Can Hexnode bypass Google Factory Reset Protection during Android enrollment?Solved

Hello,

Thanks for reaching out to Hexnode Connect.

To answer your question directly: No, Hexnode cannot disable or bypass an active Factory Reset Protection lock while a device is still in the initial setup wizard.

Because Hexnode policies require an active management channel to be associated, they cannot be applied before the device successfully completes its enrollment. If an Android device is already halted at the Google verification screen after a wipe, it has not yet established a connection with Hexnode. You will need to manually clear this existing lock by entering the previously synced Google account credentials.

However, Hexnode can prevent this from happening on all future wipes. You can configure a policy that automatically disables FRP the moment the device finishes its initial enrollment.

Here is how you can set this up for future resets:

1. Navigate to Policies in your Hexnode portal and create or edit an Android policy.
2. Go to Android > Advanced Restrictions.
3. Scroll down to Factory Reset Protection (Google Account Verification) and select Disable Factory Reset Protection from the drop-down menu.
4. Save the policy.
5. Navigate to Enrollment > Enrollment Settings / Automate (depending on your specific enrollment method, such as Zero-Touch or Knox Mobile Enrollment) and assign this policy to be automatically applied when your Android devices enroll.

Once this policy is deployed to an actively managed device, it acts preventatively. The next time the device undergoes a factory reset, it will completely skip the Google FRP verification step, allowing you to proceed straight to your directory authentication.

I hope this helps. If you find any more issues or need further assistance feel free to reach out.

Best regards,
George,
Hexnode UEM