One app on every company computer. Managed from the console.
The TotalHeal desktop app for macOS and Windows becomes your organisation’s agent when the computer is enrolled. These features are live in the current desktop release; each lists the product that switches it on.
TotalHeal Business window
The same desktop app opens a Business window on an enrolled computer: “This computer” compliance, which policies are locked, and a clear line that personal stays personal.
Three ways to enrol
An enrolment token, a link or a QR code, plus ready scripts for your MDM to roll out many computers at once.
Signed policies and compliance
Policies arrive signed and are checked on the device; compliance status goes back to the console.
Application control
A signed allow or block policy stops blocked programs on company devices.
Device actions
Shutdown, wake-on-LAN through a relay, driver updates, and BitLocker suspend and resume for maintenance.
Device locate
A one-shot location fix for a lost company device, with consent.
Remote support on the device
Consented, recorded screen sessions on Mac and Windows; the person always sees the session and can end it.
Recovery-key escrow
BitLocker and FileVault recovery keys sealed per organisation, opt-in.
Local administrator password rotation
LAPS-style rotation of the local administrator password.
Network connection telemetry
Per-process connections for the console’s network pages.
Not available yet: Windows Autopilot, Managed Google Play, Android zero-touch, on-premises AD/LDAP sync, and the BYOD work profile.
For you
For organisations