Device ManagementAI
AI Governance
See every AI tool running on your Macs, Windows PCs and Linux devices: assistant apps, coding agents, IDE plugins, browser extensions and MCP servers. It’s on for every company with Primo MDM, with nothing to install. Approve or block each tool once, for the whole company. Primo raises a finding for each risky setup, such as an API token stored in plain text, and can open a ticket for it. Turn on Create tickets automatically and set up the AI Findings Remediation Agent: Primo AI then tells the employee what to change. On its own, it only acts on a device to remove a tool you blocked. Environment variable values, file content and prompts stay on the device.Start in AI Governance > Tools. See AI Governance.Device Management
Target Linux devices by distribution family
Device groups can now filter Linux devices by OS family: Debian, Red Hat, Arch or SUSE. Send a.deb to a Debian group, which includes Ubuntu, and an .rpm to a Red Hat group, which includes Fedora. Each package then only goes to devices that can install it. A device gets its family at its next sync with Primo. Other distributions, such as NixOS or Alpine, have none. The Devices list offers the same filter.See Filter devices.Onboarding
Send a new hire’s password on their start date
Create a new hire’s account a few days early, and send the password only when they arrive. While the start date is still ahead, an onboarding’s email step offers On the start date. The default stays When the account is created. That day, shortly after the Time you pick, Primo resets the password and emails it to the credential recipient. It works with Google Workspace and Microsoft Entra ID. With another email provider, Primo sends the password when it creates the account.See Provision email.AI