Category Filter
How to Lock a Device
The device lock is a security feature provided by Hexnode UEM. Hexnode allows IT administrators to remotely lock their client’s devices so that only the employees who know the password can access the device. This helps prevent unauthorized access to the devices. This feature is supported on Android, iOS, macOS, and Windows devices.
With Hexnode, you can secure your Android device with a Device Password, and the work container in it with a Work Profile Password. Hexnode also allows you to mandate device passcode on your iOS, macOS, and Windows devices.
On Android and iOS devices, you can also set a message to be shown on the lock screen. If the device is found missing, you can lock the device, and leave a message and a phone number on the locked screen. This message and the phone number can guide the people who find the device back to its owner.
To set password on a device
- Login to your Hexnode portal.
- Navigate to Policies.
- Select an existing policy or create a new one by clicking on New Policy.
- Under the required platform section (iOS/Android/Windows/macOS), click on Passcode or Password (varies with the platform).
- Select the password requirements and save the policy.
- Associate the policy to target devices.
- In iOS, the end-users will get an hour to set a passcode as per the requirements. If they fail to set a passcode within that time, then the device will be locked and the users are only allowed to access the passcode configuration page.
- For Android devices, a prompt appears on the device. Click on Continue and set the password in accordance with the configured policy.
- For Windows phone, a prompt appears on the device to meet the password requirements set by the organization. Tap OK and change the password.
- On a Windows PC, the user will be asked to change the password on the next login to meet the requirements set by the organization.
- For macOS devices, the password requirement set by the policy will be reflected only when the user tries to change the password after applying the policy.
Locking the Device Instantly
In order to initiate an instant lock, you can follow either of these methods.
- A passcode should be set up on iOS devices to display a custom message on the lock screen.
- Custom messages and Phone number can be displayed only on Android and iOS devices.
- System lock PIN is a 6-digit code that you configure in the portal itself. This doesn’t have to be the Mac passcode. Users have to enter this PIN to unlock their Mac devices. System Lock Pin works only for macOS devices without Apple Silicon chip, whereas admin credentials have to be used to unlock macOS devices with Apple Silicon chip.
- On macOS devices with Silicon chip, if this action is initiated from the portal when a password policy is applied with the option, Change password at next login enabled, then admin password cannot be used to unlock the device. The device needs to be wiped for the user to login to the device again.
Method 1
- Go to Manage tab.
- Select the device/devices that you want to lock.
- From Actions, select Lock Device.
- Provide a custom message, phone number (both are optional) to be displayed on the iOS and Android lock screen. Specify the System lock PIN if you are locking a Mac device.
- Click Continue.
Method 2
- Go to Manage.
- Click on the device name, this will take you to the Device Summary page.
- From Actions, select Lock Device.
- Provide a custom message, phone number if you are locking an iOS or Android device. Specify the System lock PIN if you are locking a macOS device.
- Click Continue.
However, these two methods are the same, the only difference is the location from which the Lock Device option is accessed.
What happens at the device end?
- iOS – The screen gets locked and the user should enter the password to unlock the screen.
- Android – The screen gets locked and the user should enter the password to unlock the screen.
- Windows – The screen gets locked and the user should enter the password to unlock the screen. In case the lock action is performed on a device that does not have a password, the action fails displaying an error message on the portal.
- Mac – The device gets re-started and the user is asked to enter the System lock PIN to log-in to the device.
Auto-lock using Policies
Automatic screen lock can be enabled by configuring it via Password policy. The device will be locked automatically if the device is idle for the specified amount of time.
- Login to your Hexnode portal.
- Navigate to Policies.
- Select an existing policy or create a new one by clicking on New Policy.
Now, follow the instructions as per the device platform.
iOS
- From iOS, select Passcode > Auto lock.
- It can take the values as Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10, minutes or 15 minutes.
Android
- From Android, select Device Password/Work Profile Password > Auto lock after.
- It can take the values Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes or 15 minutes.
Windows
- From Windows, select Password > Auto lock.
- Choose the required value from 0-99 minutes.
Lumia 950 and 950 XL auto-locks after 5 minutes, regardless of the value set in this policy.
macOS
- From macOS, select Passcode > Auto lock.
- It can take the values Never, 1 minute, 2 minutes, 3 minutes, 4 minutes, 5 minutes, 10 minutes or 15 minutes.
Associate the policy with target devices.
If the policy has not yet been saved.
- Navigate to Policy Targets.
- Click on +Add Devices.
- Select the devices and click OK.
- Click on Save to apply the policies to devices.
Apart from devices, you can also associate the policies with device groups, users, user groups and domains from Policy Targets.
If the policy has been saved, you can associate it by another method.
- From Policies, check the policies to be associated.
- Click on Manage > Associate Targets and select the device.
- Click on Associate to apply policy with the devices.