Hexnode UEM

Wi-Fi, VPN, and proxy profile deployment across all supported platforms including Linux and ChromeOS.

Exchange ActiveSync, POP, and IMAP email account configuration with S/MIME support across platforms.

Broad restriction coverage across all supported platforms with granular control over hardware and software features.

Custom profile deployment across platforms with OEMConfig, custom XML, and mobileconfig support.

Standout kiosk capabilities across all platforms with Hexnode Kiosk Browser, single-app, and multi-app modes.

Complete ADE integration with Apple Business Manager for automated iOS and macOS enrollment.

Full Android Zero-Touch and Samsung KME integration for automated corporate device enrollment.

Windows Autopilot integration available for automated Windows enrollment and provisioning.

QR code, email, SMS enrollment invitations and CSV-based bulk device import for mass provisioning.

User self-enrollment via link/QR with Android Work Profile and privacy-focused BYOD enrollment options.

App Store, Play Store, and Microsoft Store app deployment with mandatory and optional installation modes.

Enterprise app deployment across platforms with IPA, APK, MSI upload and forced installation.

ABM/VPP integration with device-based and user-based licensing for iOS and macOS apps.

Managed app configuration with AppConfig for iOS and managed configurations for Android Enterprise.

Self-service app catalog with Hexnode UEM app for on-demand application installation.

Compliance policies for password, encryption, OS version, and app blacklist/whitelist enforcement.

Compliance-based access control for email and corporate resources via gateway integration.

Encryption enforcement for FileVault and BitLocker with basic key management.

Certificate deployment with SCEP support and manual upload for identity and root certificates.

Jailbreak/root detection, app blacklisting, and compliance-driven threat response actions.

iOS and macOS OS update scheduling with deferral; Android and Windows OS update policies.

Basic patch management with OS update policies; third-party patching limited.

iOS and macOS update deferral settings; basic scheduling for update deployment windows.

Remote wipe, corporate wipe, and device unenrollment with basic lifecycle tracking.

Device inventory with purchase and warranty information; basic lifecycle reporting.

Admin dashboard with device health, compliance metrics, and enrollment status visualisations.

Report builder with predefined and custom reports; scheduled delivery via email.

Hardware and software inventory with app management and storage usage tracking.

Activity log with admin actions, device commands, and policy change tracking.

Real-time device tracking with location history, battery monitoring, and network status.

Remote lock, wipe, and restart with custom lock messages and selective data erasure.

Remote view for Android and iOS; desktop remote control via third-party integration.

Remote script execution for macOS and Windows with custom script deployment.

User self-service portal for device info, location tracking, and app installation requests.

Content management for file distribution; basic remote file push to managed devices.

Device groups with basic dynamic membership based on OS, ownership, and custom tags.

Tag-based device organisation with manual and dynamic tag assignment for policy scoping.

Geofencing with location tracking, boundary alerts, and location-based policy enforcement.

Time-based restrictions and scheduled policy deployment with configurable windows.

Policy priority ordering with basic conflict resolution for overlapping configurations.

Entra ID user sync with group-based device assignment and basic directory integration.

Okta and Google Workspace integration for user sync and SSO authentication.

Active Directory integration with user sync and group-based policy assignment.

Certificate deployment with SCEP support for network authentication scenarios.

Basic user-device mapping with manual assignment and user-based grouping.

REST API with basic device and user management endpoints.

Webhook integration for event notifications; basic automation trigger support.

Basic syslog forwarding for event log integration with SIEM tools.

Basic ITSM integration via API; ServiceNow and Zendesk connectivity available.

Custom script execution for macOS and Windows with script deployment profiles.