Ja, ich suche eine Lösung
Options?
We had several business laptops stolen a few months back from a storage locker by unknown guest or staff. One laptop is periodically being turned on and is reporting back.
SEP + Office 365 are both reporting back through respective cloud server admin centers. The user has only been logging in using a Guest account that was setup with no password and limited rights. Other accounts with passwords and higher level exist but never reported as being used.
In the SEP logs I have an IP address it’s coming from which has been static (consistent and not changing) and is owned by AT&T. Thus, does not seem to be roaming. No IP searches have given me further clues other than its local IP address to our town.
I've already made a Police report. I have not disabled either technology because I did not want to lose information that may lead to whom stole the laptops. I've been hoping another know IP address would pop-up but not yet. Biggest concern is finding out if it was a staff person that's still employed. Retrieving the laptop is not the concern, it has little value and no sensitive data.
HOW can I use SEP on this managed device to gather more info, such as browsed sites, apps being used or other ideas (clues to who is using it), or reverse hack to gather more info? Can I eventually remote wipe or use SEP to basically make the device unusable. If I can't find the perpetrator, I don't want them to be able to freely benefit from their thievery, but my goal is finding out if it's a staff person so we can deal with it.
Any ideas or advice welcomed about the laws to adhere to or hacks available, even if on the fence when it comes to laws. I do realize it could have been sold to unsuspecting persons, but our company name is branded on the laptops, so probably not so naive.
Thank you
