Mobile Device Lost Mode Tracking And Remote Wipe Tool — Complete Documentation & Simulation

Overview & System Context

Mobile Device Lost Mode Tracking And Remote Wipe Tool: Comprehensive Web-Sourced Technical Investigation Exhaustive Research Dossier · Pure Web-Scraped Content: ~5329 Words · Real Software Screenshots: 1 1. Executive Overview & Technical Background Mobile device management (MDM) is the administration of mobile devices, such as smartphones, tablet computers, and laptops. MDM is usually implemented with the use of a third-party product that has management features for particular vendors of mobile devices. Though closely related to Enterprise Mobility Management and Unified Endpoint Management, MDM differs slightly from both: unlike MDM, EMM includes mobile information management, BYOD, mobile application management and mobile content management, whereas UEM provides device management for endpoints like desktops, printers, IoT devices, and wearables.

Ensuring that diverse user equipment is configured to a consistent standard / supported set of applications, functions, or corporate policies Updating equipment, applications, functions, or policies in a scalable manner Ensuring that users use applications in a consistent and supportable manner Ensuring that equipment performs consistently Monitoring and tracking equipment (e.g. location, status, ownership, activity) Being able to efficiently diagnose and troubleshoot equipment remotely MDM functionality can include over-the-air distribution of applications, data and configuration settings for all types of mobile devices, including mobile phones, smartphones, tablet computers, ruggedized mobile computers, mobile printers, mobile POS devices, etc. Most recently laptops and desktops have been added to the list of systems supported as MDM becomes more about basic device management and less about the mobile platform itself. MDM tools are leveraged for both company-owned and employee-owned (BYOD) devices across the enterprise or mobile devices owned by consumers. Consumer Demand for BYOD is now requiring a greater effort for MDM and increased security for both the devices and the enterprise they connect to, since employers and employees have different expectations concerning the types of restrictions that should be applied to mobile devices. By controlling and protecting the data and configuration settings of all mobile devices in a network, MDM can reduce support costs and business risks. The intent of MDM is to optimize the functionality and security of a mobile communications network while minimizing cost and downtime. With mobile devices becoming ubiquitous and applications flooding the market, mobile monitoring is growing in importance. The use of mobile device management across continues to grow at a steady pace, and is likely to register a compound annual growth rate (CAGR) of nearly 23% through 2028. The US will continue to be the largest market for mobile device management globally. Numerous vendors help mobile device manufacturers, content portals and developers test and monitor the delivery of their mobile content, applications, and services. This testing of content is done in real time by simulating the actions of thousands of customers and detecting and correcting bugs in the applications.

All MDM products are built with an idea of Containerization. The MDM Container is secured using current cryptographic techniques. As of 2026, the Cryptographic Module Validation Program (CMVP) has validated over 1000 active cryptographic modules that can be used for MDM. Corporate data such as email, documents, and enterprise applications are encrypted and processed inside the container. This ensures that corporate data is separated from the user's personal data on the device.

Additionally, encryption for the entire device and/or SD Card can be enforced depending on MDM product capability. Secure email: MDM products allow organizations to integrate their existing email setup to be easily integrated with the MDM environment. Almost all MDM products support easy integration with Exchange Server (2003/2007/2010), Office365, Lotus Notes, BlackBerry Enterprise Server (BES), and others. This provides the flexibility of configuring email over the air. Secure docs: Employees frequently copy attachments downloaded from corporate email to their personal devices and then misuse it.

MDM can restrict or disable clipboard usage into or out of the secure container, restrict the forwarding of attachments to external domains, or prevent saving attachments on the SD card. This ensures corporate data is secure. Secure browser: Using a secure browser can avoid many potential security risks. Every MDM solution comes with a built-in custom browser. An administrator can disable native browsers to force users to use the secure browser inside the MDM container. URL filtering can be enforced to add additional security measures. Secure app catalog: Organizations can distribute, manage, and upgrade applications on an employee's device using an App Catalog. This allows applications to be pushed onto the user's device directly from the App Store or push an enterprise developed private application through the App Catalog. This provides an option for the organization to deploy devices in Kiosk Mode or Lock-Down Mode.

