Can a student undo Skie with Reset all settings?
No. If a person runs Reset all settings, Skie re-applies the protections within seconds. Skie keeps the signed policy cached on the device, so it knows what to restore. The admin sees the device briefly and can check the result in the compliance score and the breach centre.
Reset all settings is a menu item on many Android devices that puts system preferences back to their defaults without deleting apps or personal files. Its exact name and location vary by manufacturer. A student may hope it clears the changes an admin has made.
Android's device-owner restrictions are managed differently from ordinary preferences, so most of the protections stay in place. Where a setting does drift, Skie handles it. The Skie app holds the signed policy cache and notices the difference, then applies the protections again. The undo happens within seconds, without the student seeing a prompt.
This is the self-heal behaviour described in the overview entry about re-applying protections. It works offline because the cache is on the device, and it works for any protection, not just this one.
What does an admin see? After the next sync and compliance read-back, the device reports each protection's state. If everything is back, the compliance score is unaffected. If a device could not restore something for some reason, such as being shut down, it is flagged as soon as it checks in. A compliance run can be started on demand.
Practical tip: if you want certainty, start a compliance run after a student raises a concern and look at the device's list. It takes a moment, and you get an answer straight from Android.