Deploying SDM Jobs

Once Shared Device Mode (SDM) is enabled in Account Settings and both Device and User profiles have been created and mapped, deploy the Shared Device Mode (SDM) job to enforce the configuration on your target Windows devices.

Deploying Shared Device Mode Jobs

You can enable or disable Shared Device Mode (SDM) on target Windows devices or device groups using static jobs. Alternatively, you can use a dynamic job to disable SDM directly on individual devices.

Method 1: Create and Apply a Static Job

1. Navigate to SureMDM Console > Jobs > New Job > Windows > Shared Device Mode (SDM).
2. In the configuration window, specify the required settings:

Field	Configuration & Description
Job Name	Enter a unique name for the job .
Action Type	Select the operational state to enforce: • Enable Shared Device Mode: Activates SDM on the device. Once deployed, the SureMDM Agent evaluates local user sign-ins and dynamically applies mapped SDM User Profiles upon authentication. • Disable Shared Device Mode: Turns off SDM on the device and removes active SDM profiles.
Select Profile	(Required only when disabling SDM) Select a standard Device Management Profile to automatically apply once SDM is deactivated.

3. Select Save. The job will appear in the Jobs List.
4. Return to the Home tab and select the target Windows device(s) or device group(s).
5. Select Apply from the top toolbar to launch the Apply Job/Profile To Device prompt.
6. Select your created SDM job and click Apply.

Method 2: Disable SDM Using a Dynamic Job

To disable Shared Device Mode directly on a specific Windows device:

1. Navigate to Home > Device Grid and select the target Windows device.
2. Select More > Shared Device Mode (SDM) from the action menu.
3. (Optional) Configure the required Profile by selecting a standard Device Management Profile to apply after SDM is deactivated..
4. Click Apply to push the dynamic job immediately.

Device Monitoring & Activity Tracking

SureMDM provides real-time visibility into active user sessions and historical sign-in audit logs for all SDM-enabled devices.

Device Grid Indicators

When Shared Device Mode is active, the main device console grid updates with the following indicators:

• Shared Device User Name: Displays the username of the currently signed-in SureIdP user in real time. If the device is offline during user switching, the SureMDM Agent queues the login event and updates the console upon the next connection.
• Enrollment Mode: Reflects Dual Enrollment (Shared Device Mode) when SDM is active. When SDM is disabled, this reverts to Dual Enrolled.
• System Tag: Automatically attaches the system tag Shared_Device_Mode_Win (SDM) to the device record.

User Accounts & SDM Activity Interface

To view real-time and historical user session logs:

1. Select an SDM-enabled device from the Device Grid.
2. Access User Accounts dynamic job using either of the following methods:
   • From the Device Info Panel, click User Accounts.
   • Alternatively, select the device and click on User Accounts dynamic job.
3. Navigate to Shared Device Mode tab.
4. Use the dual-tab interface within the Shared Device Mode tab to review user activity and session history: