What does the lock accounts option do in Skie?
Lock accounts is an optional protection that stops anyone adding, removing or changing accounts such as Google accounts on a managed device. It uses Android's modify accounts restriction. It is off by default, and is worth turning on for fixed-purpose devices and exam tablets where no personal sign-ins should appear.
Accounts are how people attach their own identity to a device: a personal Gmail, a social media login, a streaming service. Once an account is added, sync, backups and store purchases can follow it. On a school or hostel device, that can open doors you meant to keep closed.
When lock accounts is on, Skie sets Android's DISALLOW_MODIFY_ACCOUNTS restriction as the device owner. The Accounts section in Settings can no longer be used to add or remove accounts, and apps that try to add one are refused by Android. Existing accounts stay as they are, so apply it before handing devices out.
It is optional because some schools want a student to sign in to a learning platform, a school email or an app that needs its own account. If that is your setup, leave it off. Chrome sign-in and sync are handled separately by Chrome rules, so you do not need this switch for browser accounts.
The admin sees it as a single toggle in the hardening section and can set it at any level from organisation down to group. It is read back from Android after every apply and appears in the compliance score.
Practical tip: turn it on for kiosk devices, for exam tablets and for one-app devices. For general learning tablets, check first which apps need an account, then decide.