Android kiosk enrollment: Device Owner mode vs basic enrollment in HexnodeSolved

Hi @melora ,

For Android kiosk devices, the recommended approach is Android Enterprise Device Owner mode, also called Fully Managed device enrollment.

If you are setting up dedicated kiosk tablets, Device Owner mode gives Hexnode the highest level of management control. It is typically used with QR code enrollment during device setup, so the tablet must be factory reset before enrollment.

This mode is recommended because it supports:

• Full kiosk lockdown, including stronger control over the status bar, system settings, hardware buttons, launcher behavior, and kiosk exit options.
• Seamless remote troubleshooting, where remote view/control can be used without requiring an on-site user to approve every session.
• Silent app management, allowing apps and updates to be installed in the background without user confirmation.

For kiosks that need reliable lockdown and remote management, Device Owner mode is the best option even though it requires resetting the device.

Regards,
Isabel Lora
Hexnode UEM

Is Device Owner mode the same thing as Android Enterprise? Also, what Android versions are supported? Some of our kiosk tablets are pretty old.

Yes. Device Owner mode is part of Android Enterprise management. When a device is enrolled as Device Owner, Hexnode becomes the device owner app and receives deeper management privileges than a normal app-based enrollment.

Hexnode supports Android devices starting from Android 5.0 Lollipop. However, Android 10 or later is recommended for the best kiosk performance, remote management behavior, and overall reliability.

On very old Android versions, some kiosk and remote-control capabilities may be limited by the OS or device manufacturer.

Regards,
Isabel Lora
Hexnode UEM

So if we don’t factory reset and just install the Hexnode UEM app manually, will kiosk mode still work at all?

Yes @mila_beck , you can enroll without a factory reset by installing the Hexnode UEM app from the Google Play Store or through a web enrollment link. This is generally referred to as basic Android enrollment.

However, it has important limitations compared with Device Owner mode:

• Kiosk mode may require the user to manually select Hexnode UEM as the default Home/Launcher app.
• Lockdown is not as complete. Depending on the Android version, users may still access the notification shade, system settings, or other areas outside the intended kiosk flow.
• Remote control sessions usually require someone at the device to tap Allow each time.
• App installs and updates may show confirmation prompts instead of installing silently.
• Users may be able to clear app data, change settings, or remove management more easily.

Basic enrollment can work for lighter management, but for production kiosks that need full lockdown and unattended troubleshooting, Android Enterprise Device Owner enrollment after a factory reset is the better choice.

Regards,
Isabel Lora
Hexnode UEM