Desktop and Mobile Device Management software
Frequently asked Questions
This set of Frequently Asked Questions (FAQs) about Desktop Central answers queries that you may have about Desktop Central. Send us an e-mail message, if you have any questions that remain unanswered.
The system requirements for Desktop Central are as follows:
* May grow dynamically depending on the frequency of scanning
Note: While managing more than 1000 computers, it is advised that you install Desktop Central on a Windows 2003 Server Enterprise Edition.
This section gives you information about the software requirements for distribution servers, Desktop Central servers and agents.
Supported Operating Systems
You can install a Desktop Central server, distribution servers and Desktop Central agents on computers which have any of the following supported operating systems installed on them:
Desktop-related Operating Systems
Server-related Operating Systems
Note: Desktop Central can also be installed on virtual computers, running any of the supported operating systems specified above, and terminal clients.
You are required to install any of the following browsers on your computer to run the Desktop Central console:
Note: The screen resolution should be 1024 x 768 pixels or higher.
For more information, see System Requirements.
Desktop Central supports the following operating systems:
Desktop Central has four editions:
For more detailed comparison, refer to the Compare Editions section on our Web site.
No, you do not have to write scripts to use the predefined configurations provided by Desktop Central. You have to select a configuration, specify the required inputs, and deploy it.
Scope of Management is a feature in Desktop Central that is used to specify which computers you can manage using Desktop Central. You can add and manage computers that are from an Active Directory, a workgroup or any other directory service like Novell eDirectory. The computers can either be in the same Local Area Network (LAN) or in a remote location connected through a Virtual Private Network (VPN) connection or through the Internet. For more information, see Defining the Scope of Management.
Desktop Central has predefined configurations available for users and computers. These configurations can be grouped and defined into collections if they are meant for the same user or computer. However, if they are meant for individual users or computers, they have to be defined and deployed individually.
For example if you want to deploy a custom wallpaper to a client computer and prevent the user of that computer from changing it, you will use a collection of the Display and Security Policies configurations for a user. However, if you want to deploy a custom wallpaper to 5 out of 10 client computers and prevent only 2 users from changing the wallpaper, you will have to deploy the Display and Security Policies configurations to the computers, individually.
Configurations are applied during:
For more information, see Windows Configurations.
To access the Desktop Central UI from a remote location, follow the steps given below:
You can now login to the Desktop Central UI.
The Define Target feature is used to identify targets, also called users or computers, to apply configurations to. The targets can be all the users or computers belonging to a site, domain, Organizational Unit (OU) or a group. They can also be a specific user or computer. For more information, see Defining Targets.
10. My free trial expired before I could complete my evaluation of Desktop Central. Can I receive an extension?
Customer satisfaction is our primary goal. During the trial period of 30 days, you can manage an unlimited number of desktops using Desktop Central. After the trial period is over, Desktop Central automatically switches to the free edition using which you can manage only 25 desktops.
However, if your trial period is complete and you want to use the software application to manage more than 25 computers, contact us. You will receive a temporary license with a validity period to suit your requirements. The transition from the free edition of Desktop Central to the temporarily-licensed edition is smooth with no loss of data or configurations.
Desktop Central is licensed on an annual-subscription basis depending on the number of computers you want to manage. You can get the price for a specific number of desktops from our online store. You may also buy a permanent license by paying an one-time fee. Contact us with the following details to get a quote from our sales team:
Desktop Central, with its Web-based interface, enables desktop administrators to access the application from anywhere within a network to complete various tasks; for example, to create configurations. This facilitates easy management of computers without being required to be present in any specific location.
You must open the following ports for effective communication between an agent, the Desktop Central server and a distribution server:
On the computer on which the Desktop Central server is installed
To enable a Desktop Central agent or distribution server to communicate with a Desktop Central server, open the following TCP ports:
Note: All the ports are inbound to the Desktop Central Server. Whereas the data flow would be both the ways inbound and outbound.
