MSPControl’s Devices section (under Settings) is powered by Autopilot and provides a unified platform to manage Windows endpoints—desktops and servers—across your entire deployment. This suite of features includes:
Devices – A comprehensive list of all managed endpoints, with health indicators, remote actions, and filtering options.
Device Details – An in-depth view of each endpoint’s hardware, OS, security posture, notes, and more.
Device Map – A geographical representation of endpoints, allowing you to see their locations and statuses on a map.
Device Apps – A consolidated software inventory, showing which applications are installed and how many devices have each app.
Together, these tools enable administrators to monitor, troubleshoot, and maintain Windows machines efficiently and securely from a central MSPControl interface.
The main Devices page displays a table of all Autopilot-managed Windows machines. Each row typically includes:
UserName / Name – The user account associated with the device (e.g., “George Khoury”) plus a device name (e.g., “OTFX06”). Clicking the user name filters for all that customer’s devices; clicking the device name opens its details.
Friendly Name – A custom label (e.g., “epineda,” “1000 Island”) for quick identification.
Current User – The Windows user currently logged in (or last known user).
Status – Online or Offline, with a tooltip showing the last check-in time if offline.
Operating System – Edition and version of Windows (e.g., Windows 10 Pro, Windows 11, Windows Server 2019).
Template Type – A specific configuration template (e.g., “Workstation,” “Property,” “Enterprise”).
Agent Version – The Autopilot agent version installed on the device.
Antivirus – Whether AV is installed and up to date (green for good, red for missing or disabled).
Firewall – Indicates if the Windows Firewall is enabled or disabled.
Updates – Whether the device has missing Windows updates (green for fully updated, orange/red for pending updates).
Connect – A button to initiate a remote session (RDP, remote console) if supported.
Filters at the top let you refine the list by All Hosted Orgs, Online Only, All Locations, or a search term to find specific endpoints.
Next to each device, you may see icons signifying extra info or statuses:
Azure AD – Device is joined to Azure Active Directory.
Location/Organization – A label like “Coronado Condo” or “Engineering.”
Purview Information Protection – Indicates data-protection policies are active.
Unsigned Drivers – Shows any hardware drivers not signed by a trusted authority.
Intune Status – Device is Intune-joined, possibly “Not Compliant” if failing policy checks.
Low Space Warning – Disk usage is nearing capacity (hover for free space details).
Missing Updates – Hover to see which patches are needed.
Above the device list, you’ll find:
Download Report
– Download Report: Export the current device list or selected entries (CSV, PDF, etc.).
– Missing Updates: Generate a report focusing on devices with pending updates.
– Local Users: Show local user accounts on selected devices (if supported).
Download Agent
Retrieves the Autopilot agent installer for adding new devices to MSPControl.
Actions
After selecting devices, you can:
Repair Settings – Reset certain Autopilot configurations.
Reboot Device – Issue a remote restart command.
Delete Device – Remove it from MSPControl’s inventory.
Install Updates – Trigger Windows updates on selected devices.
Update Agent – Push the latest Autopilot agent version.
Unmap / Remap Cloud Folders – Adjust mapped cloud folders if configured.
Reinstall ScreenConnect Client – Re-deploy remote access client for ScreenConnect.
Send Logs – Collect and send Autopilot logs for troubleshooting.
Reset PIP Settings – Reset Purview Information Protection settings.
Run Windows Disk Cleanup – Automate disk cleanup tasks on the device.
Apply
Confirms the current filter selection (e.g., Online Only).
All(…) Dropdown
Shows total devices and specific statuses (e.g., “Offline Devices,” “Firewall not Optimal”) for quick filtering.
Install Agent – Run the Autopilot agent installer on each Windows endpoint. Once connected, the device appears in the Devices list.
Review Status – Check OS, antivirus, firewall, updates, and other icons for compliance.
Take Action – Use bulk Actions or remote connect features to address issues like missing updates or offline devices.
Monitor Over Time – Regularly revisit the Devices page to handle new alerts, maintain software currency, and track security metrics.
Clicking a device name opens a Device Details view with multiple tabs that offer deep insight into system hardware, software, security, and more.
The General tab presents a high-level overview:
Location, device type, antivirus/firewall status, agent info, memory/disk usage charts.
Azure/Intune/MDM details, pending reboot flags, geolocation map (if configured).
Compliance status, quick stats (e.g., installed software count).
