Apple Business Manager (ABM)
macOS Device Enrollment
Apple Business Manager - Device Enrollment
ABM Bulk App Deployment
Apple Business Manager - Apps Deployment
Apple Configurator
Adding iOS Devices to ABM using Apple Configurator
Adding iOS devices to ABM using Apple Configurator on a Mac Computer
Enabling Supervised Mode for iPhone and iPad
Bulk SMS
Cloud Console
Configuring Wallpaper on iOS Devices Using Cyber Device Manager
How to manage mobile devices and apps using Codeproof?
Mobile Alert Management
Cloud Console TWO Factor (2FA) Authentication
Device Lookup by Phone Number, IMEI, ICCID or Employee Name
iOS7 system properties are available
Content Filtering
iPhone, iPad and iPod Touch Parental Controls in Codeproof
Web Content filtering in iPhone, iPad and MacOS
Secure Browser and Web Content Filtering
Securing Chrome Browser and Web Filtering in Android
Email Management
How to configure Office365 email or Exchange EAS on Apple devices
Configure Office365 email accounts in mobile devices
Configuring Microsoft Exchange ActiveSync Email on Samsung Devices
Configuring Microsoft Exchange ActiveSync Email on LG devices
File Management
How To Articles
How to Disable the Edge Panel on Samsung Devices
How to turn off Google Play Protect on managed devices
How to block Android Overview Button?
How to remove passwords remotely from locked Android phones
Difference between Reset All Settings v/s Erase All Content And Settings?
How to block "Settings" changes in Android devices?
How to prevent the Mobile Device Management protection from being turned off?
How to find iTunes store id or App id?
How to ping a device using Codeproof?
How to optimize Battery usage and Data usage in Android?
How to remotely change or remove the password on Android phones and tablets?
How to hard factory reset an Android Device
How to Install an APK?
How to Enable pre-loaded system apps?
How to check if a Device has a Password?
How to generate QR code for Android Device Enrollment?
How to change Android device display language
How to Block Outgoing Calls and SMS?
How to Data Wipe a device?
Known Issues
Understanding APK Deployment Limitations on Android Enterprise Profile Owner Devices
Passcode Removal Fails on Android Versions 9 and 10
Issue with website whitelisting on managed iOS Devices
Error Message After Android MDM Enrollment: Financed Device Alert
MDM Fails to Clear Passcode on iPhone
Android Q Background Location Permission Error on Moto E5 and Moto G
License Management
Mobile Device Management
Android Enterprise
Disabling factory reset protection (FRP)
Google Workspace and Codeproof
Device Admin Deprecation - What you need to know?
Paid Apps and Managed Play Store
Managed Google Playstore
Restricting access to Account Management
Battery Level low notifications
Android Enterprise Custom Messages
Factory Reset Protection (FRP)
Android Enterprise Policies
Selectively deploying apps from the managed playstore
Android Enterprise (AE) Setup
Network Monitoring in Android
Enabling pre-loaded system apps in Android Enterprise
Apple Device Management
Web clips in Apple Devices
iOS App Bundle Id
Apple Watch MDM Policies
iOS 9 MDM Restriction Policies
Blocking AppStore in Apple Devices
iPhone and iPad Restriction Policies
iOS 8 Mobile Device Management (MDM) Policies
What's new in iOS 6 MDM?
iOS7 background apps from being killed by App Switcher
Configuring iOS 7 App Policies
Deploying iOS Configuration Profiles using Profile Manager
Application Blacklisting
Blocking the default applications in Apple Devices
Suspending and Hiding Apps in Android
How to block all the downloaded apps in iOS?
Application Deployment
How to Deploy the Amazon Flex App
Android App deployment
Deploying Web Apps in Android Enterprise
iOS Enterprise App Deployment
How to Deploy Mobile Apps through Codeproof Platform
Amazon Flex App Deployment
How to update Google Play Store app
iOS App Deployment
Certificate Management
Command Center
Data Leakage Prevention(DLP)
Remotely locking Android devices
How to remotely wipe all the data from Android Phone
How to remotely lock the device with a recovery key?
Phone Remote Lock and Remote Data Wipe By SMS
Device Enrollment
Restoring Backups During MDM Enrollment
Bulk Device Enrollment
Profile based MDM enrollment for Apple Devices - BYOD Scenario
Android Zero-touch Enrollment
Android MDM Setup using ADB Script
Android Enterprise - Keep All System Apps
QR Code Enrollment
Android Enterprise QR Code Generation
Apple Devices Enrollment Techniques
Device Enrollment Wizard
Device Tracking
Tracking the location of iPhone and iPad devices using MDM
Enable Lost Mode in Android
How to enable location permissions?
How to prevent the location service from being turned off?
