Factory Reset Protection

Organizations need to ensure the security and compliance of Android devices used for service delivery. Relution can be used to minimize effort and increase security by remotely setting up, managing, and monitoring work-related devices and promptly fixing any errors that occur. A Relution Companion for Android installed on the devices enables Android Classic / Legacy enrollment of the devices into Relution. Additionally, a factory reset can be forbidden on the devices.

Denying the factory reset is a Knox-specific restriction of the Restrictions configuration and is only available on Samsung devices with Knox. On devices from other manufacturers, the option has no effect.

FRP configuration #

1. In the Relution portal, the menu item Devices → Policies is opened and Add is clicked.
2. An Android policy is created and given a Name, followed by a click on Save.
3. After clicking Add, the Restrictions option is selected, followed by Add details.
4. Under Knox specific restrictions, in the Backup & reset section, the option Deny factory reset must be enabled. In new restrictions configurations, the option is enabled by default.
5. The configuration is saved and the current version of the policy is published.
6. To apply the policy to Android devices, the desired devices are added via the Devices with this policy tab. Alternatively, the policy is assigned to entire device groups via the Device groups with this policy tab. The selected settings are then automatically applied to the devices.

Since the option is enabled by default, every restrictions configuration denies the factory reset as long as the option is not disabled. If a device is to be reset deliberately, the option Deny factory reset is disabled and a new version of the policy is published.

All other options of the configuration are described under Restrictions →.