5a660613db
Add fallback wipe script for Windows hosts (#34994) When Fleet's built-in Windows wipe action fails (MDM command returns status 500, device not wiped), there is no documented fallback. This PR adds a script that can be run via Fleet to wipe the device when the native wipe fails. ## Changes - `docs/solutions/windows/scripts/wipe-windows-device.ps1` - Fallback wipe script - `articles/lock-wipe-hosts.md` - Reference to fallback script added under Windows wipe section ## What the script does 1. Validates and repairs WinRE if disabled (confirmed root cause of wipe failures in #34994) 2. Checks Component Store integrity via DISM 3. Suspends BitLocker for one reboot cycle 4. Triggers wipe via WMI-to-CSP bridge (`doWipeProtected`, falls back to `doWipe`), bypassing the MDM command queue Fully unattended. No user interaction required. Exits 0 on success, 1 on failure. ## Context Every fully unattended Windows wipe method uses the same RemoteWipe CSP. There is no alternative Windows API. This script adds value by fixing the root causes before calling the wipe, and by bypassing the MDM command queue where server-side failures (DB timeouts, auth errors) can occur. Closes #34994 <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Added an administrator-only Windows device wipe utility that performs staged system checks (recovery environment, system health, and disk protection), attempts to suspend drive protection for a reboot, invokes multiple local wipe triggers with fallbacks, creates a timestamped audit log of actions, and provides clear success/failure summaries with likely causes and suggested next steps. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Marko Lisica <83164494+marko-lisica@users.noreply.github.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
Fleet documentation
Welcome to the documentation for Fleet, the lightweight management platform for laptops and servers.
You can also read the Fleet docs over at https://fleetdm.com/docs.
Using Fleet
Resources for using the Fleet UI, fleetctl CLI, and Fleet REST API.
Deploying
Resources for installing Fleet's infrastructure dependencies, configuring Fleet, deploying osquery to hosts, and viewing example deployment scenarios.
Contributing
If you're interested in interacting with the Fleet source code, you'll find information on modifying and building the code here.
If you have any questions, please don't hesitate to File a GitHub issue or join us on Slack. You can find us in the #fleet channel.