Problem overview
When a device has been secured using the Lock Device and All Users Automation, you need a quick, reliable way to revert those changes. This automation removes restrictions, re-enables user accounts, and restores functionality without risking downtime or data loss.
When any of these happen
Lock Tag Removed
Perform these actions
Windows - Unlock Device
With conditions
Windows Unlock Device Alert
With conditions
macOS - Unlock Device
With conditions
macOS Unlock Device Alert
With conditions
Linux - Unlock Device
With conditions
Linux Unlock Device Alert
With conditions
When triggered—often by removing the “Lock” tag—the Unlock automation undoes the previously applied security measures. It re-enables local accounts on Windows, macOS, and Linux, and in the case of Windows domain-joined devices, it restores Active Directory account access. This ensures users can log in and resume work promptly, while Level still retains full management capabilities.
Use cases
- Quickly restoring access after a security lock
- Resuming operations on devices verified as safe
- Undoing false-positive lock incidents
- Simplifying credential management for return-to-service devices
Recommendations
- Test the Unlock Process: Before deploying widely, confirm it works on a non-critical test device.
- Combine With Lock Automation: Use this in tandem with the Lock Device and All Users Automation to create a seamless security workflow.
- Monitor Domain Restoration: Validate domain credentials are active again for Windows devices.
- Review Alerts: Check for any error alerts to ensure the unlock process was fully successful.