So sorry, no way to help you. The device can be configured this way and it's intentional feature of the device.
Unauthorized person is just not allowed to reconfigure or even reset the device (if the device is configured with such feature active). Authorized administrator knows password.