Menu

Unenroll devices

You can unenroll the devices registered in the Knox Manage server. The methods for unenrollment differ depending on the device type.

To delete the Work Profile from Android Enterprise devices or delete Knox Manage from Fully managed devices, send the Unenroll service command to devices.

NOTE— When you unenroll Fully Managed or the Fully Managed with Work Profile devices, the devices will be factory reset and the microSD cards of the devices with Android 7.0 (Nougat) - 8.0 (Oreo) can be wiped. Please be cautious of potential data loss.

To simply change a logged in user’s details, send the Delete account command, and then allow the user to log in again.

Unenroll connected devices

To unenroll devices that are connected to the server, complete the following steps:

1. Navigate to Device.

2. On the “Device” page, click a checkbox for a device you want to unenroll.

3. Click Unenroll.

4. In the “Unenroll Device” window, click OK.

Unenroll disconnected devices

When a device is unable to communicate with the server, you can send an offline unenrollment code to the device. Then, the user can change the device’s status manually and unenroll the device.

To unenroll devices that are offline, complete the following steps:

1. Navigate to Device.

2. On the “Device” page, click a checkbox for a device you want to unenroll.

3. Click Unenroll.

4. In the “Unenroll Device” window, check the Offline Unenrollment Code.

5. Click Force Unenroll.

  • The unenrollment device command will be sent to the device.

6. Inform users of the use of the offline unenrollment code from step 4.

  • When the user enters the received offline unenrollment code, the device will become unenrolled, corresponding to its status on the server.
NOTE— You can choose to delete the internal applications installed on Android devices and all of the applications installed on devices with iOS 10 to 13 upon unenrollment.

To set automatic deletion, navigate to Setting > Configuration > Basic Configuration > Device, and then set Delete App upon Unenrollment to Yes.

Allow users to unenroll their devices

If a device is connected to a network and can establish communication with the server, then users can unenroll the devices by uninstalling the agent.

To allow the user to uninstall the agent, complete the following steps:

  1. Navigate to Setting > Knox Manage Agent Policy.

  2. On the “Knox Manage Agent Policy” page, click the "Default" tab.

    You can also add more agent policy sets by clicking .

  3. Set the Allow Unenroll Request policy to Allow.

  4. Click Save & Apply.