Locking a device forces the user to enter a password to access the device and prevents the user from reversing this restriction. The user is informed of this action via email. If the user has set a password for the device, then that password must be entered.


  1. Go to Device & Users > Devices.
  2. Select the check box for the device.
  3. Select Lock from the Actions menu.

If the Apps@Work app on the selected device is currently connected, then this action will be applied immediately. If the Apps@Work app is not currently connected, then Ivanti EPMM attempts to complete the operation by means of the operator’s SMTP service. If SMTP is used, it may take more time to execute the operation, and the time required may vary by operator.

To remove the lock create a new Security policy that specifies that passwords are optional and assign it to the device. This task enables the user to remove the restriction on their phone. The phone will continue to request a password until the user turns off the restriction on the phone. Also, because only one active policy of the same type can be applied to a phone, you may choose to remove this policy from the phone once the user has successfully turned off the lock. You can do this by applying the previous policy or removing the phone from the policy used to remove the lock. See "Using Labels to Establish Groups" in the Getting Started with Ivanti EPMM for information on working with labels.

For Windows 8.1 Phone and Windows Mobile 10 devices, the device can be unlocked with a new device PIN. The administrator performs a Reset PIN action in the Admin Portal, and provides the new device PIN to the device user.