Suspicious device activities report

Supported editions for this feature: Enterprise; Education Standard and Plus.  Compare your edition

The Suspicious device activities report enables you to view details of suspicious activities on your corporate devices during a specified time range. Only devices under advanced management are included in this report.

Use this report to view device IDs, device owners, and the timestamps of the suspicious device activities.

If a device property is updated on a mobile device, this change is counted as a suspicious activity. Device properties include the serial number, the device model, the name of operating system, and more.

To view the Suspicious device activities report:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Securityand thenDashboard.

    To see Security on the Home page, you might have to click More controls at the bottom.

  3. In the lower-right corner of the Suspicious device activities panel, click VIEW REPORT.

You can customize the report to view data over a specific time range: Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days); or enter a Start date and End date. Click Apply after you set the date range.

By default, the graph displays data for All domains. To select a specific domain, choose from the Domain drop-down list.

Note: This report provides data for Android devices only, and not for iOS devices.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Clear search
Close search
Google apps
Main menu
Search Help Center