Category filter

How to enable Lost Mode for Windows PCs

Windows 10/11 devices offer numerous capabilities for enterprises when integrated with Hexnode UEM. While deploying them for enhanced work productivity, the device administrators also take up every possible measure to protect the data. But what happens if the device gets stolen or misplaced? The person who finds the device has an easy way to access the sensitive data stored in it. Therefore, it is imperative to safeguard the data from intruders in case the device is lost.

Enabling lost mode on a lost/stolen device locks down the device remotely, restricting all the device functionalities. In addition, it prevents the potential loss of corporate data arising out of a lost device. Thus, even if the missing device falls into the hands of intruders, both the device and data are secure. You can also display a custom message on the device screen to render important information that might help with the device recovery. However, the device will still be in lost mode, even after it is recovered. The device access can be regained only after the administrator disables the lost mode from the Hexnode portal.


  • The Enable Lost Mode action is supported only on Windows 10 and Windows 11 PCs enrolled using the Hexnode Installer app.
  • This feature is available only on Ultimate and Ultra subscriptions.
  • The Enable Lost Mode action requires the latest version of the Hexnode UEM app installed on the devices. The action might be greyed out on the portal until the device updates them.

Enable Lost Mode on Windows devices

If the device is reported to be stolen, you can enable lost mode on it directly from the Hexnode portal.

  1. Log in to the Hexnode UEM console.
  2. Go to Manage > Devices and select the device.
  3. Navigate to Actions.
  4. Click on Enable Lost Mode.
  5. Add the Custom Message, Phone Number, and Footnote to be displayed on the device screen. You may include the device details and other relevant data that helps in retrieving the device.
  6. Note:

    You can also use the following wildcards to fill the details that need to be displayed on the device screen:

    • %devicename%
    • %deviceid%
    • %username%
    • %model%
    • %udid%
    • %assettag%
    • %serialnumber%
    • %name%
    • %department%
    • %imei%
    • %email%
    • %devicenotes%
    • %alternateemail%
    • %phonenumber%
    • %domain%
    • %osname%
    • %wifimacaddress%
    • %osversion%
    • %iccid%
    • %userprincipalname%
    • %netbiosname%
    • %newline%

    Custom Message and Footnote allow all the wildcards mentioned above, while Phone Number only supports the wildcard %phonenumber%.

  7. Click Enable.


  • The device restarts immediately after the action is executed.
  • If you are enabling lost mode on a device already in multi-app kiosk mode, make sure you add the Hexnode UEM app among the desktop apps in the kiosk policy beforehand. Specify the app name and include the default path “C:\Hexnode\Hexnode UEM\Current\Hexnode UEM.exe” in Location/Path.
  • Enabling lost mode when a user account is in single app kiosk mode locks down the kiosk account on device restart. However, you can unlock this kiosk account by executing the disable lost mode action.

The lost mode enabled device can be used for no operations. After restarting, the device shows the custom message, phone number and footnote specified.

Fetch the location of lost mode enabled device

Hexnode enables you to fetch the location of enrolled devices at periodic time intervals. Hexnode retrieves the device location through the Location Tracking policy and synchronizes the location information with the portal. Hence, when you have associated a location tracking policy with a device before enabling the lost mode, the device location is obtained automatically. Further executing the Scan Device Location action helps you fetch the immediate location of the device. The location can be viewed from the Device Summary page of the device under Recent Location.

location tracking on a lost mode enabled windows device

You can view the location information of the device from the Location History sub-tab. It gives a complete overview of the locations traversed by the device.

Location History tab of a device

Disabling Lost Mode on Windows devices

Once the device is located, you can disable the lost mode. The device regains operationality only after the administrator disables lost mode from the Hexnode portal.

  1. On the Hexnode portal, go to Manage.
  2. Select the device.
  3. Click on Actions and select Disable Lost Mode.


Disenrolling a device when the lost mode is enabled also disables the lost mode while removing it from the Hexnode UEM console. However, you will no longer be able to manage it remotely.

  • Remote Actions