Apps and Enterprise/In-house Apps?

AppStore Apps are those which are available in the AppStore. They can be either paid App or free App. Enterprise Apps, also called as In-House Apps are specially developed and designed for every Enterprise. This is unique and completely owned and distributed by the Enterprise itself.

Questions

7. What is Volume Purchase Program (VPP)?

Administrators need to buy licenses/redemption codes to distribute paid Apps to Groups/Devices. VPP files are specially designed to purchase redemption codes in bulk, so that it can be used while distributing Apps to Groups/Devices.

Questions

8. What is behavior of Restriction policy in iOS devices?

Desktop Central assures high security through restriction policies. Whenever more than one policy is applied for a same cause, whichever policy provides more security will get applied automatically. For example, assume two restriction policies are assigned to a device, where one is applied to authenticate the usage of camera and the other is to restrict the usage of camera, the policy which assures high security will get applied automatically. So the usage of camera will be restricted in the device.

Questions

9. What is difference between Complete Wipe and Corporate Wipe?

Corporate wipe is a security command used to wipe data in the device. This security command is mostly used to secure the corporate data from devices, when they are lost. Corporate Wipe is used to remove only the configurations and Apps that has been pushed using Desktop Central and this command will not wipe any personal data of the user. Complete wipe command is used to wipe all in the data in the device, which makes the device as good as a new one.

Questions

10. Can a passcode policy forced on the mobile device be revoked by the user?

No, passcode policy that is forced on the mobile device cannot be revoked by the user. Though users can disable passcode settings on their device, users will be forced to set passcode any time the device is unlocked. However if MDM profile is removed from the device the device can no longer be managed by Desktop Central.

Questions

11. How to impose policies on devices in such a way that the users cannot revoke it?

While creating policies ensure that you disable the option which allows users to remove the profile. By doing this every policy that is imposed on the device cannot be revoked by the user. However while removing MDM profile from the device all the policies and restrictions will be removed from the device.

Questions

12. What is an .apk file?

'APK' refers to application package file. Android program files are compiled in a package as .apk file, which is used for distributing the apps. When you need to add an android App to the App repository you need to ensure that the android app is in .apk format.

Questions

13. What will happen when if I distribute an iOS app to Android and Windows devices?

Desktop Central app distribution is designed in such a way that you can only distribute iOS apps to iOS devices, android apps to android devices and Windows apps to Windows devices.

Questions

14. Why should i enable 'Device Administrator' in my Android mobile device?

Device Administrator should be enabled in the android mobile device to authenticate Desktop Central Mobile Device Management to perform remote management activities in the device.

Questions

15. What do you mean by imposed policies?

Policies and Restrictions which are applied successfully to the managed mobile device is called as imposed policies.

Questions

16. What is meant by violated policies?

Administrator instructs the users to accept the Policies and Restrictions which are pushed to the device. When the user over rules the policies and restrictions, then those policies and restrictions are called as violated policies.

Questions

17. Can we install an AppStore app without entering the apple ID?

No, users will be prompted to use their AppStore user name and password while installing the Apps.

Questions

18. Can you wipe the data from the device's external memory?

No, you cannot wipe the data from the external memory of the device.

Questions

19.Can you revoke the license code after installing the App?

Yes, with the help of iOS app license management feature in VPP, Desktop Central will let you to revoke and reassign app licenses to the required user device.

Questions

20.What is the difference between Idle Timeout before lock and Grace Period for device lock?

Idle timeout before device lock specifies the time allowed for the device before the screen turns off. This is similar to the settings that can be configured in the device Settings>General>auto lock>. Grace period for device lock refers to the time allowed for the user before prompting for a passcode. The screen of the device turns off and when the user slides the arrow to unlock the screen he would be prompted to enter his passcode. This is similar to the settings that can be configured in the device Settings>General>passcode lock>.

Questions

21. Do I need internet connection on the Desktop Central and the managed mobile devices?

Yes, you need internet connection on both the Desktop Central server as well on the managed mobile devices to use Desktop Central MDM.

Questions

22. Why should i renew APNs before a month of its expiry?

If the APNs certificate has expired, Apple Push Notification service will not be able to contact the managed mobile devices. Renewing an APNs after expiry is the same as creating new APNs, which means all the devices need to be enrolled again to be managed.

