Support tip: Restore the Managed Home Screen Exit PIN

We’ve identified and fixed a recent problem (IT1450132) that may have caused the exit PIN for the Managed Home Screen to disappear on some Android Enterprise devices when older configuration policies were updated. Although we’ve implemented a solution for this issue, if your policy has already been impacted, you will need to update the relevant policy or policies and ensure that the Exit Kiosk Mode PIN is properly set before you save them.

If you’re using an affected device, tapping Exit kiosk might bring up a message stating that the PIN needed to exit kiosk mode hasn’t been set by the IT administrator, even if it was originally configured. You can see an example in the screenshot below. Keep in mind that this message will also appear on devices where you intentionally disabled the Exit kiosk feature.

Figure 1: An Android device in kiosk mode indicating that no PIN has been set to exit, prompting the user to contact their administrator.

1. In the Microsoft Intune admin centre, locate the device restrictions policy assigned to the Android Enterprise dedicated devices that are affected.
2. Under Device experience, make sure that Leave kiosk mode is set to Enable.
3. Input a new 4-6 digit code for the Leave kiosk mode code.
4. Save the policy and let it deploy to the affected devices.
5. Confirm that the new PIN works for exiting kiosk mode.

Unfortunately, the original PIN cannot be retrieved once it’s been removed, so you must create a new one. For more details, check out the Android template device settings list to restrict features using Intune.

If you need temporary access before the updated policy is applied on a device, you can use the Suspend Managed Home Screen device action, as long as the necessary prerequisites are met.

Figure 2: The Microsoft Intune admin centre displaying settings for Android Enterprise device restrictions, showcasing that the “Leave kiosk mode” option is enabled and a kiosk exit code is configured.

The issue on our end has been sorted out. Administrators who had policies that were affected should set up and deploy a new Managed Home Screen exit PIN and check the results on their devices.

We will keep this post updated as we receive more information. If you have any questions or comments for the Intune team, please reply here or get in touch with @IntuneSuppTeam on X.