Subtabs beneath General detail the hardware and OS environment:
Operating System – OS name, version, build, install date.
CPU – Processor model, core count, speed, usage graphs.
Memory – RAM capacity, usage, paging file info.
BIOS – Firmware version, release date, manufacturer.
TPM – Trusted Platform Module presence, version, readiness.
Motherboard – Model, product ID, serial number.
Monitor – Detected display(s), screen resolution, GPU details.
System Settings – OS configs, environment variables, domain/workgroup info.
Network – Adapters, IPs, DNS, Wi-Fi connections.
Disk Information – Physical/Logical disk data, free space, usage charts.
Software – Installed apps, discovered packages.
Firewall – Extended firewall configurations.
Updates – Windows update history, pending patches.
Settings – Advanced system or registry settings, AD sync options, device ownership.
Location – IP-based geolocation or assigned site info.
Attach text-based documentation, reminders, or logs specific to this device. You can tag notes (e.g., “Maintenance,” “Warranty”) and require authorization for sensitive data.
Upload or link images (e.g., rack photos, barcodes, error screenshots). Albums (e.g., “Servers,” “Infrastructure”) help categorize them.
Store local admin or service account credentials, with optional authorization to protect sensitive passwords.
Manage SSL or other certificates installed on the device, tracking expiration dates and subject names.
If using MSPControl’s remote access delegation, manage who can remotely connect to the device. Add or remove user principals to enforce least privilege for RDP or other remote sessions.
The Device Map offers a geographical overview of all Autopilot-managed endpoints, using IP-based geolocation or manually assigned location data. Each marker on the map represents a device, color-coded by status (e.g., Online vs. Offline).
Hover & Click – Hover over a marker to see device details (friendly name, last check-in). Clicking might open the device’s details page.
Filters – Limit the map to All Hosted Orgs, Online Only, or a specific Location to isolate certain endpoints.
Map Controls – Zoom, pan, or switch map layers (depending on integration with Azure Maps or similar).
This view is especially useful for multi-site deployments, providing an at-a-glance understanding of device distribution and highlighting any offline or critical endpoints.
The Device Apps page consolidates a list of software discovered across your Autopilot-managed devices. Instead of opening each device’s details, you can see app versions, vendors, and how many devices have a given app.
App Name / Versions – Titles like “Microsoft Visual C++ 2015-2019 Redistributable,” plus the specific version(s).
Vendor – Publisher or manufacturer (e.g., Microsoft Corporation, NVIDIA Corporation).
Device Count – Number of endpoints with that app installed. Clicking the count may reveal which specific devices have it.
Filtering & Sorting – A dropdown to filter or sort by Name, Versions, or Vendor, making it easy to locate particular software.
Export to Excel – Generate a spreadsheet or CSV for audits, licensing checks, or compliance reports.
By reviewing Device Apps, you can quickly identify outdated or potentially insecure software and plan updates or removals across your environment.
Across the Devices, Device Details, Device Map, and Device Apps sections, consider the following:
Maintain Clear Friendly Names – Use consistent naming conventions (e.g., “Finance-Laptop01”) so you can quickly identify machines in large environments.
Investigate Offline Devices – If a device hasn’t checked in, follow up to ensure it’s not powered off or disconnected indefinitely.
Leverage Security Indicators – Pay close attention to antivirus, firewall, and Purview/Intune statuses (red or orange icons) to address vulnerabilities promptly.
Stay Current with Updates – Use Missing Updates reports and Install Updates actions to keep endpoints patched and secure.
Utilize Filters & Actions – The All(…) dropdown, Download Report, and Actions menu let you quickly isolate problem devices or software and resolve issues in bulk.
Document Thoroughly – Add Notes to log hardware changes, Photos for visual references, Passwords for local credentials, and Certificates for SSL tracking.
Control Remote Access – Manage Remote Access privileges carefully to enforce least privilege and maintain security.
Monitor Device Map Regularly – Quickly spot offline or at-risk devices in specific locations, especially for multi-tenant or geographically dispersed deployments.
Check Device Apps for Compliance – Identify outdated or unapproved software across the environment and plan updates or removals.
By leveraging the Devices menu and its submenus—Device Details, Device Map, and Device Apps—MSPControl Autopilot empowers administrators to maintain a secure, up-to-date, and well-documented Windows endpoint fleet. This holistic approach to endpoint management ensures streamlined support, consistent compliance, and effective resource utilization across the entire organization.
No credit card required for free, limited license.