Managing Android administrator rights: Changing, deleting and restoring

Situations when the user needs change administrator on Androidarise quite often, although they are rarely discussed in regular manuals. Most often, this is necessary when deleting a corporate profile, changing device ownership, or, more critically, when trying to get rid of malware that has locked the screen and demands a ransom. Device Administrator rights are a powerful security tool that allows applications to control phone settings, lock the screen, or even erase data.

However, this power becomes a problem when the admin application stops responding, glitches, or deliberately harms the system. The standard “Delete” button in application settings in such cases often becomes inactive (gray), which confuses inexperienced users. Android specially limits the removal of such apps so that an attacker or accidental action does not deprive the device of protection. Understanding the hierarchy of access rights and knowledge of hidden menus allows you to regain full control over your gadget.

In this material we will analyze in detail the legal and technical ways to change or completely revoke administrator rights. You will learn how to operate through the standard security menu, how to use recovery mode to reset locks, and what tools can help in the most difficult cases. The instructions are relevant for most modern versions of the operating system, from old Android 8 to the latest Android 14.

What are device administrator rights and why you need them?

Device administrator rights are a special level of privileges in the system Androidthat gives the application capabilities that go beyond the normal user access. Unlike root access, which give full control over the kernel file system, administrator rights work at the level of security policies. They allow applications to perform critical functions, such as forcing a screen lock, encrypting data, or remotely resetting settings in case of theft.

Typically, antiviruses, corporate clients for work (MDM systems), and parental control applications request such rights. For example, an antivirus uses these rights to lock your phone if you enter the wrong password several times in a row. Corporate software may require them to comply with company security policies, preventing the installation of games or the use of the camera.

The problem occurs when an application receives these rights, but begins to work incorrectly. It can block the removal of itself, turning the phone into a “brick” from a management point of view. In this case, the system considers that deleting the application will violate security, so the uninstall button is blocked at the interface level.

⚠️ Warning: Never grant administrator rights to applications from unverified sources, especially those that promise “speedup” or “secret functions.” This is often how ransomware viruses take control of a device.

It is important to distinguish between device administrator rights and superuser (Root) rights. If the administrator application can be revoked through the settings (albeit with difficulty), then root access is built deep into the system and require flashing to be completely removed. In the context of our article, we are talking specifically about standard rights Device Administrator.

The standard way to revoke rights through security settings

The very first and safest method that you should try is to use the standard operating system interface. In most cases, if the application is not an aggressive virus, this method is enough to solve the problem. The logic of the action is simple: first you need to deprive the application of administrator status, and only after that it can be deleted as a regular app.

The path to the desired menu may differ slightly depending on the manufacturer's shell (Samsung One UI, Xiaomi MIUI, Stock Android), but the general algorithm remains unchanged. You need to find the section responsible for device security or accessibility. Often this item is hidden quite deeply to prevent accidental changes to the settings.

• 🔐 Open Settings and find the section Security or Biometrics and security.
• 📱 Go to the subsection Device Administrator Applications (sometimes called “Device Administrators”).
• 🚫 Find the desired application in the list and uncheck the box or switch the toggle switch to the “Off” position.
• 🗑️ Confirm the action in the pop-up window by clicking Deactivate or OK.

After performing these actions, the application will lose its privileges. Now you can return to the menu Applications, find the app and calmly press the button Delete. If the delete button is still inactive, it means that the application is using additional protection methods or is frozen in the system, and more drastic measures will be required.

Removal through safe mode and recovery mode

If the standard method did not work and the system does not allow you to revoke rights, it may be malicious the process actively interferes with this. In this case, an effective solution would be to download to Safe Mode (Safe Mode). In this mode, the operating system loads only with basic drivers and system applications, blocking the launch of all third-party software, including administrative viruses.

To enter safe mode, you usually need to hold down the power button on the screen, and then long-press the “Shutdown” or “Restart” icon on the touch screen with your finger until a prompt appears boot into safe mode. On devices with physical buttons, the combination may be different: often this is holding down the volume down button when turning on the phone.

Once you are in safe mode (you will see the corresponding inscription in the corner of the screen), repeat the procedure for revoking administrator rights described in the previous section. Since the malicious application is not running, it will not be able to resist being disabled. After successful deactivation, simply restart your phone in normal mode and delete the app.

⚠️ Attention: If your phone is locked with a password or pattern that you do not remember, you may not be able to enter safe mode without resetting your data. In such cases, only Hard Reset helps.

In extreme cases, when the system interface is completely blocked by a ransomware virus, the only way out is the recovery mode (Recovery Mode). You can enter it using a combination of physical buttons (usually Volume Up + Power) when the phone is turned off. Here you will need the item Wipe data/factory reset.

