Remote control
Lock a screen, restart, shut down or reset a password. Resets for offline laptops wait in a queue and run when they reconnect.
Endpoint security & device management
Every device, one console.
NodeGuard gives IT teams a live view of every company laptop. Lock a lost machine, reset a password or encrypt its drives in seconds, with a full audit trail.
Online2
Offline1
Protected3
- FIN-LT-014online
- ENG-WS-007online
- SALES-LT-031offline
2026-09-23 14:02:11 · session opened · ENG-WS-007
2026-09-23 13:58:40 · recovery key backed up · C:
What you can do
Control every laptop, wherever it is.
One dashboard for the jobs IT does every day, and the ones that can’t wait.
Drive encryption
Turn on BitLocker drive by drive. Every recovery key is backed up before encryption starts and stays encrypted in your vault.
Location history
See where each laptop last checked in, plus its full trail since the day it was enrolled.
Firmware protection
Know every model and BIOS version in your fleet, and protect BIOS settings on validated HP, Dell and Lenovo machines.
Malware scans Beta
Start a Microsoft Defender quick or full scan from the dashboard and review threat history per device.
Full audit trail
Every lock, reset and recovery-key reveal is recorded: who did it, to which device, when and why.
How it works
From install to protected in three steps.
01
Create a code
In your dashboard, click Add a computer. You get a code like 7KQ4-M2XP-9RTD for one laptop or a whole rollout.
02
Install NodeGuard
Run one signed installer and enter the code. Rolling out to hundreds? Push it silently with Intune, Group Policy or your RMM tool.
03
It’s in your console
The laptop connects itself to your dashboard. No config files, no keys to copy, nothing for employees to set up.
Security
Built like the keys to your fleet.
A tool that can lock every laptop has to be harder to misuse than the laptops themselves. These are the protections NodeGuard is designed around.
- Your company sees only your companyper-tenant
Every request is checked against the company that owns the device. Other companies' laptops don’t exist to you.
- Recovery keys stay locked awayAES-256-GCM
Keys are encrypted at rest. Revealing one needs your password again, a written reason, and leaves a record.
- Every command is single-use10-second grants
Each action gets a one-time authorization bound to one admin, one device and one exact request.
- Encrypted all the way to the devicevalidated TLS
Laptops connect out through a certificate-checked tunnel. No inbound ports, nothing exposed on the local network.
For IT providers
One platform, every client.
Manage IT for several companies? Each client gets its own dashboard and its own admins. Enrollment codes send every new laptop to the right client automatically.
- Laptops 128
- Encrypted 124
- Admins 3
- Laptops 46
- Encrypted 46
- Admins 1
- Laptops 12
- Encrypted 0
- Admins 2
Example view. Figures are illustrative.
- Separate dashboards per client
- Suspend or reactivate a client in one click
- Unassigned laptops stay hidden until you place them
Book a demo
Bring every device into one console.
Tell us about your fleet. Sentry Technologies will set up a pilot on a few of your own laptops and walk your team through it.
- A 30-minute walkthrough of the console
- A pilot on your own Windows laptops
- Help planning a rollout with Intune, Group Policy or your RMM tool