Secure. Manage. Empower.
Sign in to manage your Windows endpoints.
Secure administrator access
Overview of system health and operations
Manage endpoints by office, factory, depot, marketing office, and site
| Hostname | Username | Local IP | Current Location | OS / Build | Last Communication | ||
|---|---|---|---|---|---|---|---|
| Loading devices... | |||||||
Loading latest device details...
Retrieving the latest endpoint snapshot.
Current device readiness
Checking live endpoint signals.
Hardware and ownership
Latest agent inventory
Protection signals
Drive utilization
Items needing review
Latest endpoint events
Effective device controls
| Application | Version | Status | Last Verified |
|---|---|---|---|
| Visaka ERP Client | 4.8.2 | Installed | 2 min ago |
| Visaka VPN | 3.2.1 | Installed | 2 min ago |
| Microsoft 365 Apps | Current Channel | Updated | 18 min ago |
| Endpoint Security Baseline | 2026.05 | Applied | 2 min ago |
| Required KB | Description | Severity | Microsoft Catalog |
|---|---|---|---|
| Loading | Waiting for the latest Windows Update scan | Pending | Pending |
| KB | Description | Installed On | Installed By |
|---|---|---|---|
| Loading | Waiting for endpoint KB inventory | Pending | Visaka Agent |
Agent check-in completed 2 min ago
Policy sync completed 12 min ago
Defender scan completed 34 min ago
Windows update scan completed 1 hr ago
Collect Logs requested by Visaka Admin Today
Sync Policies requested by Visaka Admin Today
Restart action cancelled Yesterday
Remote Lock tested 28 May
| Type | Name | Size | Age | Actions |
|---|---|---|---|---|
| Evidence | Waiting for agent evidence | - | Now | View |
Real Windows wipe is not available in the current Visaka Agent. No wipe command will be sent to this device.
Approved requests are captured as blocked wipe plans by the agent.
| Request ID | Status | Execution | Requested By | Reason | Age |
|---|---|---|---|---|---|
| No wipe approvals | - | - | - | - | Now |
Required controls before any destructive executor can be considered.
Ready Approval request and audit trail are implemented
Ready Agent receives approved wipe and writes a blocked wipe plan
Pending RBAC plus MFA approval gate
Pending Two-person approval workflow
Pending Recovery key and evidence backup validation
Blocked Agent-side destructive wipe executor is not implemented
Pending enterprise step before escrow can become verified.
1Create enablement plan and maintenance approval.
2Generate script, then run it manually in the approved maintenance window.
3Run Post-Encryption Verify to refresh BitLocker and escrow evidence.
Signed approval, evidence, and agent outcome events.
| Age | Actor | Action | Result | Hash |
|---|---|---|---|---|
| No wipe audit events | - | - | - | - |
Create, assign, and verify endpoint controls
Configure controls, assignments, and agent delivery.
Securely connect, support, and audit managed endpoints
Search, filter, and connect to managed endpoints
| Hostname | Username | Location | RustDesk ID | Last Seen | Connect |
|---|---|---|---|---|---|
| Loading remote devices... | |||||
Operator, role, endpoint user, connection duration, status, and evidence
| Started | Operator / Source | Role | Endpoint User | Device | Ended | Duration | Status | Evidence |
|---|---|---|---|---|---|---|---|---|
| Loading audited remote sessions... | ||||||||
ravi.kumar@visaka.com approved access / Visaka native session
MFA Admin verified
Consent User approved
Gateway Visaka remote gateway pending
Audit Recording events to Visaka Endpoint Manager
PS C:\Users\ravi.kumar> hostname
VSK-HYD-LAP-0241
PS C:\Users\ravi.kumar> Get-MpComputerStatus | Select AMServiceEnabled, RealTimeProtectionEnabled
AMServiceEnabled: True / RealTimeProtectionEnabled: True
PS C:\Users\ravi.kumar> _
| Name | Location | Size | Modified | Action |
|---|---|---|---|---|
| VisakaAgent.log | C:\ProgramData\VisakaMDM\Logs | 2.4 MB | Today | Download |
| WindowsUpdate.log | C:\Windows\Logs | 8.1 MB | Today | Download |
| ERPClient.config | C:\Program Files\Visaka | 18 KB | Yesterday | View |
Admin MFA completed 10:30 AM
User consent approved by ravi.kumar@visaka.com 10:31 AM
Remote desktop gateway design added to Visaka roadmap 10:31 AM
Terminal tab opened for diagnostics 10:39 AM
Fleet health, release deployment, service recovery, and evidence
Live endpoint service and release posture
| Hostname | Username | Location | Version | Heartbeat | Service | Update | Last result | |
|---|---|---|---|---|---|---|---|---|
| Loading live agent devices... | ||||||||
Latest agent installation and service failures
No failure evidence loaded
Update, service, policy sync, health check, and evidence results
| Hostname | Username | Type | Status | Requested | Completed | Result | Evidence |
|---|---|---|---|---|---|---|---|
| Loading agent command history... | |||||||
Discover, deploy, restart, and prove compliance across every location
Choose a location to target its online Windows devices
| Location | Devices | Missing Critical | Drivers | Restart | Last Scan | Action |
|---|---|---|---|---|---|---|
| Loading live location patch status... | ||||||
| Hostname | User | Location | Current KB | Pending Update | Severity | Install Status | Restart | Evidence | |
|---|---|---|---|---|---|---|---|---|---|
| Loading live patch inventory... | |||||||||
Optional hardware updates reported by Windows Update
| Device | Location | Driver | Status | Last Scan | |
|---|---|---|---|---|---|
| Loading driver inventory... | |||||
Devices requiring a one-time restart to finish updates
| Device | User | Location | Restart | Latest Result |
|---|---|---|---|---|
| Loading restart requirements... | ||||
Scans, installs, restarts, results, and downloadable evidence
| Type | Device | Status | Summary | Created | Evidence |
|---|---|---|---|---|---|
| Loading patch activity... | |||||
Fleet security posture
Live endpoint controls, product versions, security KB posture, and remediation evidence.
