- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
How to configure Factory Reset Protection in Knox Manage
Environment
- Knox Manage (KM)
- Android Enterprise Device Owner (AE DO) mode
Overview
Android Enterprise supports Factory Reset Protection, which protects your company devices from unauthorized use in case of theft or loss. This knowledge base article explains how to enable Factory Reset Protection on AE DO devices enrolled in Knox Manage (KM).
Setting the lock screen policy in Knox Manage
While Factory Reset Protection can be configured without setting a lock screen, our recommendation is to set a password or PIN lock.
Factory Reset Protection only blocks factory resets initiated through the bootloader, and does not prevent a user from factory resetting through the device's settings. Configuring a lock screen policy ensures you are protected against both methods.
You can set a lock screen in KM through Profile > Android Enterprise > Security. For detailed instructions on how to create, manage and assign a profile, see the KM admin guide.
Configuring Factory Reset Protection in Knox Manage
- In your KM console, go to Profile > Factory Reset Protection and set the policy to Allow.
- Navigate to the Google Developers API documentation.
- In the upper right corner, click Sign In.
- Log in with the Google Account you want to manage your devices under.
- In the right sidebar, under Try this API, enter people/me under resourceName, and metadata under personFields.
- Click Execute.
- The results of your query are shown below. Locate the ID entry and copy the numeric string to your clipboard.
- In your KM console, navigate to Profile > Factory Reset Protection.
- In the Google Account ID field, enter your Google Account email.
- In the Google User ID field, enter the numeric string you copied in Step 7.
- Click the "+" button and save the profile.
After the device is reset and restarted, Factory Reset Protection is activated and the user must sign in with the Google Account they previously used on the device.
Additional information
To enhance your password policy settings, see How do I lock a device enrolled in Knox Manage after too many unsuccessful login attempts?