This feature is available with Cloud Identity Free and Cloud Identity Premium editions. Compare editions
As an administrator, you can see details about computers and Assistant-enabled smart home devices, such as Nest smart displays and speakers, that access your organization’s data through managed user accounts. You can get information about devices that are managed by fundamental management as well as devices that use Google Drive for desktop, endpoint verification, or Enhanced desktop security for Windows. To review your Chrome Enterprise devices, open the Chrome devices list.
See all laptop and desktop devices
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Devices
Mobile & endpoints
- (Optional) To view details about a device, click the device.
Tip: If your organization has many devices, use the filters or search bar to find a specific device.
Note: A device might be listed more than once if it uses more than one management type or if a device under Fundamental management has more than one user session. Devices under Fundamental management are removed from the list after they're inactive for 180 days.
Filter devices by management type
- At the top of the device listing, click Add a filter.
- Select Management Type
- (Optional) To see information about a specific device, click the device.
Learn about device details
You don't see a property if it's not supported for a device.
| Property | Description | Supported devices |
|---|---|---|
| Managed by |
Type of management applied to the device. Values can be:
|
|
| Password status |
Whether the device has a screen lock passcode. Reported only for devices managed with endpoint verification. Note:
|
|
| Encryption status |
Whether the device is encrypted. Reported only for devices managed with endpoint verification. Supported third-party encryption providers: |
|
| First sync |
The date and time the device first synced corporate data. |
|
| Last sync |
The most recent date and time the device synced corporate data. If the device is managed by Enhanced desktop security, a separate entry is shown for the last sync time. |
|
| Recent errors | The number of errors that occurred when settings were pushed to Windows devices during the past 48 hours. | Windows |
| Property | Description | Supported devices |
|---|---|---|
| Device ID |
The ID generated by the Admin console and assigned to the device. The Device ID is not unique. However, you can use it to identify a device along with the device type and user’s email address. Sometimes the Device ID matches the Device resource ID. If a device is recorded more than once, more than one ID might be assigned to it. Example: 35407fa833a25163 |
|
| Serial number |
The serial number of the device. Sometimes, you might also see a device's internal serial number. Not reported for devices with Fundamental management only. Example: ZX1G428WVV, ce012345cdb67c0b089e |
|
| Ownership |
Whether the device is company-owned or the user’s personal device. Possible values: Company owned, User owned |
|
| Type | Device type |
|
| Operating system |
The name of the operating system (OS). |
|
| Model | The name of the device model. Note: For some devices, you only see the device type or OS. |
|
| Host name |
The host name or fully qualified domain name (FQDN) assigned to the device on your network. The value reported depends on how the device is managed:
Host name isn't reported for Windows devices under Fundamental management or with GCPW only. |
|
| Device resource ID |
Unique identifier for the device. Example: x1y23z7a-123a-456b |
|
| Property | Description | Supported devices |
|---|---|---|
| Name | The user’s name. An administrator enters this name when they create the account. |
|
| Primary email | The email address of the managed user account on the device. |
|
| Secondary email | An address where the user can be reached outside of your organization. |
|
| Phone number | The user’s phone number. |
|
| Employee ID | The unique identifier for the employee. |
|
| Manager’s email | The email address of the user’s manager. |
|
| Department | The user’s department. |
|
| Cost center | The user’s cost center. |
|
| GCPW login | Whether the user signed in to their Windows device through Google Credential Provider for Windows. | Windows |
| User account type |
The local administrative permission level the user has on the device:
|
Windows |
| Property | Description | Supported devices |
|---|---|---|
| Cache size | The amount of data stored offline on the device. |
|
| Application Version | The version of Drive for desktop installed on the device. |
|
| First sync | The date and time of first sync with Drive for desktop. |
|
| Last sync | The date and time of last sync with Drive for desktop. |
|
This feature is available with Cloud Identity Premium edition. Compare editions
To report installed apps, the device must have one of the following:
- Enrolled in Windows device management
- Google Credential Provider for Windows (GCPW) version 95.0.4638.50 or later
| Property | Description |
|---|---|
| App name | The app name. |
| Version | The version of the app that's installed on the device. |
| Publisher | The publisher of the app. |
| App type |
The type of app. Possible values:
|
| Install date |
The date and time when the app was first installed, based on the device's time zone. Note: The install date doesn't update when the app updates. Windows app update events aren't available in the Devices audit log. |
These values are reported when you Set up third-party partner integrations.
| Property | Description | Supported devices |
|---|---|---|
| Service | The name of the BeyondCorp Alliance partner. | All managed devices |
| ID | The ID assigned to the device by the partner. | All managed devices |
| Health | A simple health score (Unspecified, Very Good, Good, Neutral, Poor, or Very Poor) provided by the partner. | All managed devices |
| Managed state | If the device is managed by the partner service. Value can be Managed, Unmanaged, or Unspecified. | All managed devices |
| Compliance state | If the device is compliant with the partner service's requirements. Value can be Compliant, Non-compliant, or Unspecified. | All managed devices |
| Asset tags | Tags assigned to the device by the partner, either automatically or by admin configuration. | All managed devices |
Details about certificates assigned to the device. Certificate details are extracted from the certificate when an admin adds the certificate. Reported only for devices with endpoint verification.
| Property | Description |
|---|---|
| Serial number | The certificate’s serial number. |
| Issuer |
The fully distinguished name of the Certificate Authority. |
| Subject | The fully distinguished name of the certificate owner. |
| Fingerprint | A unique identifier of the certificate (SHA-256 hash in unpadded Base64 format). |
| Thumbprint | A unique identifier of the certificate (SHA-1 hash in Hex format). |
| Root CA fingerprint | A unique identifier of the root certificate in the certificate chain (SHA-256 hash in unpadded Base64 format). |
| Validation status | Whether the certificate is valid. Possible values: Validated or Validation failed. |
| Not valid before | The date and time when the certificate becomes valid. |
| Not valid after | The date and time when the certificate is no longer valid. |
| Certificate template | The name of the template. |
Related topics
- Overview: Manage users' computers & smart home devices
- Sign a user out of a managed Google Account
- View mobile device details
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.