Lock out a Windows/Mac User

[CHMARO]

Is it possible to lock a user out of their computer using Workspace one? Couple of scenarios, 1 user leaves the company and we want to lock the machine down so the users doesn't have access to the data (Devices are encrypted with bitlocker/Filevault) 2 we notice some unusual activity from the machine and want to lock it down.

[xuhao0402]

Did you find a way? We have the same need now.

[sluzi1986]

Every consideration here hinges on the endpoint having connectivity. In the context of a lost / stolen device, its likely going to be turned off. So, just try to set expectations appropriately.

There's some variables to consider. If you're using a network based (AD) account in Windows, or AAD, you can lock the account out in that manner. Assuming you also have an AOVPN if a local AD is used. That's not WS1 dependent though. I believe there's also a lock function for it as well on the device details page including a wipe function but I don't really manage Windows through WS1 to double-check for you.

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/1907/WS1_Windows_MDM.pdf

With macOS, you've got wipe functionality and can "lock it" as well by gating its boot cycle with a code. After hitting Lock, it will automatically reboot.