Assume that the APNs expires on 30th of June, you need to ensure that you renew your APNs well before the expiry date and update it in the Desktop Central server. All the managed mobile devices should contact Desktop Central server at least once before 30th of June. If any of the managed mobile device fails to contact the Desktop Central server, then those devices should be enrolled again. Hence we recommend renewing APNs before a month of its expiry.

Questions

23. How to protect Corporate Data on the mobile devices?

You can secure corporate data on mobile devices by applying the following restrictions:

  • Disabling Screen capture
  • Disabling Backup (iCloud)
  • Disabling Document Sync
  • Disabling Photo Stream
  • Disabling Shared Stream
  • Disabling User to accept untrusted TLS Certificates
  • Forcing Encrypted Backups.
  • Configuring Email settings to restrict data forwarding.

These restrictions will help you to secure Corporate data on mobile devices.

Questions

24. Should the user have to use the Apple ID password while installing the Apps from App Catalog?

Yes, the end user has to enter the Apple ID to install the Apps. When an App is distributed by Desktop Central, the App will be listed in the App Catalog on the mobile device. End user needs to install the App by clicking on the App and proving their Apple ID. If any paid App is distributed to an end user and he installs the App by using his personal Apple ID, then that App cannot be revoked or reused for any other user.

Questions

25. Can I use Desktop Central to force install Apps on the managed Devices?

Yes, you can force install Android enterprise Apps on SAFE devices, iOS devices and Windows phones. However, force installation is not supported for play store apps or core android devices.

Questions

26. What are the Prerequisites for Self Enrollment?

End user should have the following for self enrolling a device.

  • Connection to the Internet
  • Self Enrollment URL
  • Active Directory Authentication.
Questions

27. Do I need to re-enroll my mobile devices after changing the Public IP address for NAT settings?

No, You need not re-enroll the managed mobile devices, because the mobile devices will reach the Desktop Central server using the external IP.

Questions

28. Can iOS update be restricted on the managed mobile device?

No, iOS update cannot be restricted on the managed mobile device.

Questions

29. What are the prerequisites for Windows Phone Enterprise App Distribution?

Steps to perform App distribution:

  • You have to register a company account on Windows Phone Dev Center and obtain an enterprise certificate from Symantec
  • You should generate an application enrollment token (AET)
  • Upload the generated AET file into the server (MDM -> App repository -> Windows app settings -> App distirbution certificate -> Configure)
  • Before adding enterprise apps in app repository, you have to sign the app using AET

For more details visit help

Questions

30. What is AET? What is its purpose?

‘AET’ refers to Application Enrollment Token. The Windows Phone 8 operating system requires users to enroll each device with the enterprise before users can install company applications on their devices. Only way to achieve this is with Application Enrollment Token, which enables you to distribute enterprise applications on a Windows Phone 8 device. For more information visit help

Questions

 

Chat

1. How to clear chat history?

To clear chat history follow the steps mentioned below;

  1. Click Tools Tab and select Chat
  2. Under History click on Chat History Settings
  3. Specify the number of days to maintain the chat history, so that the previous chat history will be deleted.
Questions

2. What will happen if port # 8022 is already in use?

If port # 8022 is already in use, you can use configure chat in other ports. To change the port used by chat, follow the steps mentioned below;

To change the port number after the Desktop Central server is installed, follow the steps given below:

  1. Stop the Desktop Central server.
  2. Click start
  3. Point to Programs>ManageEngine Desktop Central
  4. Click Stop DesktopCentral
  5. Open the websettings.conf located in <Install_Dir>\DesktopCentral_Server\conf. For
    example, C:\Program Files\DesktopCentral_Server\conf.
  6. Change the port numbers of the following key with the required values:
  7. httpnio.port
  8. Save the file and close it
  9. Start the Desktop Central server.
  10. Click start
  11. Point to Programs>ManageEngine Desktop Central
  12. Click Start DesktopCentral

You can now connect the chat sessions, using the Desktop Central server.

Questions

3.Under which circumstances will chat session fail?

Chat session will fail in the following scenarios;

  • Agent not reachable in the client computer
  • If the user is inactive in the computer
  • If the "chat connection" session is time-out
Questions

4.What will happen when we try to initiate a chat session with the user who is inactive?

You will not be able to chat with the user if the user is offline.

Questions

5.How often will the logged on User names be refreshed?

The list of user names will be updated in three scenarios as specified below.

  • During 90 minutes refresh interval while the agent communicates with the server.
  • During every user log on if it is configured in the User Logon Settings.
  • During every user logoff.
Questions