Hello all - I've searched previous comments in this channel, but I could not find if somebody solved the ability to remotely lock a windows 10 machine? Oddly enough, InTune doesn't support it, and I don't believe osquery officially does either. Looking for a possible workaround, or any other osquery magic somebody may have thought up. Thanks in advance.

There is a remote wipe command in the windows MDM protocol. You'd need to have the device enrolled already though: https://learn.microsoft.com/en-us/windows/client-management/mdm/remotewipe-csp

Yea, we don't want remote wipe though (for some legal reasons regarding data retention). We just want to remotely lock the PC.

Ah I see. Seems like there must be a command but I don't know it well enough.