How to remotely Lock a Device

The remote device lock is a security feature provided by Hexnode UEM. Hexnode allows IT administrators to remotely lock their client’s devices if they get lost or stolen. Thus, it ensures that only the users who know the password can access the device. This helps prevent unauthorized access to the devices. This feature is supported on Android, iOS, macOS, Linux, and Windows devices.

On Android and iOS devices, you can also set a message to be shown on the lock screen. If the device is found missing, you can lock the device and leave a message and a phone number on the locked screen. This message and the phone number can guide the people who find the device back to its owner.

Apart from remotely locking devices, you can also secure your Android device with a Device Password and the work container in it with a Work Profile Password. Hexnode also allows you to mandate device passcode on your iOS, macOS, Linux, and Windows devices.

Enforce password policy

1. Log in to your Hexnode UEM portal.
2. Navigate to Policies.
3. Select an existing policy or create a new one by clicking on New Policy.
4. Under the required platform section (iOS/Android/Windows/Linux/macOS), click on Passcode or Password (varies with the platform).
5. Select the password requirements and save the policy.
6. Associate the policy to target devices.

Remotely Locking the Device

To initiate an instant remote lock, you can follow either of these methods.

Method 1

1. Go to the Manage tab.
2. Select the device/devices that you want to lock.
3. From Actions, select Lock Device.
4. Provide a custom message, phone number (both are optional) to be displayed on the iOS and Android lock screen. Specify the System lock PIN if you are locking a Mac.
5. Click Continue.

Method 2

1. Go to Manage.
2. Click on the device name, this will take you to the device details page.
3. From Actions, select Lock Device.
4. Provide a custom message, phone number if you are locking an iOS or Android device. Specify the System lock PIN if you are locking a macOS device.
5. Click Continue.

However, these two methods are the same, the only difference is the location from which the Lock Device option is accessed.

What happens at the device end?

• iOS – The remote ‘Lock Device’ action will lock the device’s screen. The user should enter the correct passcode to unlock the screen.
• Android – The screen gets locked, and only the user with the correct password can unlock the device.
• Windows – The action will lock the device’s screen. The user should provide the correct password before the Windows device can be unlocked and used again. In case the lock action is performed on a device that does not have a password, the action fails, displaying an error message on the portal.
• Linux – The action will lock the device’s screen. The user should provide the password before the device can be unlocked and used again.
• Mac – The device gets restarted, and the user is asked to enter the System lock PIN to log in to the device.

Auto-lock using Policies

Automatic screen lock can be enabled by configuring it via a Password policy. The device will be locked automatically if the device is idle for a specified amount of time.

1. Log in to your Hexnode UEM portal.
2. Navigate to Policies.
3. Select an existing policy or create a new one by clicking on New Policy.

Now, follow the instructions as per the device platform.

iOS

• From iOS, select Passcode > Auto lock.
• The available options are Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes, or 15 minutes.

Android

• From Android, select Device Password/Work Profile Password > Auto lock after.
• It can take the values Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes, or 15 minutes.

Windows

• From Windows, select Password > Auto lock.
• Choose the required value from 0-99 minutes.

macOS

• From macOS, select Passcode > Auto lock.
• You can set the value as Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes, or 15 minutes.

Associate the policy with target devices

If the policy has not yet been saved,

1. Navigate to Policy Targets.
2. Click on +Add Devices.
3. Select the devices and click OK.
4. Click on Save to apply the policies to devices.

Apart from devices, you can also associate the policies with device groups, users, user groups and domains from Policy Targets.

If the policy has been saved, you can associate it with another method.

1. From Policies, check the policies to be associated.
2. Click on Manage > Associate Targets and select the device.
3. Click on Associate to apply the policy with the devices.