# How to prevent users from performing factory reset on Android devices? Last updated: July 24, 2026 To stop Android devices from being factory reset and losing management, create an Android profile, go to Restrictions > Security, and restrict Restore Factory Settings, then save and publish it to devices or groups. Testing on a device first is recommended. Organizations can also configure Enterprise Factory Reset Protection so a corporate Google account, not the user's, is required to unlock a reset device. ## Description Factory Resetting Android devices wipes any content and settings on the phone and resets the device to it's factory settings. In organizations where corporate data is stored and accessed using mobile devices, IT admins must ensure these devices are not factory reset to prevent the loss of corporate data. Another reason why organizations must prevent users from factory resetting Android devices is to ensure the devices are managed at all times, since resetting the device also means all the configurations, apps and contents distributed using MDM will be deleted and the devices will be unmanaged. Here are the steps to prevent factory reset on Android. ## Steps By configuring the below mentioned restriction IT admins can ensure MDM does not allow factory reset on enrolled devices. - On the MDM server, click on the **Device Mgmt** tab. - Select **Profiles** from the left pane and navigate to **Create Profile** -> **Android**. - Provide the **Name** and **Description** for the profile and click on **Continue**. - Navigate to **Restrictions** -> **Security**. - **Restrict** the option **Restore Factory Settings**. - Next, **Save** and **Publish** the restrictions profile. - It is recommended to test the profile on a [test device](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_associating_profiles_to_devices.html?fraw) before associating it with your production environment. You can also [associate profiles to groups](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_associating_profiles_to_groups.html?fraw) for which you want to restrict the factory reset option. ## Enterprise Factory Reset Protection Devices running Android 5.0 and above by default support Factory Reset Protection (FRP) which requires the user's Google account credentials upon activating a hard reset device. While FRP is important to reduce mobile theft and strengthen data security, it also causes problems in organizations that provide their employees corporate Android devices. To overcome this challenge, Mobile Device Manager Plus allows organization's to configure Enterprise Factory Reset Protection. With Enterprise Factory Reset Protection, organizations can create a common corporate Google account and enter it instead of the user's Google account details to access the factory reset device. This ensures that even if the employee leaves the organization after resetting the device, it can be accessed and re-used by the organization. Refer [this document](https://www.manageengine.com/mobile-device-management/help/profile_management/android/android_enterprise_factory_reset_protection.html?fraw) for the steps to configure Enterprise Factory Reset Protection on your corporate Android devices. ## Frequently asked questions ### Why does preventing factory reset matter for corporate Android devices? A factory reset wipes all content and settings and removes the device from MDM management, so blocking it protects corporate data and keeps the device managed at all times. ### What is Enterprise Factory Reset Protection? It lets organizations enter a common corporate Google account instead of the user's own account to unlock a factory-reset device, so it can still be accessed and reused by the organization even after an employee leaves. It's supported on devices running Android 5.0 and above. ### Should I test the restriction profile before rolling it out? Yes, it's recommended to test the profile on a test device before associating it with your production environment or groups.