https://github.com/osquery/osquery logo
#general
Title
# general
s

Sean Murray

02/01/2023, 5:19 PM
Hello all - I've searched previous comments in this channel, but I could not find if somebody solved the ability to remotely lock a windows 10 machine? Oddly enough, InTune doesn't support it, and I don't believe osquery officially does either. Looking for a possible workaround, or any other osquery magic somebody may have thought up. Thanks in advance.
z

zwass

02/01/2023, 5:52 PM
There is a remote wipe command in the windows MDM protocol. You'd need to have the device enrolled already though: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp
s

Sean Murray

02/01/2023, 6:43 PM
Yea, we don't want remote wipe though (for some legal reasons regarding data retention). We just want to remotely lock the PC.
z

zwass

02/01/2023, 6:54 PM
Ah I see. Seems like there must be a command but I don't know it well enough.