Add and Manage Users at Device Level

In contrast to mobile phones, personal computers (PCs) are structured as user-based systems, with user accounts used for logging in and logging off from the devices. The IT Admins require the capability to remotely add and manage these accounts on the devices.

Although we have PowerShell scripts available to regulate various aspects of user account management, the process involved in creation of a user account may pose a challenge for an average IT administrator. Furthermore, the inconvenience arises from the need to publish a PowerShell script to a profile or group. To mitigate these issues, Scalefusion now provides efficient utilities at the device level, enabling IT administrators to directly and quickly add users as well as take other actions on them.

This document explains the process of adding and managing users on Scalefusion managed Windows Devices, at device level.

Before You Begin

1. Device should be enrolled with Scalefusion.
2. Scalefusion MDM Agent app's (agent app for Windows) latest version should be installed on the devices.
3. Supported Windows OS: Windows 7, 8.1, 10, 11 (Pro, Business, Enterprise, Education and Home editions).
4. Users should be subscribed to Enterprise or Business Plan.

Adding User(s)

1. Login to Scalefusion Dashboard and navigate to Devices Section
2. Click on View Details under the device for which you want to add users. This will take you to the Device Details page.
3. Scroll down and click on User Accounts tab.
4. To add user, click on Add User.
   
5. The Add User dialog box will be displayed. Here, enter the following:
   1. User Name: Enter Username
   2. Password: Enter password. Minimum password length should be 8 characters
   3. Group: Select the group to which this user belongs, either Standard or Admin
   4. Hide Account from Logon list: Checking this box will hide the username at the time of login.
   5. Set this account to Autologin: If this flag is checked, the user will get logged in on the device automatically. To use this feature, user account should be created without password. Else, this feature will remain disabled. Accounts with password cannot be set to autologin.
   6. Click on Add. The user will be created and displayed on Dashboard.

      If a user with the same name already exists, a message will be displayed asking you to choose a different name.

      Usernames with more than 20 characters will be truncated upto 20th character with 00, 01, 02 and so on appended in case of similar usernames.
      

Managing Users

Clicking on Add creates the user on the device.

On the Dashboard, the user is displayed with following details:

1. User Name: The user account name.
2. Account Type: Account Type can be any of the following:
   1. Local 
   2. Managed Local (managed local is shown if there is an email value): User accounts created through KeyCard 
   3. Global Admin: Accounts created from Utilities > Global Settings > Windows Settings
   4. Managed Admin: Service accounts created by Scalefusion MDM agent for using features like KeyCard, Just-In-Time Admin
3. Group: The group the user belongs to.
4. Last Logged In: The date and time at which the user last logged in to the device.
5. Last Logged Out: The date and time at which the user last logged out of the device.

   Last Logged In/Out will display as NA if it is a fresh enrolled device

   
   
6. Actions: Few actions can be taken on the users added. These are explained in next section.

Actions on Users

When you add a user from dashboard, an hourglass will be displayed in front of the username, under actions indicating it is not yet acknowledged by the agent. In other words, it is in the process of creation.

Once acknowledged, following actions can be performed:

1. View User Account Information: Click on the info (i) icon under Actions.
   This will bring up a new window displaying all the information on the user. Following details for the user will be displayed:
   1. Username
   2. SID
   3. Group Type: Displays Standard, Admin
   4. Domain Name
   5. Host Name
   6. Account Type: Account Type can be any of the following:
      1. Local 
      2. Managed Local (managed local is shown if there is an email value): User accounts created through KeyCard 
      3. Global Admin: Accounts created from Utilities > Global Settings > Windows Settings
      4. Managed Admin: Service accounts created by Scalefusion MDM agent for using features like KeyCard, Just-In-Time Admin
   7. Is Enrolled User
   8. Is Hidden
   9. Is Autologin Enabled
      Note: The above screenshot is for a local user. If device is connected via Entra (formerly Azure AD), domain name will be displayed accordingly.
2. Reset Password: Allows you to reset the password for the user account. To reset,
   1. Click on the key icon.
      
   2. This will open the Password Details dialog box. From here, you can view the current password and reset the password if required.
   3. Click on the eye icon to view the current password.
   4. Please enter new password in the password field and click on Reset.

      If passcode policy is set, please ensure that the new password meets the policy requirements. Same applies while adding a new user also.

      
      
      
3. Edit Group: Use this option to change the group to which the user belongs, from Standard to Admin or vice-versa. To edit,
   1. Click on the Change Group icon.
      
   2. In the dialog box that opens, select the group from the drop-down and click on Change Group.
4. Delete User: Deletes the user from the device. Deleting the user will remove all the user specific data and apps like user specific downloads, photos or documents and more specifically the user directory. Please note it will not delete files or apps stored at a device level or common location shared across users. Clicking on Delete will bring up a confirmation dialog box. Click on Delete button to delete the user.
   

   You cannot edit a group or delete the user accounts:

   a. You have enrolled the device with.
   b. Admin account created (if any) from global settings.
5. Hide/Unhide User Account: This will hide the user account. To hide, click on the eye icon. This will open a confirmation box, click Okand the account will not be visible on the device. Any account once hidden can be unhidden also with the same process.
   
   All the actions will be executed on device when it is:
   -On
   -Online
   -Not in sleep mode

   
   

Important notes on Actions

Actions are allowed or disallowed depending on the Account Type. For example,

• Managed Admin: No action allowed.
• Managed Local: Reset Passwords will not get displayed.
• Global Admin: Group change and deleting user will be hidden

Add users in Bulk

Users can also be added in bulk from Device Groups / User Groups section. To do so,

1. On Scalefusion Dashboard, navigate to Groups > Device / User Groups > Devices
2. Click on Actions > General > Add a new User
3. Under this, there will be two options. Click on any one:
   1. Include Subgroups: The user account is added to devices in subgroups also.
   2. Only this Group: The user account is created on devices belonging to this group only, excluding subgroups.
4. In the dialog box that opens, select the Platform on which you want to add the user:
   1. All macOS devices
   2. All Windows Devices
   3. Check both if you want to add to both (a) and (b) above
   4. Enter rest of the details (same as in Add Users dialog box explained in above section)
5. Click on Add
6. A confirmation dialog box will be displayed. Click on Ok. Please note the user will not be added to devices on which Scalefusion MDM agent is not installed.

Reports

1. From Device Inventory Report, you can fetch the following information on Users:
   1. Total User Accounts
   2. Total Admin Accounts
   3. Total Standard Accounts
2. For information on users across all devices, you can use Device User Accounts report.