> ## Documentation Index > Fetch the complete documentation index at: https://docs.xpander.ai/llms.txt > Use this file to discover all available pages before exploring further. # Devices and Desktop policy > See and revoke every computer signed in to Omni Desktop, and set what it may do for the organization and per group. Two Platform pages under **Agents** govern Omni Desktop: **Devices** and **Desktop policy**. They appear once Omni Desktop is available for your organization. Who may view them, change the policy and revoke a laptop follows your [access policies](https://docs.xpander.ai/resources/security-compliance/access-control.md). ## Devices **Devices** lists every computer signed in to Omni Desktop, with its system (macOS, Windows or Linux), member, app version and whether it is **Online** now. **Revoke** disconnects a computer at once. Its owner is signed out, agents lose access to its folders, and the app shows **Mac removed**. Nothing on the computer is deleted. Signing in again adds it as a new computer. A member who leaves the organization has all their computers revoked. One member can have up to 20 computers connected at a time. ![Devices page listing three computers, each with its system and version, member, app version, last seen and Online or Offline status](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/admin-devices.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=16b9336fedd7fba3e156e570dc6dc761) Platform > Agents > Devices. Shown with sample data. ## Desktop policy **Desktop policy** sets the most Omni Desktop may do. The **Every member** row is the organization default and opens a panel with every setting below. A new organization starts with everything on, so turn off what you want to keep closed. | Setting | Options | Default | What it controls | | - | - | - | - | | **Omni Desktop** | On, off | On | Whether members can sign in to the app and let agents work on their computer. Off disconnects every computer it applies to at once. | | **Local files** | None, Read only, Read and write | Read and write | What agents may do in folders a member trusts. **Read only** makes every trusted folder read only. | | **Shell** | On, off | On | Whether agents may run commands on the computer, inside the [sandbox](https://docs.xpander.ai/desktop/shell.md). | | **Shell can reach the network** | On, off | On | Whether those commands may download packages and call web services. Off keeps every command on the computer. | | **App automation** | On, off | On | Whether commands may drive other apps with AppleScript. macOS still asks once per app. | | **Move to cloud** | On, off | On | Whether members may [move a conversation](https://docs.xpander.ai/desktop/move-to-cloud.md), with its folders, to the cloud. | | **Bring work back** | On, off | On | Whether members may bring a conversation's cloud files back to the computer, choosing file by file. | | **Browser control** | On, off | On | Whether agents may drive the [Omni browser](https://docs.xpander.ai/desktop/browser.md), a separate browser on the computer, never the member's own. Each member allows it per chat, and can take over or stop it at any time. | | **Computer control** | On, off | On | Whether agents may see the screen and use the mouse and keyboard on a Mac. Each member allows it per chat, and can stop it at any time. See [Computer control](https://docs.xpander.ai/desktop/computer-control.md). | | **Limit agents in browsers, terminals and banking apps** | On, off | Off | With it on, agents only look at browsers and banking apps, and click without typing in terminals and code editors. Needs **Computer control** on. | | **Keep screenshots** | On, off | On | Whether screenshots agents take on the computer show in the chat's activity. Off, agents still see them, but they are not kept. | | **When the computer is offline** | Ask, Wait for the computer, Continue in the cloud | Ask | What a task that needs the computer does when it is asleep or turned off. See [Offline and reconnect](https://docs.xpander.ai/desktop/offline.md). | ![Every member panel with switches for Omni Desktop, Shell, Shell can reach the network, App automation, Move to cloud, Bring work back, Browser control, Computer control, Limit agents in browsers, terminals and banking apps, and Keep screenshots, Local files set to Read and write, and When the computer is offline set to Ask](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/admin-desktop-policy-panel.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=1edd1d233d0da48ec61c2cc57b2d45f2) Every member: the organization default for a new organization. Shown with sample data. Members can turn any of these off for their own computer, never on beyond what you set. See [Your settings and the policy](https://docs.xpander.ai/desktop/your-controls.md). ### Group overrides **Group overrides** give a group's members more than the default. Choose **Add group override**, pick the group, set its values and **Save**. Anything the default already turns on shows as on and locked. A member in several groups gets the most any of their groups allows. When their groups pick different offline behaviors, the app asks. **Remove override** returns the group to the default. ![Desktop policy page with Add group override, an Every member row and an Engineering group override row, each with a summary of its settings and its status](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/admin-desktop-policy.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=67cc2c6e9d3b344e38ed7b4f59b787e3) Platform > Agents > Desktop policy: the organization default and a group override. Shown with sample data. A saved change reaches every connected computer at once, with no restart. If xpander cannot read a member's policy, for example during an outage, it treats every switch as off until it can. ## What is recorded The [audit log](https://docs.xpander.ai/use/agents/audit.md) records: * Every sign-in to the app. * Every file or shell action an agent takes: the action, path, outcome and duration, never file content. * Every screen action: where it landed, never what was typed or seen. * Every site the Omni browser opened (the site only). * Every move to the cloud or back, and every schedule linked to or unlinked from a computer. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.