Using ADB to force uninstall

For advanced users who have access to a computer and USB debugging is enabled on the phone, there is a powerful tool - Android Debug Bridge (ADB). This method allows you to control the device through the computer command line, bypassing the graphical limitations of the Android interface. It is especially effective when the phone screen does not respond to touches due to a virus.

First you need to install ADB drivers on your computer and connect your phone with a cable. After confirming debugging on the smartphone screen (if it reacts at least somehow), you can send commands. The essence of the method is to directly contact the system package manager and remove the application by its name, ignoring the administrator status.

adb shell pm uninstall --user 0 com.example.virus

In this command com.example.virus you need to replace it with the real name of the malware package. You can find out the name of the package using the command adb shell pm list packages, which will display a list of all installed applications. This method does not require root access, but does require USB debugging to be enabled, which viruses often try to disable first.

If USB debugging has been disabled by a virus, this method will not work without first resetting the settings. However, if you have access to the settings menu, but the delete button does not work, ADB can forcefully deactivate administrator rights with the command:

adb shell dpm remove-active-admin com.example.virus/com.example.virus.AdminReceiver

Where can I find the application package name?

The package name usually looks like the website address in reverse, for example com.google.android.apps.maps. It can be viewed in the Play Store in the address bar of the browser or through applications such as App Inspector.

Features of deleting corporate profiles and MDM

A separate category of problems is associated with corporate devices or phones on which a work profile was installed. Here, administrator rights are controlled by the system MDM (Mobile Device Management). Unlike ordinary viruses, such profiles are often protected at the company server level, and simple deletion can be blocked by the organization's security policy.

If you bought a used phone, and it still has a corporate profile with administrator rights that requires a password from the previous owner, the situation becomes more complicated. Standard profile deletion in settings (Settings → Accounts → Work profile) may ask for a password that you do not know. In such cases, the phone is actually tied to the organization.

Lock type	Deletion option	Solution
Normal application	High	Security settings or Safe Mode
Ransomware virus	Low	Safe Mode, ADB or Hard Reset
Corporate MDM	Depends on the server	Contact the company administrator or a full reset
System application	Impossible without Root	Disconnection via ADB or flashing

An attempt to bypass corporate locking with a hard reset does not always help. Modern security systems, such as Samsung Knox or Google FRPmay, after a reset, again request administrator credentials during the first setup. This is done to protect corporate data in case the device is stolen.

⚠️ Attention: If the phone belongs to an organization, deleting the MDM profile yourself may violate an employment contract or the law. Check the conditions for using the device with your employer.

Resetting the settings as a last resort measure

When none of the software methods helps, the last argument remains - a complete data reset to factory settings (Factory Reset). This procedure deletes absolutely all user data, applications and settings, returning the phone to the “as from the store” state. Along with the data, all assigned administrator rights are also deleted.

All photos, contacts, messages and files not saved in the cloud or on a memory card will be lost forever. Therefore, this method should be resorted to only when other methods have been exhausted, or when the data on the phone is not valuable compared to the need to restore functionality.

You can perform a reset through the settings menu if the phone is unlocked: Settings → System → Reset settings → Delete all data. If the phone is locked by a virus, the reset is performed through the Recovery menu, as described earlier. After rebooting, the phone will require an initial setup, and the problematic application will no longer appear.

After the reset, it is recommended to immediately set up a Google account and enable the Find My Device feature. This will create a new, clean security profile. When restoring data from a backup, be careful: if you restore a full copy of the system (backup of applications and settings), you may accidentally return the virus back.

Frequently asked questions (FAQ)

Is it possible to remove an administrator without losing data?

Yes, in most cases it is possible. If you use the method through Security Settings or Safe Mode, the data is saved. Data loss only occurs when performing a hard reset, which is used only in extreme cases.

Why is the "Delete" button for an application gray and unclickable?

This happens because the application has active device administrator rights. The system blocks deletion to prevent accidental disabling of important security features. First you need to go to the administrator settings and deactivate the rights, after which the delete button will become active.

What to do if a virus has blocked entry into the settings?

If the interface is completely blocked, try booting into Safe Mode. If this does not help due to the screen being locked, the only option is to reset via the Recovery menu (volume and power buttons), which will delete all data.

Does changing the administrator affect the phone's warranty?

No, managing device administrator rights is a standard feature of Android. Revoking rights or deleting applications is not considered interference with the operation of the software, violating the warranty, unlike obtaining root access or unlocking the bootloader.

How to check which applications have administrator rights right now?

Go to Settings → Security → Device administrator applications. A complete list of apps with elevated privileges will be displayed there. Check this list regularly and disable rights for those applications that do not need them.