Hey quick question. If I want to block factory reset using the advanced restriction policy, do I need to enroll the device in the Knox portal too, or is having the required Knox version enough?
20 Views
Replies (5)
Marked SolutionPending Review
Participant
5 months ago
Jul 12, 2025
Marked SolutionPending Review
Hold on. What does Knox have to do with this? You are asking about the factory reset restriction in hexnode, right?
Marked SolutionPending Review
Participant
5 months ago
Jul 13, 2025
Marked SolutionPending Review
Jumping in here. Alex is actually talking about the Advanced factory reset restriction, not the regular one.
Alex, you only need a Samsung Knox device that supports Knox version 3.0 + (Standard SDK 1.0 and above). You do not need knox portal enrollment for this. Hexnode pushes the restriction directly to the device even if it is not enrolled in Knox management enrollment.
Marked SolutionPending Review
Participant
5 months ago
Jul 15, 2025
Marked SolutionPending Review
Wait wait I am confused again. There are two factory reset restrictions? What is the difference besides the Knox requirement?
Marked SolutionPending Review
Participant
5 months ago
Jul 18, 2025
Marked SolutionPending Review
@arthur, thanks for clearing that up. I honestly thought KME was required.
Marked SolutionPending Review
Participant
5 months ago
Jul 20, 2025
Marked SolutionPending Review
@akemi, here is the difference in simple terms.
The normal factory reset restriction only blocks resetting from the device settings. Users can still reset the device using hardware keys.
The Advanced Factory Reset restriction goes further. It blocks factory reset from settings, from ADB commands and even from recovery mode. Basically, it locks down every system recovery option when you disable it.
Save
