{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "slug": "dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device", "url": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/" }, "title": "Check the Factory Reset restriction before wiping a fully managed Samsung device", "summary": "Which Samsung device restriction can prevent an Intune Wipe action from completing?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "cyber-defense", "label": "Cyber defense", "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:32:23+00:00", "modified_at": "2026-09-17T16:46:28+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 1, "word_count": 213, "potentially_affected": "This check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.", "dse_recommendation": "DSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist.", "primary_source": { "name": "Wipe devices with Microsoft Intune - Microsoft Intune | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/device-management/actions/wipe", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft instructs administrators to ensure that Factory Reset under Device Restrictions is not set to Block for these devices. If Factory Reset is blocked when Wipe starts, Microsoft states that the device loses contact with Intune and cannot complete the factory reset. Microsoft Learn.

\n

Applicability

\n

This check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.

\n

DSE recommendation

\n

DSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist. Review data preservation and the approved return-to-service plan before authorizing the destructive action. If the blocking restriction is present, resolve it through the organization’s change process and verify the resulting device state before proceeding. Keep a support path available for a device that no longer reports to management.

\n

Verification

\n

Use an authorized spare device of the relevant enrollment type to validate the complete procedure. Record the effective restriction before the action and inspect the physical device afterward to verify the intended factory-reset result. A missing management connection should trigger investigation, because it does not establish that the reset finished. Keep that result with the device’s reassignment record.

\n

Official references

\n

Microsoft Learn: Wipe devices with Microsoft Intune. Source reviewed September 17, 2026.

", "content_text": "Source facts\nMicrosoft instructs administrators to ensure that Factory Reset under Device Restrictions is not set to Block for these devices. If Factory Reset is blocked when Wipe starts, Microsoft states that the device loses contact with Intune and cannot complete the factory reset. Microsoft Learn.\nApplicability\nThis check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.\nDSE recommendation\nDSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist. Review data preservation and the approved return-to-service plan before authorizing the destructive action. If the blocking restriction is present, resolve it through the organization’s change process and verify the resulting device state before proceeding. Keep a support path available for a device that no longer reports to management.\nVerification\nUse an authorized spare device of the relevant enrollment type to validate the complete procedure. Record the effective restriction before the action and inspect the physical device afterward to verify the intended factory-reset result. A missing management connection should trigger investigation, because it does not establish that the reset finished. Keep that result with the device’s reassignment record.\nOfficial references\nMicrosoft Learn: Wipe devices with Microsoft Intune. Source reviewed September 17, 2026.", "content_markdown": "## Source facts\n\nMicrosoft instructs administrators to ensure that Factory Reset under Device Restrictions is not set to Block for these devices. If Factory Reset is blocked when Wipe starts, Microsoft states that the device loses contact with Intune and cannot complete the factory reset. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/device-management/actions/wipe).\n\n## Applicability\n\nThis check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.\n\n## DSE recommendation\n\nDSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist. Review data preservation and the approved return-to-service plan before authorizing the destructive action. If the blocking restriction is present, resolve it through the organization’s change process and verify the resulting device state before proceeding. Keep a support path available for a device that no longer reports to management.\n\n## Verification\n\nUse an authorized spare device of the relevant enrollment type to validate the complete procedure. Record the effective restriction before the action and inspect the physical device afterward to verify the intended factory-reset result. A missing management connection should trigger investigation, because it does not establish that the reset finished. Keep that result with the device’s reassignment record.\n\n## Official references\n\n[Microsoft Learn: Wipe devices with Microsoft Intune](https://learn.microsoft.com/en-us/intune/device-management/actions/wipe). Source reviewed September 17, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "url": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Check the Factory Reset restriction before wiping a fully managed Samsung device", "item": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "url": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/", "headline": "Check the Factory Reset restriction before wiping a fully managed Samsung device", "description": "Which Samsung device restriction can prevent an Intune Wipe action from completing?", "abstract": "Which Samsung device restriction can prevent an Intune Wipe action from completing?", "articleBody": "Source facts\nMicrosoft instructs administrators to ensure that Factory Reset under Device Restrictions is not set to Block for these devices. If Factory Reset is blocked when Wipe starts, Microsoft states that the device loses contact with Intune and cannot complete the factory reset. Microsoft Learn.\nApplicability\nThis check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.\nDSE recommendation\nDSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist. Review data preservation and the approved return-to-service plan before authorizing the destructive action. If the blocking restriction is present, resolve it through the organization’s change process and verify the resulting device state before proceeding. Keep a support path available for a device that no longer reports to management.\nVerification\nUse an authorized spare device of the relevant enrollment type to validate the complete procedure. Record the effective restriction before the action and inspect the physical device afterward to verify the intended factory-reset result. A missing management connection should trigger investigation, because it does not establish that the reset finished. Keep that result with the device’s reassignment record.\nOfficial references\nMicrosoft Learn: Wipe devices with Microsoft Intune. Source reviewed September 17, 2026.", "datePublished": "2026-09-17T16:32:23+00:00", "dateModified": "2026-09-17T16:46:28+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Check the Factory Reset restriction before wiping a fully managed Samsung device" }, "articleSection": [ "Cybersecurity", "IT" ], "keywords": [ "Cybersecurity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 213, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Wipe devices with Microsoft Intune - Microsoft Intune | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/device-management/actions/wipe" } } ] } }