
Key takeaways
- An enrollment code works once and expires after 1 day.
- Each device shows as Online, Idle, Offline or Disconnected, with its operating system, agent version and last seen time.
- Revoking a device stops it reporting immediately, and existing activity data is retained.
When people work on their own computers in different places, you need a reliable answer to three questions: which devices are connected, which are reporting and how do you disconnect one that should not be.
Enrolling a device
From the Devices page or an employee's profile, issue an enrollment code. The employee installs the desktop agent and enters the code. Each code can be used once and expires after 1 day, so a leaked code cannot enroll another machine for long. Codes cannot be issued for inactive or unlicensed employees.
The agent supports Windows (Windows 10 or later, 64-bit), macOS (macOS 12 Monterey or later, Apple silicon and Intel), or Linux (any x86_64 distribution with a desktop session). It checks for updates when it starts and installs them automatically.
Knowing a device's status
The Devices page lists each device with its operating system, agent version, last seen time and status: Online, Idle, Offline or Disconnected. Filter by status, or search by device name, operating system or id. A device that stops responding is shown as offline, and administrators are notified if it stays silent for over 2 hours while its employee is punched in.
Revoking access
When a device is lost, stolen or no longer needed, revoke it. It stops reporting right away, its open sessions are closed and the agent returns to the enrollment screen. Existing activity data is retained, and the device must be re-enrolled to reconnect.
Re-enrolling an employee also retires their older offline devices automatically, so stale devices do not pile up. See device management.