Restrict users from wiping the laptop

Could use the REAgentc https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/reagentc-command-line-options?view=windows-11

Evaluation

# Get the output from reagentc.exe /info and trim any extra whitespace
$string = (& reagentc.exe /info).trim()

# Parse values from the string using regex
$regex = 'Windows RE status:\s+(\w+)'
$matches = [regex]::Matches($string, $regex)
$WindowsREStatus = $matches.Groups.Value[1]

IF($WindowsREStatus -ne 'Enabled'){
    exit 1
}

Remediation

# Get the output from reagentc.exe /info and trim any extra whitespace
$string = (& reagentc.exe /info).trim()

# Parse values from the string using regex
$regex = 'Windows RE status:\s+(\w+)'
$matches = [regex]::Matches($string, $regex)
$WindowsREStatus = $matches.Groups.Value[1]

IF($WindowsREStatus -ne 'Enabled'){
    Write-Output "Windows Reset is Enabled. Disabling."
    & reagentc.exe /disable
}

# Validate
# Get the output from reagentc.exe /info and trim any extra whitespace
$string = (& reagentc.exe /info).trim()

# Parse values from the string using regex
$matches = [regex]::Matches($string, $regex)
$WindowsREStatus = $matches.Groups.Value[1]

IF($WindowsREStatus -ne 'Enabled'){
    Write-Output "Remediation Fialed."
}else{
    Write-Output "Windows Reset Status set to $WindowsREStatus"
}

Let me try this one !!