Policy Enforcing: There are multiple types of policies that can be enforced on MDM users. Personal Policy: According to the corporate environment, highly customizable Device Platform specific: policies for advanced management of Android, iOS, Windows, and Blackberry devices. Compliance Policies/Rules VPN configuration Application Catalogue Pre-defined Wi-Fi and Hotspot settings Jailbreak/Root detection Remote Wipe of corporate data Remote Wipe of entire device Device remote locking Remote messaging/buzz Disabling native apps on device Some Kiosk software features Figure 1: Video Demonstration & Practical Interface Overview MDM's Lost Mode enables administrators to track, lock, and secure corporate devices that are lost or stolen. Available for iOS, Android, and Chrome OS, it supports real-time location tracking, remote lock with custom lock screen messaging, remote alarm, passcode reset, and complete or corporate data wipe. On supervised iOS devices, Lost Mode functions without requiring the Self Service app (previously ME MDM app) and can override disabled Location Services.

In regions where the use of device location data is restricted, locating lost or stolen devices presents a significant challenge. To address this, MDM Lost Mode offers a robust solution, similar to services like Find My iPhone or Find My Device , allowing administrators to track, secure, and manage missing devices effectively. Lost Mode is specifically designed to help organizations retrieve misplaced devices, lock them down, and even wipe sensitive data if necessary. This feature ensures that corporate data remains secure, even in the event of theft.

Lost Mode is available for both iOS and Android devices, with additional support for Chrome OS devices . Below, we will outline the details of enabling and using Lost Mode across various platforms. Note: 1. Lost Mode can be configured to track devices either always or only when lost. To set this up: Navigate to the Inventory tab, select Geo-Tracking, and choose Track Devices > When Lost . 2. When Lost mode is enabled status bar and Keyguard Notifications are disabled by default Lost Mode is fully supported on supervised iOS devices running iOS 9.3 or later. Key features include: The above screenshot shows a sample message and contact number displayed in the lock screen. Clicking on call button allows a call to be made to the contact number specified. Further, the device is locked on enabling Lost Mode and can be unlocked only through MDM , ensuring unauthorized access is completely restricted.

For other iOS devices including unsupervised iOS devices, not all capabilities of Lost Mode are supported. ME MDM app must be installed in the device and Location Services must be enabled for ME MDM app, to obtain the location details. However, the other location-indepent functionalities of Lost Mode can be still used - you can lock the device, display message and contact details in the lock screen and wipe the device if need be.

Security commands - Remote Lock, Restart and Shutdown cannot be executed when the device is in Lost Mode . Enhanced Control on Samsung Knox Devices: For Knox-enabled Samsung devices, Lost Mode can automatically enable critical functionalities like Wi-Fi, Location Services, and more, even if they were previously disabled. The following table specifies the list of all features which are enabled by Lost Mode silently, irrespective of whether it has been enabled/disabled in the device .

Fully Managed (COSU and COBO, or previously Device Owner) and Personally-Owned Work Profile (BYOD, or previously Profile Owner) are only supported for devices running Android 5.0 or later versions . In Non-Samsung devices provisioned neither as Personally-Owned Work Profile (BYOD, or previously Profile Owner) and Fully Managed (COSU and COBO, or previously Device Owner), only Wi-Fi gets enabled automatically through Lost Mode, irrespective of whether it is enabled or not. If Lost Mode is enabled, factory reset is restricted. However, non-Samsung or Knox-unsupported devices can still be manually hard reset. To prevent unauthorized access after a reset, it is recommended to use an Enterprise Factory Reset Protection (EFRP) profile.