GPS location tracking using Codeproof
Prevent end users from disabling GPS Locations
How to prevent someone from disabling find my iphone?
How to improve mobile phone location accuracy
Hotspot Management
Kiosk
Advanced Mobile Kiosk Manager
How to Create Web Apps in Kiosk App Mode on iPad and iPhone
How to update an App in Single App Mode?
Enabling Single App mode in iPhone, iPad and iPod
Mobile Apps whitelisting
How to turn-off kiosk mode?
Kiosk screen lock with a pin
Android Kiosk with Multiple and Single App Mode
Mobile Kiosk Branding
MDM Lockdown
MDM Types
MSP
Managed Contacts
Managing Phone Contacts with MDM Solutions
Force Syncing contacts in the Contact Manager
Disable Contacts Sync in the Outlook Exchange Email
Permissions Management
Android Enterprise Permission Management
How to enable Android app permissions?
Block apps based on android permissions
Mobile apps access permissions monitoring using Codeproof
Policy Management
Proxy Management
Remove MDM
Bulk Device Deletion
How to remove MDM from iPhone, iPad and iPod?
Remove MDM from ABM-DEP Enrolled Devices
Disable MDM using a code
How to remove Codeproof ?
Remove Device Admin MDM
Removing Android Enterprise MDM
SIM
Screenlock and Passcode
Remotely locking iPhone, iPad or iPod Touch devices
iOS Passcode Management
How to turn off Passcode Lock on iPhone and iPad
How to unlock iPhone, iPad and iPod touch devices?
Device screenlock status and enabling passcode policy
How to enable passcode lock in iPhone and iPad
System Update
Android System Update Requirements
Android System Update in the Single App LockTask mode
Apple iOS Software Update
Android System Update
WiFi Management
Windows MDM
Firewall Configuration for Cyber Device Manager MDM
Managing Phone Notifications on Android
MDM System Auditing
Mobile Expense Control
Products and Services
SiteSecure - Campus Camera Blocking
Distracted Driving
Secured Remote Access
Codeproof® Call Blocker
Managed Mobile Hotspot
Samsung Knox
Codeproof Samsung KNOX
The new Samsung MDM Agent App
Call and SMS blocking
Access Point Name (APN) Policy Configuration
What Is
What is "Install From Unknown Sources" settings?
What are Web Apps?
What is Android Enterprise?
What is a supervised device?
Apple Configurator and MDM
Android LockTask Mode and MDM
ABM, Apple Configurator, and MDM
What is Android For Work?
mdm-errors
- All Categories
- Mobile Device Management
- Android Enterprise
- Factory Reset Protection (FRP)
Factory Reset Protection (FRP)
Updated by Satish Shetty
The Codeproof EMM platform offers an Android factory reset protection (FRP) for the managed devices. The enterprise factory reset protection secures the device from the unauthorized factory reset (such as external hardware reset using Volume Key + Power Key). With the enterprise FRP, The MDM administrator can assign a single or multiple google accounts to force authenticate after the unauthorized factory reset. The default built-in consumer factory reset protection is designed to deter device theft by forcing google sign-in after the unauthorized factory reset. However, the built-in consumer factory reset protection relies on active gmail account in the device and it may not work for the below enterprise provisioned scenarios.
1. Devices with no active Gmail account
By Default, The android uses existing google account in the device to authenticate after the unauthorized factory reset. However, in many cases such as Kiosk mode or COSU scenarios, there may not be any gmail account active in the device. In this case the enterprise factory reset protection is required to protect the device from being stolen and re-provisioned.
2. Devices with active Gmail account
In an enterprise environment, even with active user gmail accounts exists in the device, The IT administrator needs end user gmail credentials to authenticate the device after the unauthorized factory reset. However, if the organization doesn't know an employees account credentials ( for example, the employee no longer in the organization), factory reset protection can block the organizations ability to issue a device to another employee.
Below are the steps to enable the enterprise factory reset protection.
Steps:
- Login to Cloud Console.
- Go to "Mobile Policy Manager" from the top menu.
- Select a single device or a group of devices from the left pane.
- On right side pane, go to "Enterprise Factory Reset Protection" tab.
- Click on "Enable" check box and then click on "Add Account" to add google accounts. You can add a single or multiple google accounts.
- Hit "Save" to save and publish the policies instantly.
Mobile Policy Editor:
Selecting the Google Accounts:
The below Device Property shows the FRP status in the device.
In the above picture, value "default" means no enterprise FRP account has been added. The device will use user gmail account for factory reset protection.
In the above picture, value "false" means enterprise factory reset protection is disabled in the device.
In the above picture, value contains the account id number indicates that google account has been added as part of the enterprise factory reset protection.