Agent Phone Home: New Senturo Policy Secures Offline Devices Automatically

Automation shouldn’t stop when a device goes offline—and with Senturo, it doesn’t.

We’re excited to introduce a powerful new addition to Senturo’s Security Policy Automation suite: the Agent Phone Home policy.

This new policy type gives IT admins a simple but effective way to protect devices that have been offline for an extended period, reinforcing Senturo’s mission to provide real-time, automated mobile device security across all platforms.

Key Takeaways

• Agent Phone Home is a new Security Policy Automation type that triggers a remote lock when a device goes offline for a configurable period (e.g., 7 days).
• The policy works across Windows, macOS, and Chrome OS and requires no network connection on the device to enforce it when it reconnects.
• Available now to all Senturo customers as part of the Security Policy Automation add-on, with no additional cost.

What Is the Agent Phone Home Policy?

The Agent Phone Home policy enables organizations to define a maximum allowable period during which a device can remain offline. If a device hasn’t contacted Senturo servers within the specified time window—say, 7 days—the system will automatically trigger a remote lock action. This ensures the device is no longer accessible, even if it’s disconnected from the network.

It’s a smart safety net for real-world scenarios like:

• Lost or stolen devices that never reconnect
• Devices in storage that should remain secured
• Assets issued to remote workers who leave without returning equipment

Real-World Use Cases Across Industries

• K-12 & Higher Education: Lock student laptops that go offline after semester breaks or if loaned devices aren't returned. Pairs with existing K-12 fleet management workflows in Senturo.
• Healthcare: Ensure devices holding PHI are locked if they leave a facility and don't check in after a defined period, supporting HIPAA incident response requirements.
• Finance & Legal: Add an offline contingency for devices used in highly regulated environments where data access must be controlled even when offline

Why It Matters

• Offline protection: Locks devices even if they’re not connected to Wi-Fi. The lock is queued and executes the moment the device connects to any network, so staying offline is not a workaround.
• Policy-based automation: Reduces manual oversight by automating security actions based on inactivity. Once deployed, the policy runs silently with no dashboard monitoring or ticket filing required.
• Works across OS: Fully compatible with Windows, macOS, and Chrome OS devices. One policy covers mixed-OS fleets without separate configuration per platform.
• Easy to configure: Set it and forget it—once deployed, the policy enforces itself silently in the background. Inactivity thresholds are configurable per device group so different teams can have different windows.

How to Get Started

The Agent Phone Home policy is available now as part of Senturo’s Security Policy Automation features. You can enable it through your admin dashboard and set your preferred inactivity thresholds. Currently, the policy supports remote lock as the enforcement action, with additional actions planned in future releases.

Step-by-Step Setup

• Open your Senturo admin dashboard and navigate to Security Policy Automation.
• Create a new policy and select Agent Phone Home as the policy type.
• Set your preferred inactivity threshold (for example, 7 days).
• Assign the policy to the relevant device group or organizational unit.
• Save. The policy enforces itself with no further action required.

The current enforcement action is remote lock. Additional enforcement actions are planned for future releases. Administrators can unlock affected devices from the dashboard using the one-click unlock feature.

FAQs

Which operating systems does Agent Phone Home support?

‍Agent Phone Home is compatible with Windows, macOS, and ChromeOS devices enrolled in Senturo. iOS and Android support is planned for a future release.

What happens if a device stays offline and never reconnects?

‍The lock action is queued. The moment the device connects to any network, Senturo executes the lock. A device cannot avoid enforcement by remaining offline indefinitely.

Can I set different inactivity thresholds for different device groups?

‍Yes. You can create multiple Agent Phone Home policies with different thresholds and assign each to a different device group or organizational unit.

Does this work alongside Jamf, Intune, or Google Admin?

‍Yes. Agent Phone Home operates through the Senturo agent and is independent of your MDM's native lock capabilities. It adds an offline contingency layer on top of your existing MDM workflows without changing any MDM policies.

Is Agent Phone Home included in my current Senturo plan?

‍Agent Phone Home is part of the Security Policy Automation add-on. Existing subscribers with that add-on can enable it now at no additional cost.

‍