Skip to main content

Lock Stolen System

Summary

This is the RMM Implementation of Lock Stolen System Script. This task is used to track and lock down stolen systems.

Dependencies

Custom Fields

User Parameters

NameExampleAccepted ValuesRequiredDefaultTypeDescription
BitlockerPasswordpassword123!TrueP@$$word123Text StringThe password to use to enable BitLocker on the target machine
BitlockerMessageThis system been marked as lost, please contact support@provaltech.comTrueThis system been marked as lost, please contact support@provaltech.comText StringThe message to display on the BitLocker lock screen.

Task Creation

Create a new Script Editor style script in the system to implement this task.
Create Script
Script Creation

Name: Lock Stolen System Description: This task is used to track and lock down stolen systems Category: Custom
Category

Parameters

Add a new parameter by clicking the Add Parameter button present at the top-right corner of the screen.

Add Parameter

This screen will appear.

Parameter Screen

  • Set BitlockerPassword in the Parameter Name field.
  • Select Text String from the Parameter Type dropdown menu.
  • Set P@$$word123 as Default Value.
  • Click the Save button.
  • It will ask for confirmation to proceed. Click the Confirm button to create the parameter.
    Parameter1

Add another parameter by clicking the Add Parameter button present at the top-right corner of the screen.

  • Set BitlockerMessage in the Parameter Name field.
  • Select Text String from the Parameter Type dropdown menu.
  • Set This system been marked as lost, please contact support@provaltech.com as Default Value.
  • Click the Save button.
  • It will ask for confirmation to proceed. Click the Confirm button to create the parameter.
    Parameter2

All the parameters will look like as shown below:
Parameters

Task

Navigate to the Script Editor section and start by adding a logic. You can do this by clicking the Add logic button at the bottom of the script page.
Add Logic

Step 1 Logic: If/Then

Select IF/Then Logic from the Add Logic dropdown menu.

IF/Then

Row 1a Condition: Get Custom Field

  • Replace Output with Custom field
  • Search and select Mark System As Stolen Custom Field from the dropdown
  • Select Equals as parameter
  • Set False in the parameter
    image7

Row 1b Function: Script Exit

  • Add a new row by clicking the Add Row button.
  • Search and select the Script Exit function.
  • In the script exit message, simply type

Machine is not marked as Stolen. Flag the "Mark System as Stolen" custom field to run this task.
image8
image9

Row 2 Function: PowerShell Script

Search and select the PowerShell Script function.

PowerShell Script Function Image

The following function will pop up on the screen:

Function Popup Image

Paste in the following PowerShell script and set the expected time of script execution to 300 seconds. Click the Save button.

PowerShell Script 1

Row 3 Function: Set User Variable

  • Search and select the Set User Variable function.
  • Set IPInformation as Variable Name
  • Set %Output% as Value
  • Hit Save to save the changes

image10
image11

Row 4 Function: Script Log

  • Add another function Script Log in the IF section.
  • In the script log message, simply type %output% so that the script will send the results of the PowerShell script above to the output on the Automation tab for the target device.
    Script Log

Row 5 Function: PowerShell Script

  • Search and select the PowerShell Script function.
  • Paste in the following PowerShell script and set the expected time of script execution to 300 seconds. Click the Save button.

PowerShell Script 2

Row 6 Function: Set Custom Field

  • Search and select the Set Custom Field function.
    image12

  • Search and select the Current Location and IP Details Custom Field.

  • Type %output% in the Value box and click the Save button.

Step 7 Logic: If/Then/Else

  • Add a new If/Then/Else logic from the Add Logic dropdown menu.
    image13

Row 7a: Get Custom Field

In the If section, perform the below steps

  • Replace Output with Custom field
  • Search and select System Lockdown Custom Field from the dropdown
  • Select Equals as parameter
  • Set True in the parameter
    image14

Row 7b Function: PowerShell Script

  • Add another row in the IF section
  • Search and select the PowerShell Script function.
  • Paste in the following PowerShell script and set the expected time of script execution to 300 seconds. Click the Save button.

PowerShell Script 3

Row 7c Function: Script Log

  • Add another function Script Log in the IF section.
  • In the script log message, simply type %output% so that the script will send the results of the PowerShell script above to the output on the Automation tab for the target device.
    Script Log

Row 7d Function: Create Ticket

  • Add another function Create Ticket in the IF section.

  • Set below as Subject:
    Lost or stolen system at %companyname% has come online!!

  • Set below as Description:

    Bash Script 1

  • Set Emergency as Priority.
    image15

Row 6e Function: Create Ticket

  • Add another function Create Ticket in the ELSE section.
  • Set below as Subject:
    Lost or stolen system at %companyname% has come online!!
  • Set below as Description:

Bash Script 2

  • Set Emergency as Priority.

image25

Row 8 Function: CMD Script

Search and select the Command Prompt Script function.
CMD Function

The following function will pop up on the screen:
Function Popup

Paste in the following CMD script and set the expected time of script execution to 300 seconds. Click the Save button.

Bash Script 3

Completed Task

image16

Script Deployment

This task has to be scheduled on the Stolen System group for auto deployment. The script can also be run manually if required.

Go to Automations > Tasks.
Search for Lock Stolen System task.
Then click on Schedule and provide the parameter details as necessary for the script completion.
image24

Output

  • Script Logs
  • Tickets

Changelog

2025-04-10

  • Initial version of the document