We have created a lockdown profile in the devices, but in some cases we deactivate it through scripts when we give remote support. Reason why we need to know through a query or report, how can I identify devices that have left the lockdown mode or are disabled at this time.