Managing factory reset protection for

Android Enterprise

and

Android Management

devices

You can use the factory reset protection profile to control the factory reset protection feature for your organization’s

Android Enterprise

and

Android Management

devices that have been activated using the

Work space only

and

Work and personal - full control

activation types.

Factory reset protection requires an

Android

device user to enter their

Google

account credentials to unlock a device that has been reset to factory settings. It is enabled by default when a user adds a

Google

account to the device. This profile allows you to disable factory reset protection or specify a user account that can be used to unlock a device after it has been reset to factory settings.

Factory reset protection profiles provide the following options:

Option	Description	Supported activation types
Disable factory reset protection	Anyone can reset a lost or stolen device to factory settings and begin using the device. This option is useful if a known user has forgotten their Google account credentials or if you need to reset a device owned by your organization that has been returned to you.	Android Enterprise
Enable and use previous Google account credentials when the device is reset to factory settings	Users can use Google account credentials that are already associated with the device after a factory reset. This is the default behavior. If a device is reset to factory settings, the user must log in to the device using Google account credentials that are already on the device. This prevents someone with a lost or stolen device from resetting and using it themselves.	Android Enterprise
Enable and specify Google account credentials when the device is reset to factory settings	You can specify Google account credentials that a user can use to log in to the device after it has been reset to factory settings. This option allows your organization to control who can log in to a device after it is reset to factory settings. BlackBerry recommends that you use this option only if you fully understand the device user experience. If your organization uses a Managed Google Play account, you may want to use this option because a Google account does not exist on your organization's devices and therefore factory reset protection is not available on the device.	Android Enterprise Android Management

There are several ways that a device can be reset to the default factory settings. Factory reset protection responds differently depending on the method used. For more information about trusted and untrusted resets, see KB 56972.