How to Remotely Wipe a Lost School Laptop Without Ending the Recovery

A lost school laptop can create both a data-protection and a device-recovery problem. Staff laptops may contain downloaded reports, saved browser sessions, local spreadsheets, or other records that should not remain accessible if the device has been stolen.

FERPA governs access to and disclosure of education records, and the U.S. Department of Education defines personally identifiable information in education records to include direct identifiers, indirect identifiers, and other information that can identify a student.

Senturo gives K-12 IT teams a way to remotely wipe a lost laptop when protecting local data becomes the priority. Senturo Wipe removes user files, accounts, and personal data from supported Windows and macOS devices while keeping the Senturo agent installed so the device stays enrolled for recovery.

What Does Senturo Wipe Do?

Senturo Wipe removes user files, accounts, and personal data from Windows and macOS devices. It does not remove the Senturo agent, and the device remains enrolled in Senturo after the action completes. The wipe is irreversible.

If the priority is to remove local user data while keeping Senturo available for recovery, Senturo Wipe supports that workflow.

When Should You Lock or Wipe a Lost Laptop?

Start by considering how likely the laptop is to return and how much risk the local data creates.

If the laptop appears misplaced and recovery is likely, remote lock is the lower-impact option because it restricts use without deleting the user's files. A wipe becomes more appropriate when the device is believed stolen, the local data creates unacceptable exposure risk, or the district's incident policy calls for permanent data removal.

NIST's lost-laptop security scenario starts with understanding the exposure: what was stored on the laptop, how the device was protected, and what systems or accounts it could access. For a school IT team, that means reviewing available recovery information before deciding whether permanent data removal is the right next step.

How to Remotely Wipe a Laptop With Senturo

Senturo Wipe requires the device to be in Missing Mode before the wipe option becomes available. Senturo’s normal monitoring uses 10-minute location updates, while Missing Mode switches the device to real-time tracking.

‍

‍

For quick reference, the workflow is:

1. Select the device. Open Devices and choose the Windows or macOS laptop you need to wipe.
2. Open Management. Go to the device's Management tab.
3. Set the device to Missing. Change Device Status to Device Missing. Before moving on, save any location, network, screenshot, or incident information your district needs.
4. Select Senturo Wipe. Under Security Actions, choose Wipe.
5. Confirm the action. Enter your Senturo password, accept the liability confirmation, and select Wipe Device.

The wipe cannot be reversed. If the laptop is offline, do not treat the action as completed or assume you are receiving fresh location data. 

For the current product steps and requirements, see How to Use Senturo Wipe.

Can You Automate a Remote Wipe?

The walkthrough above also shows how to automate a wipe. You can run one automatically through a Security Policy Automation, where the condition and the action are separate parts of the workflow.

For example, a geofence can provide the location condition that triggers an automation. The automation can then run ordered actions such as Set Missing Mode, Pull Current Location, Send Email to Administrator, Senturo Lock, or Wipe Files on Device.

We recommend placing Set Missing Mode first in loss or theft workflows, so the device enters the active recovery state before later actions such as Senturo Lock or Wipe Files on Device run.

Because Wipe Files on Device is destructive, we also recommend pairing it with an administrator notification. A district can instead automate Missing Mode, a lock, and an alert while keeping the wipe itself as a manual decision. The right choice depends on the district's incident-response and approval policy.

What Should Be in Place Before a Laptop Goes Missing?

Remote wipe is most useful when the district has already decided who can use it and under what circumstances.

Confirm that Senturo is installed on the Windows and macOS laptops covered by the recovery policy. Document when an incident should move from lock to wipe, what evidence to preserve before removing data, and which staff should be allowed to perform destructive actions.

Senturo's roles and permissions separate Remote Wipe from other capabilities, so you can assign access based on staff responsibilities.

‍

‍

Frequently Asked Questions

Which operating systems support Senturo Wipe?

Senturo Wipe currently supports Windows and macOS. Other security actions depend on the operating system and any connected MDM.

Who can run Senturo Wipe?

Senturo controls Remote Wipe through role-based permissions. Districts should assign access based on staff responsibilities and limit destructive actions to the roles that need them.

Do you need an MDM to use Senturo Wipe?

No. Senturo Wipe is a Senturo action and does not require an MDM. Senturo can also work alongside Google Admin Console, Microsoft Intune, Jamf Pro, Jamf School, and Incident IQ.

Can a Senturo Wipe be undone?

No. Wiped data cannot be recovered from the device. Confirm the device, preserve any records required for the incident, and make sure the wipe matches your district's policy before sending it.

Does the device stay visible after a Senturo Wipe?

The Senturo agent remains installed, and the device remains enrolled after the wipe. Continued reporting still depends on the device being powered on and able to communicate with Senturo.