topic Re: Android profile to disable factory reset does not work in Endpoint Security

Android profile to disable factory reset does not work

HiroY — Wed, 01 Jun 2022 21:05:38 GMT

I have an android profile to disable factory reset but it seems that I can still perform a factory reset.

I confirmed that the correct tags are assigned to the profile and the actual device. Tried it twice on a Pixel 4a and 5a -- same results.

Can anyone else confirm if it's happening on their end? If so, this is a major security concern for us...

Re: Android profile to disable factory reset does not work

Philip D'Ath — Wed, 01 Jun 2022 22:18:59 GMT

Are your devices in Device Owner mode?

You can't stop a low-level factory reset, but you can stop the one the users can initiate from the phone's software interface.

Re: Android profile to disable factory reset does not work

HiroY — Wed, 01 Jun 2022 22:21:39 GMT

Sorry, forgot to mention that. Yes, the devices are in Device Owner mode and running Android 12 with the latest patches.

In the past, going the UI route to factory reset would have prevented the user from doing so, but it doesn't seem to prevent that now.

Re: Android profile to disable factory reset does not work

HiroY — Mon, 06 Jun 2022 16:02:39 GMT

Update: I was able to get this resolved after calling support. It appears that there are two places where you can disable factory reset for Android profiles. One is under Android Device Owner, and the other is under Android Restrictions. The former didn't work for me, but the latter option did the trick.