# Check the Factory Reset restriction before wiping a fully managed Samsung device

> Which Samsung device restriction can prevent an Intune Wipe action from completing?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:32:23+00:00
- Modified: 2026-09-17T16:46:28+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 1 minutes

## What you need to know

Which Samsung device restriction can prevent an Intune Wipe action from completing?

## Potentially affected

This check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.

## DSE recommendation

DSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist.

## Article

## Source facts

Microsoft instructs administrators to ensure that Factory Reset under Device Restrictions is not set to Block for these devices. If Factory Reset is blocked when Wipe starts, Microsoft states that the device loses contact with Intune and cannot complete the factory reset. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/device-management/actions/wipe).

## Applicability

This check applies specifically to Android Enterprise fully managed Samsung devices. Confirm the enrollment type and effective device-restriction setting before placing a wipe in an approved retirement or reassignment plan.

## DSE recommendation

DSE recommends making the effective Factory Reset setting a prerequisite in the Samsung wipe checklist. Review data preservation and the approved return-to-service plan before authorizing the destructive action. If the blocking restriction is present, resolve it through the organization’s change process and verify the resulting device state before proceeding. Keep a support path available for a device that no longer reports to management.

## Verification

Use an authorized spare device of the relevant enrollment type to validate the complete procedure. Record the effective restriction before the action and inspect the physical device afterward to verify the intended factory-reset result. A missing management connection should trigger investigation, because it does not establish that the reset finished. Keep that result with the device’s reassignment record.

## Official references

[Microsoft Learn: Wipe devices with Microsoft Intune](https://learn.microsoft.com/en-us/intune/device-management/actions/wipe). Source reviewed September 17, 2026.

## Primary reference

- Name: Wipe devices with Microsoft Intune - Microsoft Intune | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/intune/device-management/actions/wipe
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Check the Factory Reset restriction before wiping a fully managed Samsung device,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-157-check-the-factory-reset-restriction-before-wiping-a-fully-managed-samsung-device/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.