Mobile Device Manager Plus enables IT admins to remotely enable Lost Mode on Chromebooks when they're lost or stolen. To enable Lost Mode on Chrome OS devices, ensure the following pre-requisites are met: No. On supervised iOS devices running iOS 9.3 or later, Lost Mode works without the app being installed, and MDM can locate the device even if Location Services are disabled.

When Lost Mode is enabled, factory reset is restricted; however, non-Samsung or Knox-unsupported devices can still be manually hard reset. It is recommended to use an Enterprise Factory Reset Protection (EFRP) profile to prevent unauthorized access after such a reset. The current user is logged out and the device is locked with the configured message; new users cannot log in until Lost Mode is disabled from the MDM console, and the device status is marked Disabled in the G Suite Admin Console. Locating Chromebooks is currently not supported.

Access to this page requires authorization. You can try signing in or changing directories . The Lost Mode device action in Microsoft Intune allows IT administrators to remotely lock and track lost or stolen devices. When activated, Lost Mode displays a custom message and contact phone number on the device's lock screenâIIhelping facilitate recovery while protecting corporate data.

2. System Architecture & Core Working Principles Once enabled, the device is locked and can't be accessed until Lost Mode is disabled by an administrator. While in Lost Mode, the device's location can also be tracked with the Locate device action, making it easier to recover. Chrome Enterprise and the Google Admin console refer to devices in lost mode as disabled . For more information about how to disable a device, see the Chrome Enterprise and Education Help documentation.

In the message you enter to show on the lock screen, include specific details to return the lost device. When you enable Lost Mode, the device is locked. The custom message and phone number you specify are displayed on the lock screen, helping facilitate recovery. While Lost Mode is active, the user can't access the device. To locate the device during this time, use the Locate device action in the admin center.

Some built-in device functionalities might still work. For example, Siri might still be used to make calls unless it's disabled. Mobile devices are widely used in organizations with a predominant mobile-only workforce. The handiness of a mobile device improves work productivity but also makes it an easy target for being stolen. It is also a reason for employees to misplace their devices easily. In these situations, the possible loss of sensitive corporate data from the device is usually the matter of utmost concern for organizations. To ensure the safety of corporate data on lost devices, IT admins can enable Lost Mode on iPhone or Lost Mode on Android devices using Mobile Device Manager Plus (MDM), a robust mobile device management solution .

Enabling Lost Mode on iPhone or Android devices, completely locks it down to a screen showing a message, contact number, and a call button. The message can be customized to indicate that the device is lost and the person finding the device can contact the number specified. Even if a person with malicious intentions finds the device, access to sensitive corporate data or even personal data in the case of BYOD , is completely blocked as Lost Mode is enabled.

Device loss can occur in any business such as transportation, construction, education, healthcare, or retail. Assuming an organization-owned Android device is lost during transit by a driver. Once the loss of device is reported to the company, Lost Mode on Android devices can be enabled over-the-air using MDM, to lock it down immediately. Also, the location of the device can be obtained in real-time using Geo-tracking and easily viewed on map. As Lost Mode automatically turns on Wi-Fi and Location services on the device even if it is switched off, tracking it becomes simple. Furthermore, a new passcode can be set on the device which can be communicated to its authorized user. For the purpose of auditing, MDM provides the option to add a ticket ID and the details regarding the same.

Once Lost Mode is enabled, the device will be locked down to the following screen and no action can be performed on the device. More often than not, devices are misplaced within the organization premises. Consider a scenario where an employee has misplaced his iPhone in his office. In this situation, the IT admin can quickly locate the device prior to enabling Lost Mode on iPhone, as the device is likely to be found within the office premises or its vicinity. Once, Lost Mode is enabled, a remote alarm can be triggered on the device from MDM which rings until the device is found and unlocked only by MDM. The advantage of Lost Mode here is that, the device sounds an alarm even if it happened to be on silent mode.

