CODEWITHSUNDEEP
androidandroid-management-apiandroid-usbandroid-enterprise
Balpreet_1988
Balpreet_1988

Reputation: 29

Using Google EMM how to block the user from formatting the device

We want to block the user from formatting the device. So we have created a custom policy with following options. 

"factoryResetDisabled": true,
"safeBootDisabled": true,

This does not work when Policy is enrolled, as when we went to boot-loader menu we were able to successfully format the device. Also the custom policy were removed from the device. Is there any approach via which the factory reset is blocked from Boot loader as well?

Upvotes: 2

Views: 999

Answers (3)

twb
twb

Reputation: 11

factoryResetDisabled greys out the Settings > System > Factory Reset GUI option.

If you want to nerf Factory Reset from recovery-ui, you need to also set frpAdminEmails. This doesn't prevent reset, but does prevent the device being used after reset without first giving the device access to google HQ, and then logging into the device with an frpAdminEmails-whitelisted email address.

The user can still bypass this by entering fastboot mode and erasing the FRP partition.

Upvotes: 1

Dave Paurillo
Dave Paurillo

Reputation: 231

There is no method that allows a DPC to block/disable fastboot and/or recovery modes on an Android device.

You may want to check Zero-touch enrollment as a workaround for this. This will give you programmatic control over the devices. If the device is reset by any means, it will be brought back under management again the next time it is set up.

Upvotes: 2

Reaper
Reaper

Reputation: 516

Is your DPC running on device owner mode? If not, it won't work. You cannot forbid factory reset if your app is not the owner.

Upvotes: 1

Related Questions