Intune Remote Device Actions: Complete Guide - CyberSystem Blog

Remote device actions in Microsoft Intune enable you to perform management tasks on enrolled devices without physical access. These actions help you maintain device security, troubleshoot issues, and manage device lifecycle remotely.

Understanding Remote Device Actions

Remote device actions in Intune allow you to perform various management tasks on enrolled devices. Actions are initiated from the Intune admin center and executed on devices during their next check-in with Intune.

Key Benefits

Remote Management: Manage devices without physical access
Security: Quickly respond to security incidents
Troubleshooting: Resolve device issues remotely
Lifecycle Management: Manage device enrollment and retirement
User Support: Help users with device issues

For an overview, see Remote device actions.

Available Remote Actions

Windows Actions

Sync: Sync device with Intune to apply latest policies
Restart: Restart the device
Remote lock: Lock device and reset password
Retire: Remove company data, keep personal data
Wipe: Factory reset, remove all data
Rename device: Change device name in Intune
Rotate Local admin password: Change local admin password
Run remediation: Initiate proactive remediation
Update Windows Defender security intelligence: Update antivirus definitions

iOS/iPadOS Actions

Sync: Sync device with Intune
Restart: Restart the device
Remote lock: Lock device
Retire: Remove company data, keep personal data
Wipe: Factory reset, remove all data
Delete: Remove device from Intune
Locate device: Show device location on map
Lost mode: Lock device with custom message
Disable Activation Lock: Remove Activation Lock
Remove passcode: Remove device passcode
Send custom notification: Send notification to device

Android Actions

Sync: Sync device with Intune
Restart: Restart the device
Remote lock: Lock device
Retire: Remove company data, keep personal data
Wipe: Factory reset, remove all data
Locate device: Show device location
Play Lost Mode sound: Play sound on lost device
Remove apps and configuration: Temporarily remove apps/config
Send custom notification: Send notification to device

For complete list, see Available remote actions.

Common Remote Actions

Sync Device

Syncs device with Intune to apply latest policies and configurations:

Select device in Intune admin center
Select Sync action
Device checks in and applies policies

Use Cases:

Force policy refresh
Apply new configurations
Troubleshoot policy issues

Restart Device

Restarts the device remotely:

Select device
Select Restart action
Confirm restart
Device restarts

Use Cases:

Apply system updates
Resolve device issues
Complete configuration changes

Remote Lock

Locks device and resets password:

Select device
Select Remote lock action
Device locks immediately

Use Cases:

Lost or stolen devices
Security incidents
Prevent unauthorized access

Retire Device

Removes company data and settings while keeping personal data:

Select device
Select Retire action
Confirm retirement
Company data removed on next check-in

Use Cases:

Employee departure
Device reassignment
BYOD device removal

For details, see Remote device action: retire.

Wipe Device

Factory resets device, removing all data:

Select device
Select Wipe action
Confirm wipe
Device resets to factory settings

Use Cases:

Device disposal
Security incidents
Complete data removal

Warning: Wipe removes all data permanently. Use with caution.

Executing Remote Actions

From Intune Admin Center

Navigate to Devices > All devices
Select the device
At top of device overview, select desired action
Complete required fields
Confirm action

Note: Some actions may be in overflow menu (...) depending on screen size.

Checking Action Status

Navigate to Devices > Device actions
Review action status
Check for errors or issues

Bulk Device Actions

Perform actions on multiple devices:

Navigate to Devices > All devices > Bulk device actions
Select OS and device action
Select up to maximum number of devices
Review and create

Supported Bulk Actions:

Deprovision (ChromeOS)
Lost mode (ChromeOS)
Restart
Retire
Wipe

For details, see Bulk device actions.

Best Practices

1. Use Appropriate Actions

Retire for BYOD devices
Wipe for corporate devices being disposed
Sync for policy troubleshooting
Lock for security incidents

2. Verify Before Action

Confirm correct device
Review action consequences
Check device status
Verify user communication

3. Communicate with Users

Notify users before remote actions
Explain action purpose
Provide guidance if needed
Document actions taken

4. Monitor Action Status

Check action completion
Review for errors
Verify action success
Document results

5. Use Bulk Actions Carefully

Test with small groups first
Verify action selection
Review device list
Monitor bulk action status

Important Considerations

Action Precedence

Retire, Wipe, and Delete take precedence over all other actions. A device with multiple pending actions only carries out Retire, Wipe, or Delete. Other actions are ignored.

Action Timing

Actions execute on next device check-in
Check-in typically occurs every 8 hours
Some actions can be forced immediately
Device must be online and enrolled

Data Backup

Before retiring or wiping:

Backup BitLocker recovery keys
Save local administrator credentials
Export important data
Document device configuration

Additional Resources

Conclusion

Remote device actions provide essential capabilities for managing devices remotely. By following these best practices:

✅ Use appropriate actions for scenarios
✅ Verify before executing actions
✅ Communicate with users
✅ Monitor action status
✅ Use bulk actions carefully

You can effectively manage devices remotely, respond to security incidents, and maintain device lifecycle while providing user support.

Remember: Remote actions execute on device check-in. Some actions like Retire, Wipe, and Delete take precedence over other actions. Always verify the correct device and understand action consequences before executing.