In case, the device had been stolen from the office, enabling Lost Mode on Android devices or iPhones ensures that access to corporate data on the device is blocked. Also, the device can be completely wiped or in the case of BYOD, selectively wiped to ensure safety of the corporate data. Further, cases of device loss due to theft can be prevented using MDM. IT admins can configure policies to ensure a device leaving a specific area, such as the organization premises, is automatically locked and erased using Geofencing . This, makes it possible to further strengthen data security, besides Lost Mode.

Managed Lost Mode is used to locate supervised devices when they are stolen. After they are located, they can be remotely locked or erased. If a supervised iPad or iPhone is lost or stolen, a device management service administrator can remotely enable Lost Mode (called Managed Lost Mode) on that device. When Managed Lost Mode is enabled, the current user is logged out and the device can’t be unlocked. The screen displays a message that can be customized by the administrator, such as displaying a phone number to call if the device is found. The administrator can also request the device to send its current location (even if Location Services are off) and, optionally, play a sound. When an administrator turns off Managed Lost Mode, which is the only way the mode can be exited, the user is informed of this action through a message on the Lock Screen or an alert on the Home Screen.

iPad, iPhone, Mac, Apple TV , Apple Vision Pro , and Apple Watch devices can be erased remotely by an administrator or user, rendering all data unreadable. When a remote wipe command is initiated by a device management service or iCloud, the device sends an acknowledgment back to the service and performs the wipe. For remote wipe through Microsoft Exchange ActiveSync, the device checks in with the Microsoft Exchange Server before performing the wipe.

Using Microsoft Exchange ActiveSync when the account that was installed with User Enrollment Users can also wipe supported devices in their possession using Settings (iPad, iPhone, and Apple Vision Pro ) or System Settings (Mac). And as mentioned, iPad, iPhone, Apple Vision Pro , and Apple Watch , devices can be set to automatically wipe after a series of failed passcode attempts.

Instant remote wipe is available on a Mac with Apple silicon and a Mac with an Apple T2 Security Chip or if FileVault is turned on. Instant remote wipe is achieved by securely discarding the media key . Remote wiping a lost device with Intune is one action in the portal, but the right action depends on ownership and enrolment: Wipe for a lost or stolen corporate device, Retire for a personal enrolled device, App selective wipe for a personal device managed only through app protection policies. Before any of them, revoke the user's sessions and confirm the disk was encrypted, because the wipe only happens when the device next comes online.

Device security design — encryption, compliance, app protection , and why a lost phone is mostly an identity problem — is in Microsoft 365 mobile device security . If the device was lost with a session that may have been used, treat the account per how to block a compromised account as well. In Entra, on the user, Revoke sessions . Tokens on the lost device stop refreshing; Exchange, SharePoint , and Teams cut off within minutes. Record the time the loss was reported in the ticket — it bounds any later investigation.

Intune → Devices → the device → Hardware shows Encrypted: Yes/No ; Recovery keys lists escrowed BitLocker keys. For macOS, Recovery keys likewise. If the device was encrypted with a TPM-backed BitLocker and a PIN or Windows Hello, data at rest is protected regardless of whether the wipe ever lands. 3. Software Implementation, Frameworks & Protocols Devices → the device → Lost mode → Turn on , with a message and a phone number for the lock screen. Then Locate device to get a location. Lost mode locks the device without wiping, which is preferable if there is a real chance of recovery. Windows and Android have no equivalent in Intune; Android Enterprise fully-managed devices can be locked with Remote lock .

Mark the Entra device object disabled ( Entra → Devices → the device → Disable ) so it cannot be used to satisfy a device-based Conditional Access policy, and remove the Autopilot registration only if you do not expect recovery. Report the theft to the police if insurance requires; the serial number is on the Intune hardware page. A Wipe cannot be undone; a recovered device is simply re-provisioned (Autopilot handles this for Windows) and the user's data comes back from OneDrive with Known Folder Move and from the mailbox. If the device turns up before it checked in, cancel the action from Device actions status — but only if you are sure it never left friendly hands; a device that was out of your control for a weekend should be wiped anyway. Retire and selective wipe are reversed by re-enrolling or re-signing into the apps.

