Google, like other platform owner like Apple, tighten many MDM policies that may seriously affect end-user privacy, and some previous available policies are no longer supported by the MDM API defined by the platform owner.  As a result, all MDM software that used to have the feature will no longer support them because of the change controlled by the platform owner.  Thus, on recent newer firmware versions, it is no longer possible to set a new PIN/password to your Android or iOS devices via MDM web console or scripts.   

You can lock or enable iOS lock mode if the device is reported to have been lost/stolen.  For recovered lost device or device whose owner forgets his/her PIN password, MDM administrator can only remotely clear/disable the passcode, and the device will be unlocked and device user be prompted to input a new password/PIN on the device.  This way, MDM administrator won't know what the new password/PIN is.  

it works with android enterprise

Hi Markus, 

What Mobicontrol version and build do you have installed and what agent version (number, ELM vs Non ELM and Manufacturer) are you using with your device?

I have reviewed an internal ticket for this, where this was though to be expected behavior due to the MDM limitation in the newer OS versions but may actually have been fixed in an a more recent agent version.

Regards,

Mobicontrol 14.1.3.1587

Agent 13.5.0 Build 1474

Active MDM API: Work Managed Device, Zebra EMDK, RemoteView (1.6.0.100)

But now after the reset passwort, the password is required at the device startup too. 

How to disable this?

Best regards

Markus

Just disable "secure startup" in the Security tab in Settings.

we do want to that automated, but i dont know how.

With Android Enterprise the writesecuresetting seems not to work (is not supported)