Android Enterprise Samsung device stuck on mandatory VPN activation in Hexnode for WorkSolved

Hi @timo-liam,

This behavior usually happens when VPN activation is enforced through Android data restriction settings or the Android Enterprise enrollment configuration.

If VPN Auto Enable was configured as part of the enrollment profile and you want to modify the core enrollment behavior itself, re-enrollment may be required for devices that have already gone through that flow. However, if the immediate issue is the blocking VPN activation prompt inside the Hexnode for Work app, changing the global data restriction settings will often clear the prompt without needing to re-enroll the device.

To check and disable this in the Hexnode UEM portal:

1. Go to Admin > General Settings > Data Restriction (Android).
2. Review the following options:
   • Prompt to activate VPN 
   • Prompt to activate VPN while in kiosk mode 
3. Disable the relevant prompt options if they are not required, and click Save.

Regarding the missing sync option, if the Sync Device action is not visible, simply try reopening the Hexnode for Work app on the device or wait a moment for the device to check in automatically. Once the updated data restriction setting is applied to the device, the mandatory VPN prompt should no longer block access to the app.

Best regards,
Eden Pierce
Hexnode UEM

Disabling the VPN prompt under Data Restriction worked perfectly.Thank you for the help, that sorted it out.