# Device Lock

The **Device Lock** feature allows administrators to remotely lock a managed device from the device from console. When a device is locked, user access to the device is restricted until an administrator unlocks it.

This feature is typically used in situations such as:

* Lost or stolen devices
* Security incidents
* Temporary administrative control
* Policy violations

## 1. Devices List

Administrators can view all enrolled devices from the **Devices** page. This page provides an overview of the device fleet and allows administrators to perform management actions.

The device table includes information such as:

* Device Name
* Assigned Profile
* Device Group
* Status
* Battery Level
* Device Manufacturer
* Operating System
* IMEI
* Serial Number
* Last Seen
* Enrolment Date

Administrators can open the **device action menu** to perform operations such as clearing data, locking the device, or deleting the device.

<figure><img src="https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MAzePNJAKsgL6R-VtV2%2Fuploads%2FwbcL06W9xcyM7ocVBoIL%2Fimage%20(12).png?alt=media&#x26;token=791d388a-5877-4b15-b47d-d2c075e66665" alt=""><figcaption></figcaption></figure>

## 2. Locking a Device

From the **Devices list**, administrators can lock a device using the action menu.

#### Steps

1. Navigate to **Devices**
2. Locate the device in the list
3. Open the **Actions menu (⋮)**
4. Click **Lock Device**

This will open the **Lock Device dialog**.

## 3. Lock Device Dialog

The **Lock Device** dialog requires administrators to confirm the action and provide a reason for locking the device.

#### Fields

| Field  | Description                                              |
| ------ | -------------------------------------------------------- |
| Device | Displays the selected device identifier                  |
| Reason | Required field to explain why the device is being locked |

The reason field supports up to **500 characters**.

<div align="left"><figure><img src="https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MAzePNJAKsgL6R-VtV2%2Fuploads%2FjEThPrQgQIUDut1J2mZx%2Fimage%20(7).png?alt=media&#x26;token=105fc656-0ff8-4f3f-9e8e-d686803d4845" alt=""><figcaption></figcaption></figure></div>

## 4. Security Warning (FRP)

When locking a device, the system displays the following warning:

> If **Factory Reset Protection (FRP)** is not configured in the device policy, the device can be **hard reset and reused**.

To ensure device security, administrators should configure **FRP within the device policy profile**.

## 5. Locked Device Status

Once a device is locked:

* The **device status changes to LOCKED**
* The lock action is recorded
* The administrator who performed the action is logged

Locked devices are clearly marked in the **Devices table**.

<figure><img src="https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MAzePNJAKsgL6R-VtV2%2Fuploads%2FzRb9stexPtiAlXtEa9cz%2Fimage%20(6).png?alt=media&#x26;token=5674a9a1-af51-4557-8931-20a5b15c5546" alt=""><figcaption></figcaption></figure>

## 6. Viewing Lock Details

When a device is locked, administrators can view detailed information about the lock event.

The **Device Locked dialog** displays:

| Field     | Description                         |
| --------- | ----------------------------------- |
| Device    | Device identifier                   |
| Reason    | Reason the device was locked        |
| Locked On | Timestamp of the lock event         |
| Locked By | Administrator who locked the device |

<div align="left"><figure><img src="https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MAzePNJAKsgL6R-VtV2%2Fuploads%2FP03DNIyzacnNnbhXRGzD%2Fimage%20(9).png?alt=media&#x26;token=740733a6-47b7-40a4-8504-24b884c8df04" alt=""><figcaption></figcaption></figure></div>

## 7. Unlocking a Device

Administrators can unlock a device once the issue is resolved.

#### Steps

1. Open the **Device Details page**
2. Click **Unlock Device**
3. Provide a **reason for unlocking**
4. Confirm the action

<div align="left"><figure><img src="https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MAzePNJAKsgL6R-VtV2%2Fuploads%2FGnPkxunu9Busza1pv0Nr%2Fimage%20(10).png?alt=media&#x26;token=c3504175-e0ac-419c-b17c-468d372f6982" alt=""><figcaption></figcaption></figure></div>

## 9. Best Practices

To maintain device security:

* Always provide clear **lock and unlock reasons**
* Enable **Factory Reset Protection (FRP)** in device policies
* Review locked devices regularly
* Maintain an audit trail for administrative actions
