Forum Discussion

Level 1.6: Donut

5 months ago

Solved

Possible to deploy API commands via Provisioning Profiles in MDM?

Hello,

We use WorkspaceONE UEM as our MDM. We sometimes use provisioning profiles to deploy commands to devices run-intents, but I'm not an expert on this subject by any means. I am curious if it is possible to use our MDM to deploy an API command to disable Factory Reset Protection. The command information is here: https://developer.android.com/reference/android/app/admin/FactoryResetProtectionPolicy

I realize what a specific question this is. If I can provide more information, please let me know. Thanks in advance!

Devices

fully managed

omnissa workspace one

CoreyC
5 months ago
Just to add to this. In addition to the Enterprise FRP API, there is a separate API purely for enabling/disabling standard FRP. Omnissa doesn't have a control in their console for this but they have documentation on how to disable it with a custom profile: https://docs.omnissa.com/bundle/android-device-managementVSaaS/page/AndroidProfilesCustomDPC.html#disable_factory_reset_protection

4 Replies

Moombas
Level 4.4: KitKat
5 months ago
Not sure what you mean by "deploy" but you should be able to disable FRP just by setting it:

Custom DPC: https://docs.omnissa.com/de-DE/bundle/android-device-managementV2410/page/AndroidProfilesCustomDPC.html#:~:text=Save%20%26%20Publish.-,Enterprise%20Factory%20Reset%20Protection,-Factory%20Reset%20Protection
AMAPI: https://docs.omnissa.com/bundle/android-device-managementV2410/page/AndroidProfileAMAPI.html#:~:text=for%20OTA%20updates.-,Enterprise%20Factory%20Reset%20Protection,-Factory%20reset%20protection
- CoreyC
  Google Community Manager
  5 months ago
  Just to add to this. In addition to the Enterprise FRP API, there is a separate API purely for enabling/disabling standard FRP. Omnissa doesn't have a control in their console for this but they have documentation on how to disable it with a custom profile: https://docs.omnissa.com/bundle/android-device-managementVSaaS/page/AndroidProfilesCustomDPC.html#disable_factory_reset_protection
  - nleaphart
    Level 1.6: Donut
    4 months ago
    Corey,
    Thank you! This is exactly what we were looking for. I don't know why we were unable to find this in their documentation after searching for something along these exact lines. Even our vendor was not able to produce this information after multiple troubleshooting sessions!
    Thanks again!
nleaphart
Level 1.6: Donut
5 months ago
I'm not seeing a way to just disable FRP altogether, though. That is my goal. We have tested the EFRP recovery account, and that does work. We want to disable the setting altogether without having to resort to recovery, though.

In short, there is a control: DevicePolicyManager.setFactoryResetProtectionPolicy
I want to be able to set that to "disabled" or some equivalent value.