Hello @diane_ ,
For Android multi-app kiosk to work in Hexnode UEM, the device must be enrolled in Device Owner mode.
If the tablet is enrolled as an Android Work Profile or Profile Owner device, kiosk policies will not lock down the entire device. In that mode, Android only allows management inside the work profile, so the user may still see and access apps outside the managed profile.
To fix this, re-enroll the tablet using an Android Enterprise enrollment profile where the Enterprise Management Type is set to Device Owner.
Recommended flow:
- In Hexnode UEM, go to Manage > Endpoints.
- Select the affected device.
- Use Actions > Disenroll Device.
- If the tablet was already factory reset before disenrollment completed, go to Reports > Built-in Reports > Device > Disenrollment pending devices.
- Select the device and use Actions > Mark as disenrolled.
- On the reset Android device, start Android Enterprise QR enrollment.
- Before scanning the QR code, confirm that the QR enrollment profile is configured for Device Owner, not Work Profile.
- Complete enrollment and allow the multi-app kiosk policy to sync again.
The device cannot be deleted while it is still considered enrolled. It must first be disenrolled or marked as disenrolled from the pending disenrollment report.
Regards,
Simon Scott
Hexnode UEM