@Ryan Jefrries Thanks for posting in our Q&A.
Based on my research, Microsoft Intune for Education doesn't have the feature to lock devices. Why don't you consider using intune replacing intune for Education to manage devices? I will share some information what I know.
*
Deploy and manage both Windows desktops and laptops across multiple schools in different physical locations.*
--Enroll these devices to intune
https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment
*
Create and manage Microsoft accounts for staff and students, allowing them to access Microsoft Office and other applications.*
--We can create users and grant permissions in intune portal.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/users-add
Also, we can configure conditional access policies to control the devices and apps that can connect to your email and company resources.
https://learn.microsoft.com/en-us/mem/intune/protect/conditional-access
*
Track our Windows devices and lock them if necessary.*
--Microsoft Intune reports allow you to more effectively and proactively monitor the health and activity of endpoints across your organization.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/reports
We can remotely lock devices.
https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-remote-lock
Hope it will clarify something.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.