Repository navigation
Command
Find Macs or mobile devices and send them MDM commands, one device or many at once. ✏️ Sends commands to devices.
-
Connect to Jamf Pro and click Connect →. The tool checks Read Computers and Read Mobile Devices. Then click Continue → (or Proceed Anyway →).
-
Choose a Device Type: Mac Computers or Mobile Devices.
-
Choose a Search Mode:
-
By Name: search by name, serial number or username. Wildcards work, for example
MBP*or*john*. - By Group: pick a smart or static group (Filter groups… helps), then click Load Members →.
Devices you've used recently are listed under Recent, so you can pick them again with one click.
-
By Name: search by name, serial number or username. Wildcards work, for example
-
Tick the devices you want (All and None help with long lists). Click a device's ⓘ button to see its details. Then click Choose Command →.
-
Pick a command and fill in any extra fields (see below), then click Review & Send →.
-
Check the target list and click Send Command. The results screen shows the devices the command was queued for, and any it couldn't be sent to. Search Again keeps your connection, and Start Over goes back to the beginning.
Nothing is sent until you click Send Command on the review screen.
| Command | What it does |
|---|---|
| Blank Push | Sends a blank push to make the Mac check in with MDM |
| Update Inventory | Asks the Mac to send an updated inventory |
| Restart | Restarts the Mac immediately |
| Shut Down | Shuts the Mac down immediately |
| Enable Remote Desktop / Disable Remote Desktop | Turns Screen Sharing (Apple Remote Desktop) on or off |
| Remove MDM | Removes MDM management from the Mac |
| Command | What it does |
|---|---|
| Blank Push | Sends a blank push to make the device check in with MDM |
| Update Inventory | Asks the device to send an updated inventory |
| Restart Device | Restarts the device |
| Lock Device | Locks the device, with an optional message and an optional 6-digit PIN |
| Erase Device | Erases all content and settings, with an optional 6-digit PIN. Marked in red, with a warning that it can't be undone |
| Clear Passcode | Clears the device passcode (supervised devices only) |
| Enable Lost Mode | Puts the device in Lost Mode, with an optional message and phone number |
| Disable Lost Mode | Takes the device out of Lost Mode |
| Play Lost Mode Sound | Plays a sound on a device that's in Lost Mode |
- Commands are queued by Jamf Pro. A device that's offline gets the command the next time it checks in. Use MDM Command Queue to see whether a Mac's commands completed or failed.
- Device Logs has a Send Command → button that opens Command with that device already selected.
- Erase Device and Remove MDM can't be undone from Magic Toolbox. Check the target list carefully.
Read Computers (Mac Computers) or Read Mobile Devices (Mobile Devices). For By Group, Read Smart Computer Groups and Read Static Computer Groups, or the mobile device equivalents.
To send commands, the account also needs the Jamf Pro privilege for each command you use. These are under Jamf Pro Server Actions in the API role, for example Send Computer Remote Command to Lock Computer or Send Mobile Device Lost Mode Command. The permission screen doesn't check these. A missing one makes the command fail for that device.
Magic Toolbox © MDM Magic · mdmmagic.au · Releases · Report an issue
Getting started
Deployment
Jamf Pro Tools
- Clone
- Compare
- Wipe
- Restore
- Disable
- Create
- Command
- Device Logs
- Policy Scope
- Pre-stage Audit
- LAPS
- MDM Command Queue
- Self Service Descriptions
Audit & Health Check
- Profile Conflicts
- Smart Group Audit
- Account Audit
- Cert & Token Expiry
- Unused
- Network Check
- Script Auditor
- Fleet Health
- Extension Attributes
- Self Service Audit
Profile Builders
- PPPC Analyser
- System Extensions
- Web Content Filter
- Notifications
- Login Item Profiles
- Profile Signer
- Profile Unsigner
- Profile Inspector
- Uploading Profiles
Content & Packages
Reference