Category Filter

How to Lock a Device

The device lock is a security feature provided by Hexnode MDM. Hexnode allows IT administrators to remotely lock their client’s devices so that only the employees who know the password can access the device. This helps prevent unauthorized access to the devices. This feature is supported on Android, iOS, macOS, and Windows devices.

With Hexnode, you can secure your Android device with a Device Password, and the work container in it with a Work Profile Password. Hexnode also allows you to mandate device passcode on your iOS, macOS, and Windows devices.

On Android and iOS devices, you can also set a message to be shown on the lock screen. If the device is found missing, you can lock the device, and leave a message and a phone number on the locked screen. This message and the phone number can guide the people who find the device back to its owner.

Jump To

To set password on a device
Locking the Device Instantly
What happens at the device end?
Auto-lock using Policies
Associate the policy with target devices.

To set password on a device

Login to your Hexnode portal.
Navigate to Policies.
Select an existing policy or create a new one by clicking on New Policy.
Under the required platform section (iOS/Android/Windows/macOS), click on Passcode or Password (varies with the platform).
Select the password requirements and save the policy.
Associate the policy to target devices.

Notes:

In iOS, the end-users will get an hour to set a passcode as per the requirements. If they fail to set a passcode within that time, then the device will be locked and the users are only allowed to access the passcode configuration page.
For Android devices, a prompt appears on the device. Click on Continue and set the password in accordance with the configured policy.
For Windows phone, a prompt appears on the device to meet the password requirements set by the organization. Tap OK and change the password.
On a Windows PC, the user will be asked to change the password on the next login to meet the requirements set by the organization.
For macOS devices, the password requirement set by the policy will be reflected only when the user tries to change the password after applying the policy.

Locking the Device Instantly

In order to initiate an instant lock, you can follow either of these methods.

Note:

A passcode should be set up on iOS devices to display a custom message on the lock screen.

Method 1

Go to Manage tab.
Select the device/devices that you want to lock.
From Actions, select Lock Device.
Provide a custom message, phone number (both are optional) to be displayed on the iOS and Android lock screen. Specify the System lock PIN if you are locking a Mac device.
Click Continue.

Notes:

Custom messages and Phone number can be displayed only on Android and iOS devices.
System lock PIN is a 6-digit code that you configure in the Hexnode portal. This doesn’t have to be the Mac passcode.
You cannot lock a macOS device without specifying the System lock PIN. Users have to enter this PIN to unlock their Mac devices.

Method 2

Go to Manage.
Click on the device name, this will take you to the Device Summary page.
From Actions, select Lock Device.
Provide a custom message, phone number if you are locking an iOS or Android device. Specify the System lock PIN if you are locking a macOS device.
Click Continue.

However, these two methods are the same, the only difference is the location from which the Lock Device option is accessed.

What happens at the device end?

iOS – The screen gets locked and the user should enter the password to unlock the screen.
Android – The screen gets locked and the user should enter the password to unlock the screen.
Windows – The screen gets locked and the user should enter the password to unlock the screen. In case the lock action is performed on a device that does not have a password, the action fails displaying an error message on the portal.
Mac – The device gets re-started and the user is asked to enter the System lock PIN to log-in to the device.

Auto-lock using Policies

Automatic screen lock can be enabled by configuring it via Password policy. The device will be locked automatically if the device is idle for the specified amount of time.

Login to your Hexnode portal.
Navigate to Policies.
Select an existing policy or create a new one by clicking on New Policy.

Now, follow the instructions as per the device platform.

iOS

From iOS, select Passcode > Auto lock.
It can take the values as Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10, minutes or 15 minutes.

Android

From Android, select Device Password/Work Profile Password > Auto lock after.
It can take the values Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes or 15 minutes.

Windows

From Windows, select Password > Auto lock.
Choose the required value from 0-99 minutes.

Note:

Lumia 950 and 950 XL auto-locks after 5 minutes, regardless of the value set in this policy.

macOS

From macOS, select Passcode > Auto lock.
It can take the values Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes or 15 minutes.

Associate the policy with target devices.

If the policy has not yet been saved.

Navigate to Policy Targets.
Click on +Add Devices.
Select the devices and click OK.
Click on Save to apply the policies to devices.

Apart from devices, you can also associate the policies with device groups, users, user groups and domains from Policy Targets.