Runbooks
Step-by-step guides for the jobs you do most often.
Each runbook is a short checklist for one job. Follow it top to bottom.
Setting devices up
Enrol an Android device
Phones and tablets, using a QR code.
Enrol a Windows device
Laptops and desktops.
Roll out a batch
Preparing many devices at once.
Lock down firmware settings
Stop people changing the BIOS on Windows laptops.
When something goes wrong
Lost or stolen device
What to do in the first hour.
Device is not checking in
Working out why a device has gone quiet.
Fix a non-compliant device
Clearing an alert.
I cannot sign in
Passwords, MFA, and lockouts.
People and devices moving on
Someone is leaving
Closing off access safely.
Hand a device to someone else
Reassigning between people or groups.
Retire a device
Taking a device out of service for good.
Keeping on top of things
Before you start any runbook
- Know who owns the device — the organisation or the person. It changes what you are allowed to erase.
- Have the serial number to hand. It is the fastest way to find a device.
- Remember that every action you take is written to the audit log with your name on it.
