Skip to main content

Lock a Device

The Lock action allows users to remotely lock a device from the console. This is useful when a device is lost, unattended, or needs to be temporarily restricted from use.

🔒 Locking a device is similar to the device’s screen locking when the timeout expires.


What happens when you lock a device?​

When the Lock command is sent:

  • The device screen is immediately locked (if the device is online)
  • The user must unlock the device using their PIN, pattern, or password
  • In a Work Profile environment:
    • Normally, only the work profile is locked
    • Exception: On organization-owned devices running Android 8, 9, or 10, the entire device will be locked

This prevents unauthorized access while keeping the device enrolled and managed.


How to lock a device​

  1. Log in to the mambo EMM console
  2. Navigate to Management > Devices
  3. Find the device you want to lock
  4. Click the Actions (⋯) menu for the device
  5. Select Lock

lock-device

A confirmation popup will appear.


Configure Lock Command Expiry (Optional)​

By default, the lock command expires after 10 minutes if the device is offline.
You can manually change this before sending the command.

  1. Enable Set custom expiry
  2. Enter a value (for example: 1)
  3. Select a unit from the dropdown:
    • Seconds
    • Minutes
    • Hours
  4. Click Lock to send the command

If the device does not receive the command before the expiry time, the request is automatically cancelled.


Requirements​

To use the Lock feature, you must:

✅ Have device lock permissions enabled in your role
✅ Have view device permissions
✅ The device must be enrolled in mambo EMM
✅ The device should be connected to the internet


What’s Next?​