On the computer on which the distribution server is installed
To enable communication between a Desktop Central agent and a distribution server, open the following inbound ports:
On the computers on which Desktop Central agents are installed
To enable the Desktop Central server to communicate with the Desktop Central agents (LAN Agents) while completing on-demand tasks, open the following TCP ports:
All the ports mentioned above are default ports used by Desktop Central. You can opt to use your own port numbers. If you use your own port numbers, ensure that you specify the HTTPS ports as mentioned above.
Desktop Central supports MySQL, PGSQL and MS SQL database to store data.
Desktop Central uses the Apache HTTP Server to enable remote access to it's Web console.
16. I have an Internet Information Services (IIS) application installed in my computer. Can I configure the settings in Desktop Central to use this IIS instead of its own?
No, currently Desktop Central does not support ISS.
Yes, you can install a software application when the UAC feature is enabled if you are not required to enter information during installation.
However, if you have to enter information during the installation of a software application, you must create a user configuration without selecting the Run As option. When you use the Run As option in a user configuration, use the Default Administrator account.
18. Will new computers that are added in the domain receive configurations automatically once they check in with desktop Central?
Yes, computers that are newly added in the domain will receive all the deployed configurations automatically when they check in with the Desktop Central Server.
19. Does Desktop Central support Home editions of Windows OS like Windows XP Home, Windows 7 Home Premium?
All the features other than patch management works effectively while using Desktop Central in home edition of windows operating system.
No, We do not accept multiple active directory inputs in Desktop Central at this point of time.
21. How will the Desktop Central agent reach the Distribution Server if the port number used for their communication has been changed?
When the agents of the remote location are unable to contact the Distribution Server, they contact the Desktop Central Server directly during the next 90 minutes refresh interval. They receive the modified port numbers of the Distribution Server and communicates with it henceforth.
Desktop Central has different agents for different locations, for example a local office agent will not be the same as the remote office agent. Similarly every remote office has different agents as well. When you are managing computers one or more remote locations, you can have a defined set of IP ranges for different offices. This enables the Desktop Central Server to identify the agents with respect to the IP range. So whenever a computer is moved from a local office to a remote location, IP scope is used to automatically detect and deploy the respective WAN agent. Desktop Central will check for the change in the IP address periodically and will deploy the appropriate agents whenever a change is detected.
23. What will happen if the agents are unable to reach the Desktop Central Server to report the status after performing any task?
Agents will report the status to the Desktop Central server after performing every task. In case if the Desktop Central Server is not reachable, then the agents will update the status during their subsequent refresh interval.
24.What minimum access requirements are needed if I configure Desktop Central wihtout using a domain admin account? does it ensure that all the features still work?
If you need to configure Desktop Central without using domain admin account, then you need a common user created in all the computers with admin privilege. However you will not be able to install agents automatically and agent installation can be done using a GPO.
Yes, Desktop Central is capable of managing virtual computers.
Every configuration that is applied to computers and users will be applied in the following scenarios:
Let us see few examples:
A configuration is deployed to computers and users, to block USB devices,
If the computer is turned off - This configuration will get applied during the computer start up and the USB access will be blocked.
If the computer is turned on - This configuration will get applied during the next refresh cycle, when the agent communicates with the Desktop Central server. Assuming that a USB device was already plugged in and used in the computer, the access will be denied as soon the configuration gets applied.
If the User has logged off - This configuration will get applied to the user's profile when the user logs on to the computer. So that the particular user will not have permission to access USB devices.
If the User has logged on - This configuration will get applied during the subsequent refresh cycle. Assuming that the user has already plugged in a USB device and has been using the device, the access will be denied after the configuration gets applied.
Download the agent and navigate to the downloaded location using command prompt. For example, if you wanted to download the agent in D drive, execute the below mentioned command.
DesktopCentralAgent.msi TARGETDIR="D:\DesktopCentral_Agent\" REBOOT=ReallySuppress
28. When automatic patch deployment is applied to a OU, and a new computer is added to a OU, will the task pick the newly added computer?
Yes, all the configurations applied to the OU will be automatically applied to the newly added computers.
This is a scheduled task created in the agents. This task runs on the client computer and scheduled every hour to ensure that the agent version is up to date.
No, Desktop Central needs agents to perform any desktop management activity.
