Hello,
Thank you for reaching out to Hexnode Connect!
To keep your lost device secure, do not remove or disenroll it from the Hexnode portal. Removing the device severs MDM control, which could allow the device to be reset or reused if it ever reconnects to the internet.
Here is how your device’s offline state and Knox security are handled:
- Local Policy Retention: Kiosk mode policies applied prior to going offline remain cached locally on the device’s storage. Even after months offline, if the device is powered back on, it will continue to enforce the last applied kiosk lockdown profile.
- Knox Manage vs. Hexnode Knox Capabilities: Knox Manage (Samsung’s standalone EMM) is completely separate from the Samsung Knox Platform for Enterprise features built into Hexnode. An expired Knox Manage portal subscription has zero impact on Knox-based restrictions or kiosk settings deployed via Hexnode.
- Reconnection Readiness: Keeping the device actively enrolled ensures that if it ever comes back online and checks in, Hexnode can immediately execute queued security commands, such as a remote wipe.
I hope this brings clarity to your deployment! Please feel free to reach out if you have any further questions.
Best regards,
George
Hexnode UEM.