The message “Action is prohibited” appears. Contact your administrator" on the screen of a smartphone or tablet running an operating system Android can cause panic even in an experienced user. This blocking completely paralyzes the capabilities of the device, preventing you from changing settings, deleting applications, or even simply using the interface as usual. Most often, this problem occurs after an unsuccessful installation of third-party software, a malfunction of system services, or the activation of hidden security policies.
The essence of the problem lies in the fact that some application or system process has device administrator rights and has imposed strict restrictions on functionality. The operating system perceives your attempts to change settings as a violation of the security policy initiated by this “administrator”. Unfortunately, standard solution methods, such as a simple reboot, turn out to be useless in 90% of cases, since a malicious module or faulty service is loaded along with the system.
In this article we will analyze in detail the action algorithms for removing this blocking. We will look at methods for disabling administrator rights through safe mode, using USB debugging, and extreme measures such as a hard reset. It is important to understand that each case is unique, and the source of the problem may be hidden either in a recently installed launcher or in a system update.
The nature of the error and types of blocking
To successfully fix a problem, you need to understand its mechanism. The “Action not allowed” error indicates that the profile Device Administrator or Device Owneris active. These profiles are intended for the corporate sector, allowing IT departments of companies to remotely manage a fleet of devices, block the camera, prohibit the installation of applications or erase data.
However, in the consumer segment, these functions are often used by malware. Encryption viruses or aggressive advertising modules disguise themselves as system services and assign themselves administrator rights. After that, they block the screen or settings menu, demanding payment or simply preventing them from being removed. Also, a similar situation may arise when installing custom launchers that do not interact correctly with the manufacturer’s shell, for example MIUI or OneUI.
⚠️ Attention: If the blocking is accompanied by a requirement to transfer money to a phone number or e-wallet for unlocking, you are faced with a ransomware virus. Do not make a payment under any circumstances - this will not restore access to the device, but will only confirm to attackers that the number is active.
Sometimes the reason lies in the user’s own error. Activating Guest mode or creating a new profile with limited rights may result in critical system functions being unavailable in the current session. In such cases, the solution to the problem lies in the account management plane, and not in the fight against viruses.
Diagnostics through safe mode
The first and safest step in the fight against imposed restrictions is to boot the device in safe mode (Safe Mode). In this mode, the operating system starts only with basic drivers and system applications, ignoring all third-party software installed by the user. This allows you to determine whether a third-party application is causing the problem.
To enter safe mode on most modern smartphones, you need to hold down the power button until the shutdown menu appears. Then you need to press and hold the “Power off” or “Restart” item on the screen with your finger. The system will prompt you to switch to safe mode - confirm the action. On devices with a non-removable battery, where the screen does not respond, a key combination often helps: hold down the volume down and power buttons at the same time until the logo appears.
If, after booting, the message “Safe Mode” appears in the corner of the screen, try going into the settings. If the error message disappears and you can access the menu, then the problem is guaranteed to be caused by one of the installed applications. In this mode, you can safely remove suspicious apps that were installed recently or have names similar to system ones, but are not.
- 🔍 Check the list of recently installed applications before a problem occurs.
- 🗑️ Remove all launchers, antiviruses and optimizers installed from unreliable sources.
- 🔄 Restart the device in normal mode to check the result.
It is worth noting that some types of malware have learned to survive even in safe mode, masquerading as system processes. If entering safe mode is impossible or the error persists, you will have to move on to more radical methods of intervention.
On Samsung devices, entering safe mode is often done through the shutdown menu, and on Xiaomi, through a combination of physical buttons at boot. Consider the features of your model.
Disabling device administrator rights
If the system allows you to get to the settings menu, even with restrictions, the first thing you need to do is check the list of active device administrators. This is where the “root of evil” lies. Attackers or faulty applications register themselves on this list, receiving immunity.
Navigation may differ depending on the version Android and the manufacturer's shell. Typically the path looks like this: go to Settings → Security → Device Administrators. In newer versions of the system, this item may be located in the Settings → Applications → Special access → Device Administratorssection. If the settings menu is blocked by an error immediately upon entry, this method will not work and you will need to use ADB.
In the list of administrators you will see checkmarks opposite applications with elevated privileges. System services such as Google's Find My Device should remain active. However, any unknown apps, especially those that do not have an icon or a strange name, should be deactivated immediately. Uncheck the box and confirm disabling rights.
| Service name | Status | Recommendation |
|---|---|---|
| Find My Device | Active | Leave enabled |
| Android Device Policy | Active | Disable if not a corporate phone |
| Unknown App (No Icon) | Active | Urgently disable and delete |
| Clean Master / Booster | Active | Disable, no rights needed |
After unchecking the box, the system usually immediately unlocks the functions that were prohibited. If the “Disable” button is inactive or immediately returns to its original position, it means that the application is protected from deletion and requires deeper intervention through the computer.