| Hostname | Username | Trellix Agent | Trellix DLP | TPM | Malware | Security Patches | Last Check-in |
|---|---|---|---|---|---|---|---|
| Loading live device security data... | |||||||
Selected device findings
Choose a row to inspect failed and unreported controls.
| Control | Status | Observed value | Evidence age | Recommended action |
|---|---|---|---|---|
| No device selected. | ||||
Trellix threat telemetry
Select a device to inspect malware evidence.
| Source | Threat | File | Severity | Detected | Action | Status | Evidence |
|---|---|---|---|---|---|---|---|
| No device selected. | |||||||
Monitor critical security, device, patch, agent, and remote-access events
| Alert | Device | Source | Severity | Status | Owner | Last Seen | Action | |
|---|---|---|---|---|---|---|---|---|
| BitLocker disabled on OS drive | VSK-PLANT-DESK-0072 | Compliance | Critical | Open | Unassigned | 15 min ago | Acknowledge | |
| Security patch failed | VSK-PLANT-DESK-0072 | Patch | Critical | Open | Patch Team | 18 min ago | Retry | |
| Agent heartbeat stale | VSK-PUN-DESK-0099 | Agent | Warning | Assigned | Helpdesk L2 | 1 hour ago | Wake / Scan | |
| Remote session consent pending | VSK-SLS-LAP-0403 | Remote Access | Warning | Waiting | IT Support | 9 min ago | Notify User | |
| Defender definition updated | VSK-HYD-LAP-0241 | Security | Info | Resolved | System | 2 min ago | View |
BitLocker disabled on OS drive
1 Assign to endpoint security owner
2 Start BitLocker remediation
3 Collect agent logs after encryption
4 Close with evidence after compliance pass
Recent state changes, assignments, remediation, and closure events
BitLocker disabled alert opened for VSK-PLANT-DESK-0072 15 min ago
Patch failure correlated with same device risk 18 min ago
Agent heartbeat stale assigned to Helpdesk L2 1 hour ago
Defender definition alert resolved automatically 2 min ago
Acknowledge, assign ownership, and queue remediation for the selected alert.
Alert ID ALT-2026-0512
Device VSK-PLANT-DESK-0072
Owner Endpoint Security
Next SLA 30 min
Operations / Reporting
One live report for endpoint identity, network, agent, Trellix, operating system, and patch status.
Live endpoint data from PostgreSQL and the latest agent check-in
| System Name | Serial Number | User Login Name | Mail ID | OS Version | IP + MAC | Location | Agent Status / Date & Time | Trellix Agent | Latest Security Patch / KB |
|---|---|---|---|---|---|---|---|---|---|
| Loading endpoint inventory... | |||||||||
Completed reports and downloadable evidence
| Report | Requested By | Scope | Generated | Status | Actions |
|---|---|---|---|---|---|
| Loading report history... | |||||
Configure and generate
Live endpoint inventory and security patch status.
Protected deliveryDownloads require an authenticated admin session and are recorded in Audit Logs.
Recurring report delivery configurations
| Report | Frequency | Recipients | Next Run | Last Result | Actions |
|---|---|---|---|---|---|
| Loading report schedules... | |||||
Create dashboard users, assign one clear access role, and review login security
Users who can sign in to Endpoint Manager
| User | Access Role | Status | MFA | Last Login | Source | Action |
|---|---|---|---|---|---|---|
| Loading access users... | ||||||
Set login details and choose one access role.
Trace every privileged admin action across remote access, patches, roles, reports, compliance, and devices
Showing the latest 14 days
| Event | Date & Time | Target | Administrator | Result | Evidence |
|---|---|---|---|---|---|
| Loading production audit events... | |||||
Select an event to inspect it
Select an event from the timeline.
Prepare signed audit evidence for security review or external audit.
