The full endpoint management suite - live PC details and processes, screen-time, security posture, remote support, maintenance, services, asset management, commands, Active Directory, browser control, schedules, snapshots, live preview, wallpaper push and full activity / event logs.
20 features
A complete hardware and OS inventory for each device - make, model, serial, CPU, RAM, disk layout, BIOS, network adapters, Windows edition and build, agent version and last check-in - so operators can identify and audit every endpoint at a glance.
See the real-time list of running processes on a device with owner, CPU and memory usage, and remotely end a rogue or hung process without disturbing the user at the keyboard.
Track daily active-usage and per-application time on each PC, with trends over time - ideal for spotting idle machines, enforcing focus policies and giving end users a daily usage report card.
A consolidated endpoint security posture view - Microsoft Defender / third-party AV and EDR health, real-time protection status, BitLocker encryption state, firewall profiles and pending security actions - all in one panel.
Remote housekeeping tools: disk cleanup, temp-file purge, disk-health (SMART) and low-space early warnings, restore-point creation and general tune-up actions to keep fleets healthy without a site visit.
View and control Windows services on the device - start, stop, and change start-up type - with the agent handling TrustedInstaller-owned services safely so operators can fix service-related issues remotely.
First-party remote control with no third-party relay - view and take control of the desktop, chat with the user, and transfer files, with every session logged for audit. Built into CtrlOne, not a bolt-on.
Operator-entered procurement and lifecycle records the agent can't auto-collect - purchase date, vendor, cost, warranty expiry, assigned user, location and asset tag - so each device carries its full lifecycle history.
Queue remote commands to a device - restart, shutdown, lock, apply policy, run maintenance and more - with delivery tracking so operators know exactly which actions reached the endpoint.
Surface each device's domain and Active Directory context - domain membership, organisational unit, logged-on domain user and group data - to line up CtrlOne management with your existing directory.
A first-party desktop console (WebView2) that runs on the managed PC itself, letting on-site admins view status and apply policy locally - including offline via the local agent bridge - without opening the cloud console.
Live, per-device browser actions - set the homepage, push allow/block URL lists, force SafeSearch, enable kiosk mode, apply DNS filtering and wipe browsing data - applied to Chrome, Edge and Firefox on demand.
Fleet-wide and per-device security enforcement - roll out and verify security restriction bundles across many endpoints from a single page, with per-device scoping so each toggle lands on the right machine.
Time-based restriction windows that auto-apply and auto-restore - block camera, internet, recorders or any policy on a daily or recurring schedule, with a full activity trail of every automatic transition.
On-demand and scheduled screen captures from the endpoint, stored per device and tenant-scoped, so operators can visually verify what was on screen at a point in time for support or compliance.
A near-real-time stream of the device's screen so operators can watch what's happening live - useful for support triage, monitoring shared kiosks and confirming a user's issue without taking control.
Push a desktop wallpaper or on-screen watermark to a device remotely - live to the signed-in user's session where possible - for branding, classroom identification or on-screen policy notices.
A per-user activity feed showing sign-ins, application launches, policy events and notable actions on the PC, giving operators a human-readable timeline of what happened on each endpoint.
An append-only history of the device's activity - policy applies, restores, blocks and agent events - mirrored durably on the endpoint and surfaced in the console so nothing is lost across reboots or log rotation.
Read the Windows Event Log entries collected from the device - system, application and security channels - so operators can diagnose crashes, errors and security events without remoting into the machine.