Chrome ‘Device Usage’ Alerts in GAT Shield

Do you want to track down a missing device? Do you know the serial number? Or know the last person using it? If yes, you can use GAT Shield Device Usage alert to get notified.

How to Configure this Alert.

1.Launch the GAT Shield tool.

2.Enter the Alert Rules section.

3.Select Device Usage from the ‘Add a rule’ drop-down menu.

4.Give the rule a meaningful name. Check the box to activate the rule. Now, enter the user’s email address and/or serial number. If both are entered one of them will take precedence if detected first when the rule is triggered on the device.

5.Check the box Report Screen Capture to take a screenshot of the page they were browsing at the time the rule is fired.

6.Optionally you can take a webcam picture of the person behind the device.

7.There is an option to display a message to the user if you turn ON End user action.

Once the alert is triggered an email is sent to the G Suite Super Admin.

When GAT  Shield receives a signal that the device is active, the admin will receive an email with a screenshot of the page opened, and location on a map where the device is located.
The Device Usage rule will be switched to disabled once the rule is fired to prevent getting multiple alerts for the same user or device.

GAT Device Audits

Auditing of devices is broken into two areas

  1. ChromeOS Devices.
  2. Mobile Devices.

These two auditing areas provide a lot of control to super admins. Admins will have control over who can sync with G Suite cloud services via a mobile device. You can take actions such as blocking a certain mobile device if it’s not approved or verified. These actions can only be taken if Mobile Device Management has been enforced within your G Suite Admin Console.

Chrome OS Device Auditing

With ChromeOS Device auditing you can edit details of enrolled Chrome devices in bulk. You can locate and find a Chrome OS device very quickly and view its details like serial number and last user.

Chrome OS Device management (and hence auditing) requires an additional Chrome Management License from Google.

GAT also allows you to search Chrome OS device by both ‘ID’ and ‘Status’ as well as all the other common GAT search criteria.

One important point to note is that the user or the Admin sets the value for ‘User’ when setting up the Chrome OS device. We strongly recommend you set it to the User’s email address, that way we can link it to the other ‘User’ audits.

When the “eye” icon is selected it shows ChromeOS device details.
Two types of information are displayed

  • General
  • Hardware and OS

View the device details, including ‘MAC Address’.

Edit the device settings to the ‘User’ value to be the email address of a user on your domain, whom you want to be associated with that device.

All reports can be exported to a spreadsheet.

All reports can be scheduled to run at a set period.

How to Create a Report About Devices Not Synced Within the Last 30 days

This report will show us which mobile devices are no longer synced with our domain.

The report will produce a list of mobile devices which have not synced in over 30 days.

On the GAT Home page, select “Mobile Devices”  

select 'mobile devices'

On the top right-hand side of the screen, click on the familiar ‘Apply custom filter’ button.

click on the ‘Apply custom filter’ button.

We select “Last sync” before or equal to the 1st day of the last month.
Schedule the report to run monthly.
The example above shows us a report for all devices that have “Last synced” more than a month ago.
GAT+ will automatically change the date on the next scan next month and every report will give you data for the previous month.

Devices Missing? Or You Just Need to be Told When Someone is On-Line?

GAT Shield has now added a ‘Device Usage’ alert.
An Admin configures the rule with either the device serial number, or the last known user, or both. If GAT+ detects either of these flags, the Admin will immediately receive an email with the device location and a link to a map showing the location and optionally a screen grab and/or a camera shot of who is behind the screen. Optional messages can also be sent to the device.
Once configured this Alert rule is active, once triggered and the alert sent to the Admin the rule is marked ‘Not active’.