How to trigger an alert when user change its PIN code or pattern

We have around 2600 Samsung A10S devices with Android Enterprise Agent.

Since such devices has been upgraded to Android 10 and Android 11, we have faced a raising cases of devices locked by a unknown PIN.

As the devices are no longer being connected, we are not being able to reset its PIN.

In all the cases end user swears that they have not requested t change the PIN.

Looking in the device log, we may see records regarding PIN changed, only when we send it by a script from the console.

We have created an schedule task, running at each 2 hours, to set the PIN back again and we could hold the cases a bit.

We are trying to identify what and when the PIN is changed, to check if it is a virus case or something alike.

Have anyone faced such PIN change by no command on Samsung A10S ?

4 years ago
Android
ANSWERS
RS
Randy, Saputra
4 years ago

Hi Joao,

From what you explained, you set the PIN from SOTI?

As far as i know, SOTI can only enforce the PIN policy, as for the PIN number/pattern, it's down to the user to set it.

If you set the schedule, what i had in mind is :

If the PIN already set first time (by the user) when the device enrolled, the schedule task won't enforce the user the set the new PIN.

Thanks & regards,

Randy Saputra

RS
Rafael Schäfer
4 years ago

There's currently no possibility to get such an error message.

As our experience, every user always "never" has reset the pin... but they do.

I think i wouldn't go the way for every 2 hours because the device will be then locked everytime it's executed.

And if the device is still locked, next time the device has to be unlocked 2 times instead.

We do this once every day during night, so you don't effect the work of your users and it's taking some kind of "learning effect" because they see everyday the old pin again and will stop to change it.

But i don't know why your devices are offline only because of Pin. Did your devices somekind of reboot, so the pin is needed for data connection?

As the device is shared by users, they have a standard PIN.

The issue is the user receives the device and after some time already working, it locks and the standard pin is not accepted any longer.

Our support team resets it to a standard pin and the end user may continue to work.

The issue is to really identify if the end user has changed it or something else has. As the effect is the PIN is changed and no connection after it (when support could help them), we would like to track down what has changed the PIN and avoid it.

We have also other 2600 Samsung device, but A10S, that PIN is changed only by Script from our team.

Hi Rafael, we have realized the Lock Screen and set the change twice a day.

Tks for the tip.