Frequently asked questions
What is the Oneleet Agent?
Section titled “What is the Oneleet Agent?”The Oneleet Agent is a lightweight application powered by osquery that monitors system settings on your devices, such as firewall status, disk encryption, and screen lock. It ensures compliance with security policies and provides insights into device security for your organization.
What data does the Oneleet Agent collect?
Section titled “What data does the Oneleet Agent collect?”Visit the Data collection page to see what data the Oneleet Agent collects.
Where can I download the Oneleet Agent?
Section titled “Where can I download the Oneleet Agent?”Visit the Setup page for instructions on how to download the Oneleet Agent on your device.
Why do I need to install the Oneleet Agent?
Section titled “Why do I need to install the Oneleet Agent?”Installing the Oneleet Agent ensures your device meets the required security and compliance standards. It enables your organization to monitor essential security settings, detect potential vulnerabilities, and respond quickly to risks. Without it, your device may not meet compliance requirements, potentially exposing sensitive data to threats.
Once the Oneleet Agent is running, where can I find it?
Section titled “Once the Oneleet Agent is running, where can I find it?”When running, the Oneleet Agent appears as an icon in your macOS menu bar at the top right of your screen that opens a dropdown menu when clicked. If you started the Oneleet Agent but don’t see the icon in your menu bar, see the I can’t see the Oneleet icon in my menu bar section in our Troubleshooting guide.
To see the status of your device monitors and remediation instructions, click on Open in the dropdown menu:
When running, the Oneleet Agent appears as an icon in your Windows system tray that opens a dropdown menu when right-clicked. Look for it at the bottom right of your screen under the Show hidden icons arrow.
To see the status of your device’s monitors and remediation instructions, click on Open in the dropdown menu:
When running, the Oneleet Agent appears as a clickable Oneleet icon in your Linux desktop panel, which may be located at the top or bottom of your screen (exact location may vary depending on your desktop environment and configuration).
I just updated my settings and a Oneleet Agent monitor is still failing. What should I do?
Section titled “I just updated my settings and a Oneleet Agent monitor is still failing. What should I do?”It can take up to an hour for the Agent to recheck your device’s state and verify if it’s passing or not. If after an hour this doesn’t change, try following the steps in the Troubleshooting guide to resolve any underlying issues.
Why do I keep seeing a sign-in reminder?
Section titled “Why do I keep seeing a sign-in reminder?”The Agent checks hourly whether this device is signed in. If it isn’t, it shows Sign in to Oneleet. Each reminder replaces the previous one instead of adding another notification. Click the reminder to open the Agent and sign in; a successful sign-in clears it.
On macOS, your notification settings control whether the reminder stays on screen until dismissed. Dismissing it does not sign the device in, so it can appear again at the next hourly check.
Does the Oneleet Agent need to be kept up to date?
Section titled “Does the Oneleet Agent need to be kept up to date?”Yes. The Oneleet Agent keeps itself up to date in the background, so most devices need no action. Devices on an agent older than v2.2.0 fail the Oneleet Agent devices aren’t dormant monitor, which reports that the agent is not up to date.
An agent that old predates the background updater and cannot update itself. Reinstall it from the Setup page to bring the device back into support.
Who has access to the data collected by the Oneleet Agent?
Section titled “Who has access to the data collected by the Oneleet Agent?”Only the admin(s) of your organization can view the results of checks that run on your device. Below is a screenshot of what it looks like for your admin(s).
How does Oneleet respect my privacy?
Section titled “How does Oneleet respect my privacy?”Your privacy is our top priority. The Oneleet Agent only collects system state information for security and compliance, such as encryption status and firewall settings. It does not access personal files, browsing history, or other private data. Visit General & privacy for more information.
How do I remove a device from my workspace?
Section titled “How do I remove a device from my workspace?”To remove a device as a workspace admin, open it, select Manage device, choose Delete device…, type delete device, then select Delete device to confirm. Deletion removes the device from your workspace and signs out its Oneleet Agent. Files on the device are not erased.
Before you delete a Mac enrolled in Oneleet MDM, remove it from MDM with Remove from MDM… from the same menu, or wipe it with Wipe device…. A wiped Mac doesn’t check out of MDM, so you can delete it once it confirms the wipe. If it enrolls in MDM again after the wipe, remove it from MDM instead. Delete device stays disabled until then, including when the Mac is archived. See Remove a Mac from MDM.
You can delete a Mac that another MDM manages, such as Jamf or Kandji, right away.
Devices can no longer be archived or unarchived. A device archived earlier stays in your device list with an Archived status. It isn’t monitored, and it doesn’t count toward your compliance statistics, audit scope, or usage. To use it again, delete it and enroll it again.
What happens when a device is deleted?
Section titled “What happens when a device is deleted?”Deleting a device removes it from your workspace and revokes its existing agent credentials. Reconnecting or signing in cannot restore the deleted device record.
Enrolling the device again creates a new device record. Any user can enroll it into a workspace they have access to, including a different workspace, without having the previous device reassigned first.
Devices previously removed from Oneleet have their old agent credentials revoked and need to be enrolled again if they are still in use. Active devices keep their existing record and credentials.