Chrome ‘Device Usage’ Alerts in GAT Shield

Do you want to track down a missing device? Do you know the serial number? Or know the last person using it? If yes, you can use GAT Shield Device Usage alert to get notified.

How to Configure this Alert.

1.Launch the GAT Shield tool.

2.Enter the Alert Rules section.

3.Select Device Usage from the ‘Add a rule’ drop-down menu.

4.Give the rule a meaningful name. Check the box to activate the rule. Now, enter the user’s email address and/or serial number. If both are entered one of them will take precedence if detected first when the rule is triggered on the device.

5.Check the box Report Screen Capture to take a screenshot of the page they were browsing at the time the rule is fired.

6.Optionally you can take a webcam picture of the person behind the device.

7.There is an option to display a message to the user if you turn ON End user action.

Once the alert is triggered an email is sent to the G Suite Super Admin.

When GAT  Shield receives a signal that the device is active, the admin will receive an email with a screenshot of the page opened, and location on a map where the device is located.
The Device Usage rule will be switched to disabled once the rule is fired to prevent getting multiple alerts for the same user or device.

Detailed Reporting Control for Mobile Devices

GAT+ now has much more detailed reporting and control for Mobile Devices.
Admins can quick assess the status of any mobile device attached to their G Suite Domain.

Admins can quick assess the status of any mobile device attached to their G Suite Domain.

GAT Device Audits

Auditing of devices is broken into two areas

  1. ChromeOS Devices.
  2. Mobile Devices.

These two auditing areas provide a lot of control to super admins. Admins will have control over who can sync with G Suite cloud services via a mobile device. You can take actions such as blocking a certain mobile device if it’s not approved or verified. These actions can only be taken if Mobile Device Management has been enforced within your G Suite Admin Console.

Chrome OS Device Auditing

With ChromeOS Device auditing you can edit details of enrolled Chrome devices in bulk. You can locate and find a Chrome OS device very quickly and view its details like serial number and last user.

Chrome OS Device management (and hence auditing) requires an additional Chrome Management License from Google.

GAT also allows you to search Chrome OS device by both ‘ID’ and ‘Status’ as well as all the other common GAT search criteria.

One important point to note is that the user or the Admin sets the value for ‘User’ when setting up the Chrome OS device. We strongly recommend you set it to the User’s email address, that way we can link it to the other ‘User’ audits.

When the “eye” icon is selected it shows ChromeOS device details.
Two types of information are displayed

  • General
  • Hardware and OS

View the device details, including ‘MAC Address’.

Edit the device settings to the ‘User’ value to be the email address of a user on your domain, whom you want to be associated with that device.

All reports can be exported to a spreadsheet.

All reports can be scheduled to run at a set period.

Manage Your Organization’s Mobile Devices

GAT+ provides a simple interface to view and audit the mobile devices which are synced with your G Suite domain. You can easily find a device by using the custom filter options and you can take actions if a device is missing or lost.

Admins can take the following actions if Mobile Device Management features are enabled in the G Suite admin console.

Once this functionality is enabled users who wish to sign into their G Suite accounts have to install and sign into the Device Policy app.

Blocking device – To stop a device from synchronizing G Suite data with a user account, you can block it. G Suite data that was already synced to the device is still available on it.

Steps to Block a device:

End User Behaviour:

The user’s device will receive the following message on their Device Policy app.

They will no longer be able to sync with G Suite apps such as Gmail, Drive etc. If they attempt to use these services they will be redirected to the above message informing them their device has been blocked.

Wipe Account – To remove all G Suite data from a device, you wipe the account from the device.

The user will no longer be able to view data relating to your G Suite services on their device.

Deletes all of your organization’s data from the device upon the next sync and changes the device’s status to Account Wiped.

Remote Wipe Device – Removes all data from the device and changes the device’s status to Device Wiped.

Note: Recommended for company-owned devices only.

Personal Android device without a work profile – All corporate and personal apps and data are removed. The device is reset to its factory settings.

If the device has an SD card*, data is removed from that, too.

If the device has a work profile which is provided by a G Suite EMM (Enterprise Mobility Management) supplier/partner then the device will not reset to its factory settings when the device is wiped.

Delete Device – Removes the device from the list

Doesn’t remove your organization’s data from the device. To remove this data, wipe the account or device instead.