@Joshua D. Virola, Thanks for posting in Q&A. In Intune, there is setting named "Factory Reset" which can block factory reset for Fully Managed and dedicated devices,
To set this, we can go to "Microsoft Endpoint Manager admin center "->Devices->Configuration profiles, Create profile,
Platform: Android enterprise.
Profile: Fully Managed,Dedicated and Corporate-Owned Work Profile / Device Restriction
Under General, set Factory reset to Block.
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.