Remote locking a multi-user device to a set of users

A method for restricting access to a computer device, the method comprising:

• receiving, at an operating system on the computer device, a lost device message including a device identifier identifying the computer device and an authorized user list including at least one user identification that identifies a user authorized to access the computer device in a lost state;
• receiving a customized lock screen message to present on the computer device;
• logging out existing users on the computer device and invalidating credentials of the existing users on the computer device based at least on receiving the lost device message;
• activating a lock screen including presenting the customized lock screen message on the computer device and setting the computer device to the lost state;
• initiating a log on manager that is configured to recognize the lost state and to restrict access to the computer device to users included in the authorized user list;
• receiving, at the log on manager, at least one log on attempt from a user utilizing a user identification and a password;
• performing, at the computer device, a first comparison of the received user identification with the at least one user identification included in the authorized user list to generate a first authentication of the received user identification when a match occurs between the received user identification and the at least one user identification included in the authorized user list;
• transmitting the received user identification and the password when the first authentication occurs to perform a second comparison of the received user identification and the password with stored credentials on a network based server for a second authentication of the received user identification and the password;
• and
• granting access to the computer device based at least on the first authentication and the second authentication.

A server, comprising:

• memory configured to store data and instructions;
• at least one processor configured to communicate with the memory, wherein the at least one processor is further configured to:
• receive a notice identifying a computer device;
• receive at least one user authorized to access the computer device;
• create an authorized user list including at least one user identification that identifies the at least one user authorized to access the computer device in a lost state;
• create a customized lock screen message to present on the computer device;
• send the customized lock screen message and a lost device message including a device identifier identifying the computer device and the authorized user list including the at least one user identification that identifies a user authorized to access the computer device in a lost state to the computer device;
• receive a user identification and a password of a user requesting access to the computer device;
• determine whether the user identification and the password match stored credentials associated with the at least one user identification included in the authorized user list;
• and
• send a validation message to the computer device, wherein the validation message indicates that the user is authorized to access the computer device.