> ## Documentation Index > Fetch the complete documentation index at: https://docs.xpander.ai/llms.txt > Use this file to discover all available pages before exploring further. # Devices and Desktop policy > Admins see every computer signed in to Omni Desktop and revoke any of them, and set what Omni Desktop may do for the whole organization and per group. A new organization starts with everything on. Two Platform pages under **Agents** govern Omni Desktop: **Devices** and **Desktop policy**. They appear once Omni Desktop is available for your organization. Who may view them, change the policy and revoke a laptop follows your organization's [access policies](https://docs.xpander.ai/resources/security-compliance/access-control.md). ## Devices **Devices** lists every computer signed in to Omni Desktop: its name, its system (macOS, Windows or Linux) and version, the member, the app version, when it was last seen, and whether it is **Online** now. Search by computer or member, or show only **Online now**. **Revoke** disconnects a computer at once: its owner is signed out of Omni Desktop on it, and agents lose access to its folders. The app on it shows **Mac removed**. Nothing on the computer is deleted. To use it again, the member signs in again and it is added as a new computer. A member who leaves the organization has all their computers revoked. One member can have up to 20 computers connected at a time. ![Devices page listing three computers, each with its system and version, member, app version, last seen and Online or Offline status](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/admin-devices.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=16b9336fedd7fba3e156e570dc6dc761) Platform > Agents > Devices. Shown with sample data. ## Desktop policy **Desktop policy** sets the most Omni Desktop may do. The **Every member** row is the organization default: it applies to every member, and opens in a panel with every setting below. A new organization starts with everything on, so members can use Omni Desktop as soon as it is available; turn off what you want to keep closed. | Setting | Options | Default | What it controls | | - | - | - | - | | **Omni Desktop** | On, off | On | Whether members can sign in to the app and let agents work on their computer. Off disconnects every computer it applies to at once. | | **Local files** | None, Read only, Read and write | Read and write | What agents may do in folders a member trusts. **Read only** makes every trusted folder read only. | | **Shell** | On, off | On | Whether agents may run commands on the computer, inside the [sandbox](https://docs.xpander.ai/desktop/shell.md). | | **Shell can reach the network** | On, off | On | Whether those commands may download packages and call web services. Off keeps every command on the computer. | | **App automation** | On, off | On | Whether commands may drive other apps with AppleScript. macOS still asks once per app. | | **Move to cloud** | On, off | On | Whether members may [move a conversation](https://docs.xpander.ai/desktop/move-to-cloud.md), with its folders, to the cloud. | | **Bring work back** | On, off | On | Whether members may bring a conversation's cloud files back to the computer, choosing file by file. | | **Browser control** | On, off | On | Whether agents may drive the [Omni browser](https://docs.xpander.ai/desktop/browser.md), a separate browser on the computer, never the member's own. Each member allows it per chat, and can take over or stop it at any time. | | **Computer control** | On, off | On | Whether agents may see the screen and use the mouse and keyboard on a Mac. Each member allows it per chat, and can stop it at any time. See [Computer control](https://docs.xpander.ai/desktop/computer-control.md). | | **Limit agents in browsers, terminals and banking apps** | On, off | Off | With it on, agents only look at browsers and banking apps, and click without typing in terminals and code editors. Needs **Computer control** on. | | **Keep screenshots** | On, off | On | Whether screenshots agents take on the computer show in the chat's activity. Off, agents still see them, but they are not kept. | | **When the computer is offline** | Ask, Wait for the computer, Continue in the cloud | Ask | What a task that needs the computer does when it is asleep or turned off. See [Offline and reconnect](https://docs.xpander.ai/desktop/offline.md). | ![Every member panel with switches for Omni Desktop, Shell, Shell can reach the network, App automation, Move to cloud, Bring work back, Browser control, Computer control, Limit agents in browsers, terminals and banking apps, and Keep screenshots, Local files set to Read and write, and When the computer is offline set to Ask](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/admin-desktop-policy-panel.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=1edd1d233d0da48ec61c2cc57b2d45f2) Every member: the organization default for a new organization. Shown with sample data. Members can turn any of these off for their own computer in the app, never on beyond what you set. See [Your settings and the policy](https://docs.xpander.ai/desktop/your-controls.md). ### Group overrides **Group overrides** give a group's members more than the organization default. Choose **Add group override**, pick the group, set its values and **Save**. Anything the default already turns on shows as on, and locked, in every group. A member in several groups gets the most each of their groups allows; when their groups pick different offline behaviors, the app asks. **Remove override** returns the group's members to the organization default. ![Desktop policy page with Add group override, an Every member row and an Engineering group override row, each with a summary of its settings and its status](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/admin-desktop-policy.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=67cc2c6e9d3b344e38ed7b4f59b787e3) Platform > Agents > Desktop policy: the organization default and a group override. Shown with sample data. A saved change reaches every connected computer while it runs; nobody needs to restart the app. If xpander cannot read a member's policy, for example during an outage, it treats every switch as off until it can. ## What is recorded Every sign-in to the app, every file or shell action an agent takes on a computer (the action, the path, the outcome and the duration, never file content), every screen action (where it landed, never what was typed or seen), every site the Omni browser opened (the site only), every move to the cloud or back, and every scheduled task linked to or unlinked from a computer is recorded in the [audit log](https://docs.xpander.ai/use/agents/audit.md). This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.