(V.2955 and Up)
The General Audit Tool now supports device auditing and limited device management.
(See Granting Additional Access rights also)
Auditing of devices is broken into two areas, Mobile Devices and Chrome OS Devices. Because this area is so new we realize many of our Admins may not be fully familiar with the concepts, with what you can control and with how much you can control. To make these features useful and relevant and more importantly to help increase the security of your estate, we have produced two simple Device Management guides that talk about device configuration and management from the Google perspective. The links to these documents are under the respective device audit icons.
GAT allows you search mobile devices by many common criteria, however of particular
interest are ‘Device Id’ and ‘Status’. Both of these selectors can help you find collections of devices of particular interest. The other selection criteria are as you expect to find in GAT.
The mobile device report has many columns, each sortable in both directions. By default, it is sorted by ‘Last synced’ device. In addition, moving the mouse over any row of the report lets you bring up a selection of actions you can perform on that device. All of the ‘hard actions’, such as ‘Block’ or ‘Wipe’ require confirmation.
The ‘Details’ report will show the general information again and a list of all the applications
running on that Android device. Given the current Google APIs, it is not possible at this stage to individually block single applications.
Chrome OS Device management (and hence auditing) requires an additional Chrome Management License from Google.
GAT also allows you to search Chrome OS device by both ‘id’ and ‘Status’ as well as all the
other common GAT search criteria.
One important point to note is that the user or the Admin sets the value for ‘User’ when setting up the Chrome OS device. We strongly recommend you set it to the User’s email address, that way we can link it to the other ‘User’ audits.
The GAT Chrome OS device report table again supports bi-directional filtering on the columns. Like with the Mobile Audit, moving the mouse over a device row lets you ‘View’ or ‘Edit’ details. With the ‘Edit’ details functionality you can set the device user to be the user’s email address.
View the device details, including ‘MAC Address’.
Edit the device settings to the ‘User’ value to be the email address of a user on your domain, whom you want to be associated with that device.
All reports can be saved to a spreadsheet.
All reports can be scheduled to run at a set period.
All devices can be reported on a ‘per user’ basis in the unique ‘GAT’ user audit.