Use Windows and Linux Security Commands

JumpCloud provides Windows and Linux security commands that allow devices to remotely execute management commands. The ability to run commands is determined by the administrator's level of privilege. See Admin Portal Roles for more information.

Device management uses the following basic process:

1. The server sends out a push notification to the device.
2. The device polls the server for a command in response to the push notification.
3. The device performs the command.
4. The device contacts the server to report the result of the last command and to request the next command.

Prerequisites

• Windows: These commands can be run on a Windows 10 Pro or Windows 11 device with the JumpCloud Agent installed.
• Linux: Check supported Linux distros at JumpCloud Agent Compatibility, System Requirements, and Impacts.

Considerations

• Security commands have no expiration.
• Consider creating system backups before modifying or eliminating a device.
• There is a known limitation on Linux Mint 21 Cinnamon devices that prevents IT Admins from enabling the lock device security command successfully.

Locking a Device

This feature remotely locks the screen for the device. The user can unlock the device by logging back in.

To lock a device:

1. Log in to the JumpCloud Admin Portal.
2. Go to DEVICE MANAGEMENT > Devices.
3. Click the Actions button in the device's row.
   
4. Click Lock Device.
5. Click yes, lock to confirm that you want to remotely lock the device. Any bound users will be able to unlock the device by logging back in. The user’s session resumes when the user logs back in to the device. Any applications that were left open are intact when resumed.

Restarting a Device

To restart a device:

1. Log in to the JumpCloud Admin Portal.
2. Go to DEVICE MANAGEMENT > Devices.
3. Click the Actions button in the device's row.
4. Click Restart Device.
5. You’re prompted to confirm that you want to remotely restart the device. Click yes, restart.
6. The user’s device restarts after Windows or Linux displays a series of warning dialogs, giving the user a chance to save any work before the system restarts.

Shutting Down a Device

To shut down a device:

1. Log in to the JumpCloud Admin Portal.
2. Go to DEVICE MANAGEMENT > Devices.
3. Click the Actions button in the device's row.
4. Click Shut Down.
5. Click yes, shut down to confirm that you want to remotely shut down the device. The user’s device is shut down.

Erasing a Device

Windows Considerations:

• If the Windows Recovery Environment (Windows RE) is disabled on Windows 10 or 11 client computer, the device cannot be erased.
• On Windows, JumpCloud uses RemoteWipe CSP to issue the erase command. See Microsoft's documentation on RemoteWipe CSP.
  • Within RemoteWipe, we use “doWipeProtected” to ensure that the command is persisted even if the machine is turned off. This version of the command will return the device to its factory settings state.
  • RemoteWipe CSP requires Windows RE to function. For more information, see Microsoft's documentation.

To erase a device:

1. Log in to the JumpCloud Admin Portal.
2. Go to DEVICE MANAGEMENT > Devices.
3. Select the device from the devices list.
4. On the device page, click Actions.
5. Click Erase Device.
6. Click yes, erase to confirm that you want to remotely erase the device. The user’s device is erased.