Linux Lock Device Script

#!/bin/bash

# This resource is provided as a convenience for Level users. We cannot 
# guarantee it will work in all environments. Please test before deploying 
# to your production environment. We welcome contributions to our community 
# library

# Level Library
# https://level.io/library/script-linux-lock-device

# Initialize script-scoped error flag
script_errors=false

echo "Killing all user sessions..."
for user in $(who | awk '{print $1}' | sort | uniq); do
    pkill -KILL -u "$user"
    if [[ $? -ne 0 ]]; then
        echo "ALERT: Failed to kill session for user $user."
        script_errors=true
    fi
done

echo "Fully locking all user accounts (SSH & local access)..."
for user in $(awk -F: '{if ($3 >= 1000 && $3 < 65534) print $1}' /etc/passwd); do
    passwd -l "$user" &> /dev/null
    usermod -L -e 1 "$user" &> /dev/null
    if [[ $? -ne 0 ]]; then
        echo "ALERT: Failed to lock user account $user."
        script_errors=true
    fi
done

echo "Locking root account..."
passwd -l root &> /dev/null
usermod -L -e 1 root &> /dev/null
if [[ $? -ne 0 ]]; then
    echo "ALERT: Failed to lock root account."
    script_errors=true
fi

if [[ "$script_errors" == true ]]; then
    echo "ALERT: Errors occurred during execution. Exiting with code 1."
    exit 1
fi

echo "All users have been kicked off and all accounts are completely locked."