| title | Remote Device Action: Remote Lock |
|---|---|
| description | Use the remote lock action in Microsoft Intune to lock a managed device that has a passcode or PIN. |
| ms.date | 10/27/2025 |
| ms.topic | how-to |
| zone_pivot_groups | bf632d5b-6209-46d2-8c9c-8d76b1f704cc |
The remote lock device action locks a managed device so the user must enter the existing passcode or PIN to continue. Use this action when a device is misplaced, left unattended, or suspected of unauthorized use without wiping data or removing enrollment.
Important
Remote lock is only effective if a passcode or PIN is already set:
- If no passcode exists, the screen may just turn off and the user can still access the device.
- Enforce a passcode policy before relying on this action.
:::row::: :::column span="1"::: [!INCLUDE platform]
:::column-end::: :::column span="3":::
This remote action supports the following platforms:
- Android Enterprise corporate-owned dedicated (COSU)
- Android Enterprise corporate-owned fully managed (COBO)
- Android Enterprise corporate-owned work profile (COPE)
- Android Open Source Project (AOSP)
- iOS/iPadOS
- macOS
:::column-end::: :::row-end:::
:::row::: :::column span="1":::
[!INCLUDE rbac] :::column-end::: :::column span="3":::
To execute this remote action, at a minimum, use an account that has one of the following roles:
- Help Desk Operator
- School Administrator
- Endpoint Security Manager
- Custom role that includes:
- The permission Remote tasks/Remote lock
- Permissions that provide visibility into and access to managed devices in Intune (for example, Organization/Read, Managed devices/Read) :::column-end::: :::row-end:::
- In the Microsoft Intune admin center, select Devices > All devices.
- From the devices list, select a device.
- At the top of the device overview pane, find the row of remote action icons. Select Remote lock. ::: zone pivot="macos"
- Set a six-digit recovery PIN.
Note
The recovery PIN is shown on the device overview pane for up to 30 days, or until another device action is sent. Record it securely; it can't be retrieved afterward. Don't resend remote lock to the same macOS device until that PIN is used—additional attempts show a Failed status in reporting.
::: zone-end ::: zone pivot="ios,android" ::: zone-end
- Microsoft Graph API: remoteLock action