Access to this page requires authorization. You can try signing in or changing directories . In today's hybrid work environment, IT professionals manage and secure devices across diverse locations and platformsâIIoften without physical access. Microsoft Intune's device actions provide a powerful toolkit to meet this challenge. These actions enable IT pros to respond quickly to incidents, enforce compliance, and maintain productivity, all from the cloud. Whether it's locking a lost device, resetting a password, or triggering a malware scan, device actions help ensure that users stay protected and supportedâIIwherever they are.

Device actions are especially valuable in scenarios where time and access are limited. For example: These capabilities reduce downtime, improve security posture, and streamline support operations. Each action has its own prerequisites, which the respective documentation details. In general: Microsoft Intune supports device actions across multiple platforms. The availability of specific actions depends on the platform and the device's configuration. This cross-platform support ensures that IT pros can manage a diverse device ecosystem with consistent tools and workflows.

Select one of the following tabs to learn more about the available device actions for each platform: For Intel vPro devices, Intune also integrates with Intel vPro Fleet Services to provide hardware-level remote management capabilities, including out-of-band management that works even when the operating system is unresponsive or the device is powered off.

To manage ChromeOS devices with Intune, you must first set up the Chrome Enterprise connector and enroll devices by using the Google Admin console. This integration allows you to manage ChromeOS devices alongside other platforms in Intune. Every device action has its own steps, which the respective documentation details. In general: The Retire , Wipe , and Delete actions take precedence over all other actions. A device with multiple pending actions only carries out a Retire, Wipe, or Delete. The system ignores all other pending actions.

Intune limits the number of Wipe, Retire, and Delete device actions that can be submitted in a tenant each day. The limit for each action is cumulative across all submission methods, including actions for individual devices, bulk device actions, and Microsoft Graph API requests. To request a change to one of these limits, contact Microsoft support . For MDM devices , deleting a device immediately hides it from the admin center and initiates a Retire . A status of Completed on a delete action means the process is complete on the server side; it doesn't confirm that the client device finished the Retire .

Managing devices at scale is a common challenge for IT pros, especially in environments like schools, enterprises, or frontline operations. Microsoft Intune supports bulk device actions, so IT admins can perform tasks on up to 100 devices at the same time. This capability streamlines operations, reduces manual effort, and ensures consistent policy enforcement across large device fleets.

Bulk Wipe, Retire, and Delete requests count toward the daily tenant limit for each action. For example, at the end of a school year, IT admins can use bulk wipe to securely reset student devices before reassigning them for the next term. This approach saves time and ensures that sensitive data is removed efficiently across all devices. Select one of the following tabs to learn more about the available bulk device actions for each platform: Each bulk action has its own steps. The documentation for each action provides detailed instructions. In general, follow these steps: Device actions in Intune empower IT pros to manage devices efficiently and securelyâIIwhether individually or at scale.

Explore the documentation linked in this article to learn more about each action and how to integrate them into your device management workflows. 4. Practical Deployment, Analysis & Case Studies A device goes missing. Maybe a delivery driver left a tablet in a vehicle and it was taken. Maybe a retail kiosk was physically removed after hours. Maybe a warehouse scanner disappeared during a shift change. However it happens, the clock starts ticking the moment you realize a device is gone.

If that device is enrolled in a mobile device management platform , the response is fast, controlled, and auditable. If it isn’t, the response is panic. This guide walks through exactly what to do when a managed device goes missing, why each step matters, and how MDM compresses what used to take days into a process that takes minutes.