No, it is not necessary for all the managed computers to have internet connection. However Desktop Central server would need connection to the internet in order to download the patches and software applications from the respective vendors website.
Yes, Desktop Central can be used to manage computers even if they do not belong to a domain.
You must open the the following ports to use the Remote Control feature:
By default, the Remote Control feature uses a secure connection. These ports have to be opened on the Desktop Central server.
You must open the following ports to use the File Transfer feature during a remote control session:
These ports have to be opened on the computer on which the Desktop Central server is installed.
Yes, you can view multiple monitors of a remote computer simultaneously by using the Remote Control feature. You can switch between monitors using the multi-monitor icon available in the Active X viewer. Viewing multiple monitors simultaneously is currently not supported in a Java viewer. For more information, see How to switch between multiple monitors during a remote session?
You can set the compression level to Fast, when using the Remote Control feature, to improve the page-rendering speed. The bandwidth consumption will be comparatively higher when compared to best compression level, however the page-rendering will be comparatively faster.
When you set the compression level to Fast, the compression ratio is lower, resulting in an increase in the speed of the rendering of the UI. This is recommended when the computer that you are connecting remotely to is in the same LAN as the computer you are connecting from.
When you set the compression level to Best, the compression ratio is higher, resulting in a decrease in the consumption of the bandwidth. However, the rendering of the UI will be comparatively slower. This setting is recommended when the computer that you are connecting to remotely is at a different geographical location.
You can use the Remote Control feature on the following browsers:
Yes, it is possible for multiple users to login remotely to a computer at the same time. However, only one of the users who has logged in can take control. The other users can only view the changes that are being made.
You can lock a keyboard or a mouse to ensure that you can make changes effectively. To lock the remote computers keyboard and mouse, click the Lock Keyboard/Mouse icon from the viewer.
Similarly, you can blacken the monitor of a remote computer when you do not want the user to view the changes that you are making. To blacken the remote monitor, click on the Blacken Monitor icon from the viewer.
When you take a remote session of a virtual computer, you will result in viewing the screen of the physical machine in which the remote session is hosted.
Support for MAC machines are yet to be officially announced, its in the road map.
1. Which type of software repository is recommended for computers in remote location; is it a network share or HTTP share?
We would recommend using a HTTP share as the software repository for computers in the remote location. This would ensure that all the computers can reach the software repository easily.
2. Why must I specify "Run As" when Desktop Central already has the credentials stored under Admin > SoM > Edit Credentials?
"Run As" is the option which is used for the applications that need to be installed as a different User. Since Desktop Central supports Multiple Active Directory domains and work-groups, we need to associate the credential supplied in SoM with the corresponding Domain or work-group. In order to handle such scenarios, Desktop Central gets the additional user name and password for RunAs. However, if "Run As" is not specified then system credentials will be taken by default.
The MSI Root Path is mainly used for the following:
If the MSI file is browsed and chosen then the MSI Root Path is automatically taken. It becomes mandatory only when the MSI file name with network path is manually entered.
Mobile Device Management
The prerequesites for enrolling a mobile device are;
The device that needs to enrolled should be accessible through the internet in order to receive the email with enrollment settings.
The following ports should be opened for managing mobile devices using Desktop Central,
TCP Ports to be opened on the Desktop Central Server:
Note: All the ports are inbound to the Desktop Central Server, whereas the data flow could be in both the directions.
TCP Port to be opened on the WiFi from which the mobile device connects to the internet: (iOS devices)
TCP Ports to be opened on the WiFi from which the mobile device connects to the internet: (Android devices)
Currently we manage mobile devices, using the following software;
"Bring Your Own Device" BYOD being the integral part of Desktop Central MDM, you can ensure the security of corporate data. Whenever any user's personal device is lost, or the employee quits an organisation, administrators can execute security commands like corporate wipe or complete wipe to ensure data security. Hence Desktop Central MDM is a smart choice for every enterprise to manage BYOD.
No, you do not require an apple developer account to manage the iOS devices using Desktop Central.
App store Apps are those which are available in the App store. They can be either paid App or free App. Enterprise Apps, also called as In-House Apps are specially developed and designed for every Enterprise. This is unique and completely owned and distributed by the Enterprise itself.
