How to remotely lock or unlock a device

Environment

• Knox Manage
• Android Enterprise Device Owner mode
• Fully managed devices with a work profile
• Android Legacy devices

Overview

This knowledge base article guides you through several scenarios in which you may want to remotely lock or unlock a device enrolled in Knox Manage:

• How to lock a lost phone without erasing its data
• How to unlock a device that is locked by another UEM and not connected to the Internet
• How to unlock a device that is locked by another UEM and connected to the Internet
• How to lock a device after too many unsuccessful login attempts

How do I remotely lock a phone without erasing its data?

1. In the Knox Manage console, click Device and select the checkbox for the device that was lost.
2. Click on Device Command > Device > Lock Device.
3. In the Lock Device window, fill in the Message and Phonebook fields with the appropriate contact information.
4. Click OK.

The below screen is shown on the device after the Lock Device command is sent:

How do I unlock a device that is locked by another UEM and not connected to the Internet?

If a device enrolled in Knox Manage in locked by another UEM and doesn’t have an Internet connection, the user must enter a 9-digit code to unlock it. To access this code:

1. In the Knox Manage console, click Device and select the device that was lost.
2. Click on the device name.
3. In the Security tab, next to the Lock Device line, the 9-digit unlock code is displayed.

How do I unlock a device that is locked by another UEM and connected to the Internet?

1. In the Knox Manage console, click Device and select the checkbox next to the device that appears.
2. Click Device Command > Device > Unlock Device.

How do I lock a device enrolled in Knox Manage after too many unsuccessful login attempts?

If you are using an Android Enterprise profile:

1. In the Knox Manage console, click Profile.

2. Select an existing profile.

3. Click Modify Policy.

4. Under the Android Enterprise policy drawer, select Lock Screen.

5. Modify the following policies:

   Policy	Value
   Screen Lock Policies	Apply
   Set Lock Requirements > Limit Wrong Unlock Attempts	Enter a valid number
   Set Lock Requirements > Limit Wrong Unlock Attempts > Take Action If Attempts are Exceeded (Fully Managed, Fully Managed with Work Profile)	Lock device

6. Click Save & Assign > OK to confirm and push your changes to your device.