Before triggering any device security actions, verify that the device is genuinely lost or stolen rather than in an unexpected location or powered off. In your MDM dashboard, pull up the device record. Check the last known location if GPS tracking is enabled. Check the last check-in time. Review any recent alerts, a sudden loss of connectivity, a geofence breach, or an unexpected location update are all meaningful signals.

Moki’s device monitoring gives you real-time visibility into device status, including connectivity, location, and last activity. In many cases, a “missing” device is actually offline at its expected location due to a network issue, a very different situation than a stolen device. If location data shows the device somewhere it shouldn’t be, or if last check-in was at an unusual time combined with a location anomaly, treat it as missing and proceed.

Lost mode is the first line of defense. When activated through MDM, lost mode locks the device so it cannot be used, displays a message on the screen (typically a contact number or return instructions), and continues reporting location if GPS is available. Moki’s iOS MDM supports Apple’s native Lost Mode for supervised iOS devices, which provides robust lockdown and location reporting. For Android devices, Moki’s Android Enterprise and Android Agent platforms support equivalent lockdown capabilities.

Activating lost mode from the MDM dashboard takes seconds and does not require physical access to the device. The command queues and executes as soon as the device connects to a network, which is important because a device that’s been stolen will often reconnect when the person who has it attempts to use it. Lost or stolen devices create compliance and legal obligations depending on your industry. Healthcare organizations under HIPAA have specific breach notification requirements. Organizations handling payment card data under PCI DSS must document device security incidents. Even outside of regulated industries, a documented response demonstrates due diligence.

From the MDM platform, export the device’s activity log, last known location, last check-in timestamp, and the record of when lost mode was activated. This creates an auditable chain of custody that demonstrates your organization took prompt action to secure the device. Record internally: who reported the device missing, when, what actions were taken and in what order, and what data the device had access to.

Not all missing devices represent the same level of data risk. A locked-down kiosk that only runs a single app and stores no user data is a different situation than a field service tablet with access to customer records. Review what the device was enrolled to do. What apps did it have installed? What data did those apps access? Was the device encrypted? Was it locked with a PIN or biometric that would prevent casual access? If the device was properly configured through MDM, encrypted, locked down to approved apps, and set to wipe after a defined number of failed unlock attempts, the actual data exposure risk is likely low even if the physical device is gone.

This is one of the clearest arguments for device lockdown policies during the configuration phase: by the time a device goes missing, your response is mostly administrative rather than a crisis. If the device doesn’t surface within a reasonable timeframe, or if the nature of the loss suggests it won’t be recovered, issue a remote wipe command from the MDM dashboard.

Remote wipe erases the device to factory settings, removing all data, credentials, app configurations, and enrolled profiles. For devices enrolled through MDM, this command can be issued regardless of physical location, it executes the next time the device connects to any network. This step is irreversible, which is why it follows confirmation of the loss and documentation rather than being the first response. A device that was simply left in a break room and will be recovered in an hour doesn’t need to be wiped.

Moki supports remote wipe across iOS, Android, and BrightSign devices. The command is logged in the platform, giving you a timestamped record that the wipe was issued as part of your incident response. If the device had access to any network resources, Wi-Fi credentials, VPN access, app authentication tokens, revoke or rotate those through MDM and your identity management systems.

MDM platforms that integrate with directory services or identity providers allow you to push new network policies to the rest of your fleet, effectively invalidating the credentials a stolen device might carry without affecting your operational devices. 5. Performance Evaluation & Extended Technical Observations For apps that use individual login credentials, work with your IT or security team to invalidate the session tokens associated with the missing device.

File a police report for any confirmed theft. This creates an official record and is required by many cyber insurance policies as a condition of any claim. If the device handled personal data, customer information, employee records, health data, payment data, review your notification obligations under applicable regulations. HIPAA requires notification within specific timeframes. Various state data breach notification laws have their own requirements. Document that you completed this review regardless of whether notification is ultimately required.

