Basic Coverage to All Desktop Computers with Fundamental Device Management- G Suite

In G Suite services there are different types of computer device management. Depending on a computer’s management type, you may be able to perform some actions on the computer, such as remotely signing a user out or blocking the computer from accessing corporate data.

Fundamental Device Management: It is supported on Chrome OS, Apple Mac, Linux, and Microsoft Windows. In the Google Admin console, as an administrator, you can see when a user signs in to the managed account on a computer and the basic details of that device. If needed, as an administrator you can remotely sign out a user from a computer. The user doesn’t need to install anything on the computer. 

Now in all desktop devices that log into G Suite, will get fundamental device management by default. This means that when a user is going to log into G Suite through any browser on a Windows, Mac, Chrome, or Linux device, the device will be registered with endpoint management. This will be done automatically upon login and this does not require any other user actions or software to be installed on that device.

When a device is registered with fundamental device management, admins can see the device type, operating system, first sync time, and last sync time in the Admin console panel. As an administrator, you can also sign out the user from that device. This feature provides the basic benefits of device management without additional costs or requiring installation of application or agents.

Only admin will be impacted by these features. Base-Level security is provided by Fundamental device management to every desktop device that accesses G Suite data. This device data collected can help admins make more informed security and policy decisions. It can make admins more alert on how to manage the devices in their organization. The uses of this feature are:

• Admin will get a clear picture of all devices that accessed corporate data.

• Admin will analyze device access in the organization through reports and the security centre by using more comprehensive data. For example, you can use it to identify devices that require OS updates.

• You can take remedial action to remotely sign out a user when a device is lost, stolen, or compromised.

Fundamental device management provides device information without apps or agents.

When fundamental device management is enabled, the admin will get information about a limited set of device properties like device type, device model, OS version, first sync, and last sync.

This will be visible in two places in the Admin console:

• The devices list found at Admin console > Device management > Devices > Endpoints.

• The audit section will be found at Admin console > Reporting > Audit > Devices.

Fundamental device management is used to be an agentless, lightweight information collection tool. Its goal is to provide a basic data set, which can help admins make some decisions and add some controls to devices accessing corporate data.