Lock devices during offboarding

If you're using a device management system, such as Jamf Pro or Kandji, you can use it to lock employees' or contractors' devices remotely. This is useful when people leave your organization and you want to lock their laptop, tablet or phone so that they can no longer access company resources. 

If you have connected Trelica to a suitable device management system, you can automate locking terminated employees' devices as part of an offboarding workflow. Trelica currently supports locking devices remotely via the following integrations:

• Jamf Pro
• JumpCloud
• Kandji
• Microsoft Intune
• Mosyle
• Workspace One

To lock a terminated employee's or contractor's device automatically:

1. Set up an offboarding workflow with the "Person leaves" trigger. 
2. Use the Filter assets step to identify the assets that you want to lock.
   • Select Assets assigned to this person to identify all assets currently assigned to the terminated employee or contractor.
   • Add other filters, such as the asset type or status, as required. For example, you may want to lock laptops but not phones. 
3. Add a Loop step to perform the same action on each asset identified by the filter. 
4. Click the + icon to add a step to the Iterate branch. You can filter the list of steps in the "Add step" dialog by your device management system.
5. Add the Lock device or Retire device step for your device management system.
6. Add further steps to the Done branch as required. To attach a list of the assets identified in the filter step to an email, add the Send email step and select Asset export.