Events 842
Privileged actions 76
Integrity Verified
Format PDF + CSV
Manage employees, device ownership, locations, and policy assignment
| Employee | Department | Location | Assigned Devices | Device Group | Device Status | Last Device Check-in | Actions | |
|---|---|---|---|---|---|---|---|---|
| Loading employees... | ||||||||
Employee and device ownership details
Add an employee directory record. Dashboard access is managed separately in Roles & Permissions.
Source Employee directory
Device Not assigned
Location Selected site
Dashboard access Not granted
Organize users and Windows devices by site, department, risk, and policy deployment scope
All Windows 10/11 laptops assigned to Hyderabad employees.
Shared shop-floor Windows kiosks with restricted access and maintenance windows.
Finance users and encrypted laptops with stricter BitLocker and DLP policies.
Devices with missing encryption, stale agent heartbeat, or pending restart.
Hyderabad Windows Fleet
On Windows Security Baseline
On BitLocker Required
On Patch Ring - Hyderabad
Review Restart window exception
Dynamic rules used to keep device and user groups current
Include devices where site equals Hyderabad 486 matched
Include OS version Windows 10 Pro or Windows 11 Pro 486 matched
Exclude retired and wiped devices 17 excluded
Apply patch ring based on department override 6 policies
Block USB storage and website domains on assigned Windows devices through the Visaka Agent
Default group for all Windows devices. Blocks removable USB storage read/write/execute access on endpoint devices.
Add a domain or full link. The agent blocks the domain through the Windows hosts file.
Blocks Facebook, Instagram, X, TikTok, LinkedIn, Snapchat, and YouTube. WhatsApp remains allowed.
Select a connected user or endpoint to remove from URL/USB control or grant temporary USB access.
Loading access control policies Ready
Shows who received USB or web access, command status, and endpoint evidence reported by the agent
Loading access-control activity Ready
Define a dynamic group for policy targeting and reporting.
Matched Devices 0
Matched Users 0
Policy Scope Users and devices
Sync Mode Manual
Software inventory, deployment, restrictions, and endpoint application actions
| Application | Catalog Target | Publisher | Devices | Compliance | Last Scan | Actions |
|---|---|---|---|---|---|---|
| Loading software inventory... | ||||||
Loading application details...
Deployment, update, restriction, and uninstall results returned by agents
| Hostname | Username | Type | Application | Status | Requested | Completed | Result | Evidence |
|---|---|---|---|---|---|---|---|---|
| Loading application management logs... | ||||||||
Select a catalog application and deploy it to a device.
Target Devices 0
Online Source WinGet
Detection Rule WinGet exit code
Evidence AppDeployments
Protected apps and company-owned Android devices
Retrieving enrollment snapshot...
-- managed-- setup required
-- compliant-- need attention
| Device | Ownership | Status | Last communication |
|---|---|---|---|
| Loading recent activity... | |||
Loading records...
Latest 500 audit records and 500 actions retained. Older records may lack results.
| Time | Action | Actor | Target | Status | Result | Details |
|---|---|---|---|---|---|---|
| Loading records... | ||||||
Visible icons do not block other installed apps. Mobile data cannot be switched on automatically by stock Headwind.
Reporting unavailable
Last reported version, not verified enforcement.
Latest check-in per app enrollment
| Device | Application | Reported version | Target version | Last check-in | Report state |
|---|
| Application | Package ID | Target version | Enrollments | Version report | Release | Action |
|---|---|---|---|---|---|---|
| Loading applications... | ||||||
| Version | File | Channel | Published | Status | Action |
|---|
Set the approved target, then use Deploy update to push it to eligible enrolled phones.
| Reported version | Enrollments | Comparison |
|---|
Versions absent from the release catalog are not classified as older.
Not configured
Microsoft mail and collaboration integration has not been connected to this pilot.
Physical location is collected only from enrolled company-owned devices after disclosure. BYOD application enrollments are excluded.
| Device | Permission | Latest coordinates | Accuracy | Captured | Status | Action |
|---|---|---|---|---|---|---|
| Loading company-owned locations... | ||||||
Newest enrollment per physical phone
Loading company-owned devices.
| Device | Serial | Enrolled | Last check-in | History | Action |
|---|---|---|---|---|---|
| No Headwind devices loaded | |||||
Latest check-in per enrolled application
| Device / Enrollment | Mail ID | Application | OS | Policy report | Last check-in | Status | Action | |
|---|---|---|---|---|---|---|---|---|
| Loading mobile devices... | ||||||||
Policy report reflects the last reported version, not verified enforcement.
Production configuration and service health
Configure endpoint agent behavior, updates, and polling.
Configure password resets, invitations, alerts, and reports.
Configure the RustDesk self-hosted gateway.
Production tenant identity and operating defaults.
Administrative protection and destructive-action controls.
Patch, driver, and restart schedules are policy controlled.
Production history and evidence retention.
Production service connections used by Endpoint Manager.
Recent production configuration activity
| Changed By | Setting | Time | Result |
|---|---|---|---|
| System | Loading audit activity | Just now | Recorded |