The difference between a managed and unmanaged device loss is measured in hours versus days, and in controlled versus chaotic responses. With MDM, the sequence above can be completed in under 30 minutes from the moment you identify a device as missing. Without MDM, you’re making calls to carriers, trying to find device serial numbers, contacting app vendors to revoke access, and hoping the device hasn’t been accessed in the meantime.

Moki’s platform is built to give you the visibility and controls you need not just for day-to-day fleet management, but for exactly these moments when a fast, documented response is what protects your business. If you’re managing devices in the field without MDM and want to close this gap, request a demo to see how Moki handles device security from deployment through end of life.

If a managed device goes missing or is potentially stolen, various types of commands and data from Systems Manager can be used by administrators to help locate the device. Additionally, if a device is lost and sensitive data on the device needs to be erased, Systems Manager can be used to remotely wipe the device of all its data. For general information on how Systems Manager locates managed devices, see this article .

To locate a missing client, it is imperative that the device be tagged appropriately to distinguish it as a missing device. A Connectivity alert can then be configured to allow administrators to be notified when a missing device comes online with the Meraki Cloud Controller. When online, various information will be refreshed to provide administrators with the most up-to-date information regarding the missing device states.

For supervised iOS devices running 9.3+, use the Lost Mode feature to help track and remediate your devices. For other device types, continue with the steps outlined in this article. Tag client devices with a new tag or use an existing tag to configure connectivity alerts in the next step. For information on how to associate tags to devices please follow the instructions in the first step here .

Setting connectivity alerts on devices requires them to check in online first before they are applied. Should third party investigators require access to Dashboard data in read only mode, instructions for configuring network admins with read only access can be found here . After saving changes, if devices associated to the tag selected in step 2 are offline for the selected number of minutes, an email will be sent to the user group selected in 3.. A subsequent email will also be sent when these devices come online.

For the duration of the recovery effort, administrators can find the following list of data and commands from the Client details page useful: Android and iOS devices require the Systems Manager app installed to use the below commands. For more information about installing the Meraki SM iOS App please click here .

When all options are exhausted, administrators can select to wipe missing mobile devices of their content and settings. Access to this page requires authorization. You can try signing in or changing directories . The Lost Mode device action in Microsoft Intune allows IT administrators to remotely lock and track lost or stolen devices. When activated, Lost Mode displays a custom message and contact phone number on the device's lock screenâIIhelping facilitate recovery while protecting corporate data.

Once enabled, the device is locked and can't be accessed until Lost Mode is disabled by an administrator. While in Lost Mode, the device's location can also be tracked with the Locate device action, making it easier to recover. Chrome Enterprise and the Google Admin console refer to devices in lost mode as disabled . For more information about how to disable a device, see the Chrome Enterprise and Education Help documentation.

In the message you enter to show on the lock screen, include specific details to return the lost device. Harvested Online Documentation & Reference Sources • https://en.wikipedia.org/wiki/Mobile%20device%20management • https://www.manageengine.com/mobile-device-management/help/security_management/lost_device_management.html • https://learn.microsoft.com/en-us/intune/device-management/actions/lost-mode • https://www.manageengine.com/mobile-device-management/mdm-track-lock-wipe-stolen-devices-using-lost-mode.html • https://support.apple.com/guide/security/managed-lost-mode-and-remote-wipe-secc46f3562c/web • https://solvingmicrosoft365.com/guides/how-to-remote-wipe-a-lost-device-with-intune/ • https://learn.microsoft.com/en-us/intune/device-management/actions/ • https://moki.com/how-to-handle-a-lost-or-stolen-device-in-the-field-with-mdm/ • https://documentation.meraki.com/Platform_Management/SM_-_Endpoint_Management/Operate_and_Maintain/Monitoring_ and_Reporting/Using_Systems_Manager_to_Locate_a_Missing_or_Stolen_Device • https://learn.microsoft.com/en-ie/intune/intune-service/remote-actions/device-lost-mode