The essentials, on every platform you use.
Wardlark manages Macs, Windows PCs, iPhones and iPads from one portal. Here's exactly what works where.
At a glance
| Feature | Mac | iPhone and iPad | Windows |
|---|---|---|---|
| Device inventoryModel, serial, OS, storage, last check-in | Yes | Yes | Yes |
| Remote lockFor a lost or stolen device | YesLocks with a 6-digit PIN | YesLocks to the passcode screen | YesRestarts to a locked sign-in screen with your message |
| Remote wipeTyped confirmation, recorded in the audit log | Yes | Yes | Yes |
| Disk encryptionEnforced, with the recovery key escrowed | YesFileVault | Not neededAlways on | YesBitLocker |
| Passcode rulesMinimum length, set to Cyber Essentials defaults | Yes | Yes | Yes |
| Screen-lock timeoutLocks after a few idle minutes | Yes | Yes | Yes |
| OS update trackingWho's behind, and by how many days | Yes | Yes | Yes |
| FirewallReported and switched on | Yes | Not neededNo user firewall on iOS | Yes |
| Removal alertsTells you if someone removes management | Yes | Yes | Yes |
| Recovery-key revealFor admins, after a fresh sign-in, audited | Yes | Not needed | Yes |
Android isn't supported. Updates are tracked and reported today; forcing them to install is on the way.
macOS
Your team downloads a profile from their enrolment link and approves it in System Settings. That takes about two minutes.
- FileVault switched on, with the recovery key escrowed before the Mac shows as compliant.
- Passcode and screen-lock rules applied as soon as the Mac joins.
- Firewall reported and switched on.
- Lock with a 6-digit PIN, or wipe, from the portal.
Macs enrolled this way aren't supervised, so the user can remove the profile. If they do, we tell you straight away and the Mac drops out of policy.
iPhone and iPad
Company-owned iPhones and iPads enrol through Safari with a profile. Personal phones (BYOD) are coming later.
- Passcode required, with length and auto-lock rules.
- Data protection is always on once a passcode is set.
- Lock or full wipe from the portal.
- OS version tracked against the latest release.
As with Macs, the profile can be removed. We alert you if it is, so a device never quietly drops off your list.
Windows
Your team connects the PC from Settings, under Access work or school. No Microsoft Entra ID or Intune licence needed.
- BitLocker switched on, with the recovery key escrowed by a small Wardlark helper app.
- Passcode, screen-lock and firewall rules through Windows policy.
- Lock restarts the PC to a sign-in screen showing your message. A hard lock blocks every sign-in until you unlock it.
- Wipe resets the PC to factory settings.
Windows 10 and 11 Home can't be managed: Microsoft only allows it on Pro, Business, Enterprise and Education. Upgrading Home to Pro is done from Settings and keeps your files.
Not in Wardlark yet
We'd rather tell you now than after you've signed up. These aren't in the first version:
- Android devices
- Apple Business Manager automated enrolment, and Windows Autopilot
- Personal devices (BYOD)
- Installing apps, and Wi-Fi, VPN or certificate profiles
- Scripts, and finding a lost device on a map