How to Enable Remote Lock in Microsoft Intune?

Question

Hi Reader,

I would like to know how to enable remote lock in Microsoft Intune ?

My aim is to Remotely lock any Entra id connected device (through work or school account) in my organization through microsoft intune of the Global Admin.

The device which I need to lock remotely is compliant and that I have checked from the overview and the mentioned device is "Microsoft Entra Joined" also.

However, The "Remote Lock" option is present in the overview section of the selected device, But is that Remote Lock button is inactive due to which I am Unable to Click that Button.

Also FYR :

• I synced the device through the Microsoft Intune again
• The device also has a PIN set for its user login into the PC.
• My account through which i am logged in to the admin panel is also Global Admin Account

In addition to this,

I have created a compliance policy and have added the device to it also configuration policy is successfully displayed and reflected in Intune

Note : I know that Windows devices are not supported for remote lock according to the microsoft documents, But i need it for user's assets security. So, If it is possible, Would be greatful for your approach

Hoping to get a positive response and a Fruitful Support.

Thanks & Regards,

Dhruv

Answer 1

To enable remote lock in Microsoft Intune, ensure the following conditions are met:

1. Device Compliance: The device must be compliant with your organization's policies. You mentioned that the device is compliant and has a PIN set, which is good.
2. Supported Platforms: Remote lock is supported on devices running Android and iOS. However, it is not supported for Windows 10 desktops. If your device is a Windows 10 desktop, this could be why the remote lock option is inactive.
3. Correct User Account: Ensure that you are logged in with a Global Admin account, which you have confirmed.
4. Device Sync: Since you've already synced the device through Microsoft Intune, this step is also covered.

If the "Remote Lock" button is still inactive, it may be due to the device type or platform limitations. For Windows devices, ensure that the device is not a Windows 10 desktop, as remote lock is not supported for that platform.

If everything checks out and the button remains inactive, consider reaching out to Microsoft support for further assistance.

---

References:

• Remotely lock devices with Intune
• Manage devices and protect data with on-premises MDM in Configuration Manager

Answer 2

@MindQuad | Dhruv Soni, Thanks for posting in Q&A. I understand your concern about securing your user's assets. Unfortunately, as you mentioned, the Remote Lock feature in Microsoft Intune does not support Windows devices. This feature is available for Android, iOS, and macOS devices

https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-remote-lock

You can feedback in the following link to see if we can have this feature in the future.

https://feedbackportal.microsoft.com/feedback/forum/ef1d6d38-fd1b-ec11-b6e7-0022481f8472

To secure the device, here are a few alternative approaches you might consider:

1. BitLocker: If the device is running Windows 10 or later, you can use BitLocker to encrypt the device. This ensures that even if the device is lost or stolen, the data remains secure.
2. Remote Wipe: While you can't lock the device, you can remotely wipe it to remove all data. This can be done through the Intune admin center by selecting the device and choosing the Wipe action.
3. Conditional Access Policies: Implement conditional access policies to restrict access to organizational resources based on compliance status, location, and other factors. This can help mitigate risks if a device is compromised.
4. Security Policies: Set security policies such as requiring a strong PIN or password and enabling screen lock after a period of inactivity.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.