Reset or remove a device passcode in Intune
This document discusses both device level passcode reset and work profile passcode reset on Android enterprise (formerly called Android for Work, or AfW) devices. It's important to note this distinction as requirements for each can vary. A device level passcode reset resets the passcode for the entire device. A work profile passcode reset resets the passcode only for the user's work profile on Android enterprise devices.
Supported platforms for device level passcode reset
|Android devices on version 6.x or earlier||Yes|
|Android enterprise devices enrolled as Device Owner||Yes|
|iOS/iPadOS devices enrolled with User Enrollment||No|
|Android devices enrolled with a work profile||No|
|Android devices on version 7.0 or later||No|
For Android devices, this means that device level passcode reset is only supported on devices running 6.x or earlier, or on Android enterprise devices running in Kiosk mode. This is because Google removed support for resetting an Android 7 device's passcode/password from within a Device Administrator granted app and applies to all MDM vendors.
Supported platforms for Android enterprise work profile passcode reset
|Android enterprise devices enrolled with a work profile and running version 8.0 and later||Yes|
|Android enterprise corporate-owned devices with a work profile||Yes|
|Android enterprise devices enrolled with a work profile and running version 7.x and earlier||No|
|Android devices running version 7.x and earlier||No|
To create a new work profile passcode, use the Reset Passcode action. This action prompts a passcode reset and creates a new, temporary passcode for the work profile only.
Reset a passcode
- Sign in to the Microsoft Endpoint Manager admin center with any of the following roles: Azure Active Directory Global Admin, Azure Active Directory Intune Service Admin, Helpdesk Operator, or Role Administrator.
- Select Devices, and then select All devices.
- From the list of devices you manage, select a device, and choose Reset passcode.
Reset Android work profile and Device Owner passcodes
Supported Android Enterprise devices enrolled with a work profile receive a new managed profile unlock password or a managed profile challenge for the end user.
For Android Enterprise work profile devices running version 8.x or later, end users get notified to activate their reset passcode right after enrollment completes. The notification is displayed if a work profile password is required and set. After their passcode is entered, the notification is dismissed.
For Android Enterprise device owner or work profile devices running version 8.x or later, after the reset passcode is selected from the console, the MEM Intune admin is presented with a temporary passcode. The temporary passcode must be entered on the device. The temporary passcode for the device will be displayed in the console for 7 days.
Remove iOS/iPadOS passcodes
Instead of being reset, passcodes are removed from iOS/iPadOS devices. If there's a passcode compliance policy set, the device will prompt the user to set a new passcode in Settings.
To see the status of the action you just took, in Devices, select Device actions.