Endpoint Configuration

Introduction

The Endpoint Configuration feature allows users to deploy key security and network settings through Endpoint Policy and view each device’s configuration status from the Computer Properties page.
Accessible through both the Computer Properties page and the Endpoint Policy module, this feature provides visibility into each device’s current configuration status and allows automated deployment of compliant settings through a centralized policy framework.

Supported Subscriptions

Your team must have Splashtop Autonomous Endpoint Management (AEM) enabled.

Requirements

• Remote Side:
  • Windows 10 and up; Streamer v3.8.0.1. and up.
  • macOS 10.15 and up; Streamer v3.8.0.1. and up. (System Insight Module installation required for status reporting)

Permissions

Only Team Owner and Admins can:

• Enable or modify Endpoint Configuration policies

• View encryption recovery keys (Owner and Super Admins only)

• Override policy values per computer

Members and Group Admins can only view status but not make changes.

Accessing Endpoint Configuration

Endpoint Policies → Endpoint Configuration

Go to Automation > Endpoint Policy > Endpoint Configuration to define configuration policies for your team. Admins can define and deploy configuration items from Endpoint Policy.

By default:

• The category toggle is disabled

• All configuration items are unchecked

• Changes apply only to Streamers with device posture support

Configuration Tab (Computer Properties)

1. Navigate to the Management > All Computers.

2. Select a computer to open its Properties page.

3. Click the Configuration tab (Remote Support license type is required to view this tab.)

Each supported computer displays a Configuration tab that lists:

• Current endpoint values reported via osquery

• Policy values applied from Endpoint Policy

• Status icons indicating Enabled, Disabled, Not Reported, or Unavailable

For macOS devices, osquery must be installed (automatically via policy if allowed) to retrieve configuration data.
Team owner can enable “Allow Mac to install System Insight Module” in Team Settings to permit automatic installation.

Supported Configuration Items

Windows

• Screen Lock: Enforce screen lock after inactivity

• Password Policy: Set password complexity and minimum length

• Wi-Fi Profiles: Define SSID, security type (WPA2/WPA3), and pre-shared key

• System Proxy: Configure proxy detection and PAC URL

• Firewall: Enforce Windows Firewall and block exceptions

macOS

• Password Policy: Require alphabet, number, mixed-case, symbol, and minimum length

• Wi-Fi Profiles: Deploy Wi-Fi settings via .mobileconfig profiles

• System Proxy: Auto-detect or enforce PAC URL

• Firewall: Enable firewall and stealth mode

Disk Encryption (Preview)

Splashtop now supports initiating system disk encryption directly from the computer property page:

Management > All Computers > Properties > Configuration > Enable Disk Encryption

• Windows: Enables BitLocker with TPM 2.0 and recovery key backup

  • Streamer executes PowerShell Enable-BitLocker command

• macOS: Enables FileVault (macOS 10.13 or later)

  • Only team owners and admins can enable FileVault through the Configuration tab.

  • Once initiated, users must log out and log back in to complete encryption

• Once enabled, encryption cannot be cancelled mid-process

The encryption progress and recovery keys (if available) will be displayed under the Configuration > Disk Encryption section.