What are the best settings for an unattended device?
If you plan to run unattended devices check following topics in order to make your device locked and secure.
Reset Settings in Fully Kiosk (look in Other Settings) to get back to the recommended settings. Then double check every option you change. Enable the Kiosk Mode, set the Kiosk Exit Gesture and a good Kiosk Mode PIN. Enable the Remote Admin and set a fairly long Remote Admin Password. Enable Restart Fully options in Other Settings.
Use Device Provisioning to setup new devices. Switch ON the Disable Status Bar, Disable USB Storage, Disable ADB, Disable Boot in Safe Mode in Device Owner Settings.
On Samsung devices please also use the KNOX Settings for advanced protection.
On Android 12+ devices please attend to this FAQ for the secure Kiosk Mode.
Check your device has the latest Android System Webview (for Android 5, 6 and 10+) or latest Google Chrome (for Android 7, 8 and 9) to avoid many Webview related issues.
Have a strategy for remote app installs/updates.
If you have enabled Google Play on the device please disable Fully Kiosk auto-updates. You can’t select the auto-update time and during auto-update your device will be not protected. Please also disable auto-updates for Android System Webview, for Google Chrome and Android System updates if possible.
If you have Google App installed please disable Google Screen Search, otherwise a long press on the Home Button can make strange things.
Test everything thoroughly including device restart and Kiosk Mode exit/reenter. Keep test devices for later tests.