Administrators need to buy licenses/redemption codes to distribute paid Apps to Groups/Devices. VPP files are specially designed to purchase redemption codes in bulk, so that it can be used while distributing Apps to Groups/Devices.
Desktop Central assures high security through restriction policies. Whenever more than one policy is applied for a same cause, whichever policy provides more security will get applied automatically. For example, assume two restriction policies are assigned to a device, where one is applied to authenticate the usage of camera and the other is to restrict the usage of camera, the policy which assures high security will get applied automatically. So the usage of camera will be restricted in the device.
Corporate wipe is a security command used to wipe data in the device. This security command is mostly used to secure the corporate data from devices, when they are lost. Corporate Wipe is used to remove only the configurations and Apps that has been pushed using Desktop Central and this command will not wipe any personal data of the user. Complete wipe command is used to wipe all in the data in the device, which makes the device as good as a new one.
No, passcode policy that is forced on the mobile device cannot be revoked by the user. Though users can disable passcode settings on their device, users will be forced to set passcode any time the device is unlocked. However if MDM profile is removed from the device the device can no longer be managed by Desktop Central.
While creating policies ensure that you disable the option which allows users to remove the profile. By doing this every policy that is imposed on the device cannot be revoked by the user. However while removing MDM profile from the device all the policies and restrictions will be removed from the device.
'APK' refers to application package file. Android program files are compiled in a package as .apk file, which is used for distributing the apps. When you need to add an android App to the App repository you need to ensure that the android app is in .apk format.
Desktop Central app distribution is designed in such a way that you can only distribute iOS apps to iOS devices and android apps to android devices.
Device Administrator should be enabled in the android mobile device to authenticate Desktop Central Mobile Device Management to perform remote management activities in the device.
Policies and Restrictions which are applied successfully to the managed mobile device is called as imposed policies.
Administrator instructs the users to accept the Policies and Restrictions which are pushed to the device. When the user over rules the policies and restrictions, then those policies and restrictions are called as violated policies.
No, users will be prompted to use their App store user name and password while installing the Apps.
No, you cannot wipe the data from the external memory of the device.
No, license codes used in a device while installing an App cannot be revoked.
Idle timeout before device lock specifies the time allowed for the device before the screen turns off. This is similar to the settings that can be configured in the device Settings>General>auto lock>. Grace period for device lock refers to the time allowed for the user before prompting for a passcode. The screen of the device turns off and when the user slides the arrow to unlock the screen he would be prompted to enter his passcode. This is similar to the settings that can be configured in the device Settings>General>passcode lock>.
Yes, you need internet connection on both the Desktop Central server as well on the managed mobile devices to use Desktop Central MDM.
If the APNs certificate has expired, Apple Push Notification service will not be able to contact the managed mobile devices. Renewing an APNs after expiry is the same as creating new APNs, which means all the devices need to be enrolled again to be managed.
Assume that the APNs expires on 30th of June, you need to ensure that you renew your APNs well before the expiry date and update it in the Desktop Central server. All the managed mobile devices should contact Desktop Central server at least once before 30th of June. If any of the managed mobile device fails to contact the Desktop Central server, then those devices should be enrolled again. Hence we recommend renewing APNs before a month of its expiry.
You can secure corporate data on mobile devices by applying the following restrictions:
These restrictions will help you to secure Corporate data on mobile devices.
Yes, the end user has to enter the Apple ID to install the Apps. When an App is distributed by Desktop Central, the App will be listed in the App Catalog on the mobile device. End user needs to install the App by clicking on the App and proving their Apple ID. If any paid App is distributed to an end user and he installs the App by using his personal Apple ID, then that App cannot be revoked or reused for any other user.
To clear chat history follow the steps mentioned below;
If port # 8022 is already in use, you can use configure chat in other ports. To change the port used by chat, follow the steps mentioned below;
To change the port number after the Desktop Central server is installed, follow the steps given below:
You can now connect the chat sessions, using the Desktop Central server.
Chat session will fail in the following scenarios;
You will not be able to chat with the user if the user is offline.
The list of user names will be updated in three scenarios as specified below.