Skip to main content
Two Platform pages under Agents govern Omni Desktop: Devices and Desktop policy. They appear once Omni Desktop is available for your organization. Who may view them, change the policy and revoke a laptop follows your organization’s access policies.

Devices

Devices lists every computer signed in to Omni Desktop: its name, its system (macOS, Windows or Linux) and version, the member, the app version, when it was last seen, and whether it is Online now. Search by computer or member, or show only Online now. Revoke disconnects a computer at once: its owner is signed out of Omni Desktop on it, and agents lose access to its folders. The app on it shows Mac removed. Nothing on the computer is deleted. To use it again, the member signs in again and it is added as a new computer. A member who leaves the organization has all their computers revoked. One member can have up to 20 computers connected at a time.
Devices page listing three computers, each with its system and version, member, app version, last seen and Online or Offline status

Platform > Agents > Devices. Shown with sample data.

Desktop policy

Desktop policy sets the most Omni Desktop may do. The Every member row is the organization default: it applies to every member, and opens in a panel with every setting below. A new organization starts with everything on, so members can use Omni Desktop as soon as it is available; turn off what you want to keep closed.
Every member panel with switches for Omni Desktop, Shell, Shell can reach the network, App automation, Move to cloud, Bring work back, Browser control, Computer control, Limit agents in browsers, terminals and banking apps, and Keep screenshots, Local files set to Read and write, and When the computer is offline set to Ask

Every member: the organization default for a new organization. Shown with sample data.

Members can turn any of these off for their own computer in the app, never on beyond what you set. See Your settings and the policy.

Group overrides

Group overrides give a group’s members more than the organization default. Choose Add group override, pick the group, set its values and Save. Anything the default already turns on shows as on, and locked, in every group. A member in several groups gets the most each of their groups allows; when their groups pick different offline behaviors, the app asks. Remove override returns the group’s members to the organization default.
Desktop policy page with Add group override, an Every member row and an Engineering group override row, each with a summary of its settings and its status

Platform > Agents > Desktop policy: the organization default and a group override. Shown with sample data.

A saved change reaches every connected computer while it runs; nobody needs to restart the app. If xpander cannot read a member’s policy, for example during an outage, it treats every switch as off until it can.

What is recorded

Every sign-in to the app, every file or shell action an agent takes on a computer (the action, the path, the outcome and the duration, never file content), every screen action (where it landed, never what was typed or seen), every site the Omni browser opened (the site only), every move to the cloud or back, and every scheduled task linked to or unlinked from a computer is recorded in the audit log.