We’re planning to roll out kiosk lockdown on our ROM‑enrolled devices. I noticed the Enable device owner action, but can this be combined directly with a kiosk policy so that devices are elevated and locked down in one go?
14 Views
Replies (3)
Marked SolutionPending Review
Hexnode Expert
1 week ago
Mar 04, 2026
Marked SolutionPending Review
Hello @arthur , thanks for reaching out.
Yes, that’s possible. When creating an automation in the Automate tab, you can first add the Enable device owner action. After that, click Add New Action and select your kiosk policy from the Associate Policy action. This way, both actions are bundled together in the same automation.
In the Settings and Schedule step, you can configure how the automation should run, either based on Time (once, ASAP, or recurring schedules) or based on Activity. Then, in the Target Filters step, select the specific device groups you want to apply to.
Once saved, the automation will be executed according to your schedule. The device will be elevated to Device Owner mode and immediately associated with the kiosk policy, ensuring advanced restrictions like multi‑app lockdown, background apps, and website kiosk settings are enforced without manual intervention.
Regards,
Simon Scott
Hexnode UEM
Marked SolutionPending Review
Participant
1 week ago
Mar 04, 2026
Marked SolutionPending Review
Wait, doesn’t Device Owner mode usually need a factory reset?
Marked SolutionPending Review
Hexnode Expert
1 week ago
Mar 04, 2026
Marked SolutionPending Review
That’s a good point. Normally, Device Owner mode requires a reset during initial setup. However, Hexnode UEM’s remote action for ROM‑enrolled devices elevates privileges without wiping data.
For even more detailed guidance refer to our guide on the Enable device owner action.
Save