The presence of an unknown application in the list of administrators is the main sign of malicious interference that requires immediate deactivation.
Using USB and ADB debugging
When the device interface is completely blocked and does not respond to clicks, the only way to regain control is to use a computer and tools ADB (Android Debug Bridge). This method allows you to send commands directly to the system, bypassing the GUI.
First you will need a PC, a USB cable and installed drivers for your device. You also need to download the Platform Tools package from the official Android developers website. The main difficulty is that for ADB to work, USB debugging must first be enabled on the phone. If it was turned off before the lock, this method may not work without resetting the settings.
If debugging is enabled, connect the phone to the computer. Open a command line or terminal in the folder with ADB and enter the command to test the connection:
adb devicesA notification should appear on the smartphone screen about allowing debugging from this computer. Confirm it. Next, you can try to remove the problematic application, knowing its package name, or forcefully stop the process. The uninstall command looks like this:
adb shell pm uninstall --user 0 com.package.name⚠️ Attention: Using ADB commands requires caution. Removing critical system components may cause the device to fail to boot (bootloop). Enter commands only if you are sure of the name of the package of the malicious application.
You can also try to reset administrator rights programmatically through ADB, although modern versions of Android limit this ability without physical interaction with the screen. However, trying to run the command adb shell dpm remove-active-admin may yield results in some cases.
How to find the package name of an application?
If you do not know the exact package name, you can list all installed applications with the 'adb shell pm list packages' command. Look for suspicious names in the displayed list.
Reset settings and recovery mode
If none of the software methods helped and the device remains locked, the only working option is a complete data reset (Factory Reset). This procedure will return the phone to its factory state, removing all applications, settings and user files, including malicious code.
You can perform a reset through the recovery menu (Recovery Mode). To enter it, you need to turn off the device and then hold down a certain key combination. It differs for different manufacturers: most often it is Volume Up + Power or Volume Down + Power. Hold the buttons until the logo or the recovery menu appears.
In the recovery menu, navigation is carried out with the volume buttons, and selection is done with the power button. Find the item Wipe data/factory reset and confirm the action. The process may take several minutes. Once completed, select Reboot system now.
- 📱 Make sure that the battery charge is at least 30% before starting the reset.
- 💾 Remember that all photos, contacts and messages will be permanently deleted.
- 🔐 After enabling, you will need to enter the Google account that was synchronized earlier (protection FRP).
It is important to consider FRP (Factory Reset Protection) protection. If you have set up a Google account on your phone, after resetting the system will require you to enter your login and password. This is done to protect against theft. If you don't remember your account information, your device may remain locked even after a reset.
☑️ Preparing to reset your settings
Prevention and protection against blocking
Preventing the “Action is prohibited” error is much easier than eliminating its consequences. The main cause of problems is carelessness when installing applications. Never download apps from dubious sources, forums or file exchangers.
Always check the permissions that the application requests during installation. If a simple flashlight or calculator asks for administrator rights, access to contacts and SMS is a clear sign of malware. Cancel installation immediately. Regularly audit installed applications and remove those that you do not use.
Use built-in system protection tools. In the security settings, activate the function Google Play Protect, which scans applications for threats. It is also recommended to keep the operating system updated, as manufacturers regularly close vulnerabilities used by viruses.
⚠️ Attention: Settings interfaces and menu item names may differ depending on the Android version and device model. If you do not find the specified path, use the search inside the settings menu using the keywords “Administrator” or “Security.”
Be careful when granting access rights to new apps. One click on the “Allow” button in the dialog box can transfer control of your device into the wrong hands. User vigilance is the main factor in the security of a mobile device.
Installing applications only from the official Google Play store and carefully reading permission requests reduces the risk of blocking by 95%.
Frequently asked questions
Is it possible to unlock a phone without losing data?
If the blocking is caused by a virus with administrator rights, then most often the only way is a full reset, which deletes the data. However, if you can enter safe mode and remove the malicious application before it causes irreparable damage, the data can be saved.
What should I do if the phone asks for an administrator password that I did not set?
This is typical behavior of ransomware viruses. Do not enter any data. Try booting into safe mode. If this does not help, you will need to flash the device or reset it via Recovery, which will delete the data.
Will removing the SIM card help remove the lock?
No, removing the SIM card does not affect software locks at the operating system level. The “Action is prohibited” error is related to access rights inside Android, and not to the operator’s network settings.
Why does the phone require a Google account again after resetting the settings?
This is the work of the FRP (Factory Reset Protection) protection system. It prevents the use of a stolen phone after a reset. You need to enter the login and password from the last account that was synchronized on this device before the reset.