Remote endpoint management means your IT provider can see and look after every laptop your team uses away from the office. An endpoint is a laptop, desktop or other device a person works on. The practical test is short. Can you open a list, find each laptop on it and read a status you understand without calling anyone? If you can’t, that’s the gap to close.
A laptop that never comes into the office is easy to lose sight of. Nobody may see whether it’s healthy, protected or still in use. So problems can sit there until the employee notices and calls. By then you may be fixing something instead of catching it. The fix is boring. It’s a list you can read, and a habit of reading it.
What Does Remote Endpoint Management Cover?
It means your IT provider keeps a connected view of each laptop and can look after it from a distance. The provider can check on a laptop and help with it over the internet, without that laptop coming into the office. What’s covered depends on the tools in use and on what you’ve agreed.
O&O Systems’ Remote Monitoring and Management page says its team tracks servers, workstations and networks around the clock and can manage multiple offices or remote teams under one unified monitoring system.
That sentence describes what the page says the service includes. It doesn’t describe your setup. What applies to your business is something you agree in writing before anything starts, and that written scope is the part to read closely. Ask for that scope in plain words, and ask what sits outside it. No provider can promise that nothing will go wrong.
The page for NIST’s publication on telework, remote access and personal devices says client devices should be secured against expected threats. That includes devices the organization issues and ones people own. The same page says the publication gives advice on creating related security policies. It’s general guidance, not a rule you have to meet. Read it that way, and a laptop at someone’s house is part of the picture, not an exception to it.
What Should You Be Able to See on Each Laptop?
Ask your provider for a list of every laptop, each with a short status line you can read. The status line is the useful part. What it can show depends on the tools in use, so ask what yours reports. Lines like these are worth asking for by name.
- Who the laptop is assigned to. A device with nobody’s name on it is the one to chase first.
- Whether it has checked in, and when it last did. A laptop that’s gone quiet may be switched off or sitting in a drawer.
- Whether protection software is running, not only installed.
- Whether updates are up to date.
- Whether encryption is on.
- Basic health, such as free disk space. A full disk can cause trouble that looks like something else.
CISA’s Cyber Essentials page tells leaders to learn what is on their network. It says to maintain inventories of hardware and software assets, so you know what is in play and at risk from attack. Among the actions it lists to take with IT, that page names automatic updates for operating systems and third-party software. It also names security configurations for all hardware and software assets. It’s guidance for business leaders, not a rule.
A list like that is an inventory. O&O Systems’ IT Asset Management page says the service gives a clear view of all IT assets, from hardware to software, in one system that’s easy to manage. That’s the shape of the thing to ask for: one place to look, instead of an answer pieced together by email each time you ask. Ask whether remote laptops appear on the same list as the ones in the office.
A list is only useful while it matches reality. Keeping that record current is a job of its own, and it’s covered in why an inventory is only as good as its last update.
If encryption is one of your status lines, switching it on is a separate piece of work. That part is covered in turning on encryption across company laptops.
What Can Be Fixed Without Touching the Laptop?
Some routine work can happen over the internet. The Remote Monitoring and Management page lists quick fixes applied remotely, which it says reduces downtime and delays. That page also says routine tasks like updates, disk cleanups and performance checks are handled automatically. What your own agreement covers is worth checking.
A remote tool has limits. It needs something at the other end that’s awake and connected. If a laptop won’t power on, nothing can reach it. The same goes for a hardware fault, or a laptop that can’t get online at all. Those cases can need someone with hands on the machine, or a spare laptop while that one is out of action.
So ask three plain questions. Which problems can your provider handle over the internet? Which ones need the laptop in hand? And how does the employee find out which one applies? That last question matters more than it sounds. An employee who doesn’t know what to expect may wait, and waiting can let a problem grow.
What Changes When the Laptop Belongs to the Employee?
It changes what your business may install on that laptop and what it may see. The work still matters. NIST’s page covers client devices used for telework and remote access, and it names organization-issued and personal devices alike. So a personal laptop doing company work isn’t outside the question.
Decide this device by device, and put the decision in writing. Does the provider’s tool go on a personal laptop at all? What may it see: device health, or personal files too? And what happens to it when the employee leaves? Write down the answer you land on, even when it’s a no. What applies to privacy is for your own adviser to decide.
Where you can, keep company work on company laptops. It gives your provider less to sort out.
Who Should Hold the Keys to the Remote Tool?
Keep it to as few people as the work needs. A remote tool may be able to reach into every laptop on the list, so who holds it matters. CISA’s Cyber Essentials page lists granting access and admin permissions based on need-to-know and least privilege. Ask your provider how it decides who gets in and who doesn’t.
So ask your provider to name who can use the remote tool on your laptops, what they can do with it and what gets recorded. Put those answers in the agreement, along with what the provider monitors. Then revisit it when staff change on either side. A written answer outlasts the person who gave it. No arrangement can promise that nothing will go wrong.
Frequently Asked Questions About Remote Endpoint Management
What is an endpoint?
An endpoint is a device a person works on. A laptop is one. So is a desktop at someone’s house, or another device your team uses to do its job. The word covers the thing in front of the employee, rather than the network it connects to. Phones and tablets can count too, depending on how your provider defines the word.
Is remote endpoint management the same as remote support?
They overlap, but they aren’t the same thing. Support can start when someone calls with a problem. Management is the ongoing watching and upkeep that happens before that call, so fewer problems reach it. A provider may offer both under one agreement. If your only contact comes after something breaks, that’s support. Ask which parts of your arrangement are watching, and which parts are waiting for the phone to ring.
Do remote laptops ever need to come into the office?
Sometimes. Routine upkeep can run over the internet, and the Remote Monitoring and Management page says routine tasks like updates and disk cleanups are handled automatically. But a hardware fault can’t be fixed that way, and a laptop that can’t reach the internet can’t be reached at all. Ask your provider how those cases get handled, and who the employee calls when a laptop goes dark. Agree on it in advance.
Who should read the laptop report?
You should. An owner or operations leader ought to be able to read the status lines without a translator. A report you need translated isn’t doing its job. If a line isn’t clear, ask your provider to explain it in plain words or change the wording. Also ask who reviews the list and what keeps it refreshed.
Does O&O Systems manage the laptops a remote team uses?
The Remote Monitoring and Management page says the team can manage multiple offices or remote teams under one unified monitoring system. The Managed IT and Help Desk page says the team supports desktops and laptops, cloud apps and mobile devices. What that would look like for your business is a conversation, not a given. Start by describing the laptops you have and where they sit. It helps to know who has what before that conversation.
Start With the List of Laptops and What It Shows
Ask for the list and its status lines before you add more remote laptops. While the list is short, a gap stands out. Then keep reading it. A list nobody opens is just a file. And write the answers you get into the agreement, so they outlast a change of staff on either side.
If you want help working out what that list should show, contact O&O Systems about managing your remote laptops to talk through remote endpoint management for the laptops your team uses away from the office.