- *BASICS*
- The Knox Ecosystem
- White Paper
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- *FOR IT ADMINS*
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Introduction
- How-to videos
- Get started
- Features
- Register resellers
- Add an admin
- Create profiles
- Google device owner support
- MDM compatibility matrices
- Device users
- Activity log
- Enroll and unenroll devices
- Configure devices
- Provide KME feedback
- Use the Knox Deployment App (KDA)
- Recover Google FRP locked devices using KME
- Role-based access control (RBAC)
- Release notes
- FAQs
- Troubleshoot
- KBAs
- On-Premise
- Knox Configure
- Mobile
- Wearables
- Shared Device
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- View applications
- Add applications
- Introduction
- Add internal Android and iOS applications
- Add internal Windows applications
- Add public applications using Google Play Store
- Add public applications using iOS App Store
- Add public applications using Managed Google Play Private
- Add public applications using Managed Google Play Store Private Web
- Add public applications using Microsoft Store
- Add Chrome OS applications
- Assign applications
- Introduction
- Assign internal Android and iOS apps
- Assign iOS App Store applications
- Assign Google Play applications
- Assign Managed Google Play applications
- Assign Managed Google Play Private applications
- Assigned Managed Google Play public web apps
- Assign Windows applications
- Assign Chrome OS applications
- Manage applications
- Volume Purchase Program for iOS
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQs
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQs
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Introduction
- Accept or reject devices
- Upload devices
- Delete devices
- Complete payment
- Send payment overdue notification
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQs
- KBAs
- Support
- Samsung Care+ for Business
- *FOR RESELLERS*
- Knox Deployment Program
- *FOR MANAGED SERVICE PROVIDERS*
- Knox MSP Program
Manage EMM groups
This section describes how to use the tools in the EMM groups tab to manage your EMM device groups.
Add or remove device groups
At any time, you can change which device groups are synced with your EMM.
To add or remove device groups
-
In the EMM groups tab, click Manage EMM Groups.
-
In the next screen:
- Select the device groups you want to add to Knox E-FOTA.
- Deselect the device groups you want to remove from Knox E-FOTA.
-
Click Update E-FOTA Groups.
- In the confirmation popup, click Update.
Enroll devices by EMM group
Perform this procedure if you want to enroll one or more device groups to Knox E-FOTA. This means that all devices in the device groups you select will be enrolled.
- In the EMM groups tab, select the device groups you want to enroll.
-
Click Actions > Enroll devices in groups.
The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.
-
Select the license you want to use, and click Done.
Assign a device group to a campaign
Perform this procedure if you want to assign all devices in a device group to a campaign.
- In the EMM groups tab, select the device groups you want to assign to a campaign.
-
Click Actions > Assign campaign.
The Select campaign popup shows only the active and scheduled campaigns. If you want to see all campaigns (including expired ones), click Clear Filters.
The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.
-
Select the campaign to assign, and click Done.
Push a campaign to a device group
Perform this procedure if you want to push a campaign update to a device group. This is useful if you've modified an existing campaign and want to immediately apply the update to a device group.
- In the EMM groups tab, select the device groups you want to push a campaign to.
-
Click Actions > Push campaign.
-
Click Push Now in the confirmation popup.
Manage group priority
Managing group priority is useful in cases where a device is included in multiple EMM groups. Assigning group priority allows you to specify which device group takes precedence in the event of a campaign conflict.
For example, device A is in both group1 and group2. If group1 is assigned to campaign1 and group2 is assigned to campaign2, which campaign is device A assigned to? The answer depends on which group has a higher priority.
To manage group priority
- In the EMM groups tab, click Manage group priority.
-
Use the arrow buttons to reorder the device groups by priority, where 1 has the highest priority.
-
Click Update Campaign Priority.
Turn EMM group auto-sync on or off
As a super admin, you can configure Knox E-FOTA to automatically sync with any EMM group changes that are made.
- In the EMM groups tab, in the top right corner, set the auto-sync switch to On to immediately send a group sync request to your EMM.
- To disable auto-sync, set the switch to Off. EMM groups no longer update based on the pre-defined sync interval.
For new EMM instances, auto-sync is enabled by default, whereas existing EMM instances have auto-sync disabled. The group info automatically refreshes based on the sync interval shown beside Next sync, located above the toggle. By default, this value is set to 24 hours.
If the group sync is pending or if it fails, the switch is set to Off and you must enable it again to retry auto-sync.
Policies to prevent accidental status changes when syncing from an EMM
Knox E-FOTA follows the following policies to ensure that any device you add individually is properly managed if you later sync that device through an EMM group:
You can manually delete these devices in the Devices tab or through CSV upload.
-
When you add a device to Knox E-FOTA and then subsequently add its device group from an EMM to Knox E-FOTA, that device will keep its current status until the EMM group’s initial status changes from Synced to something else.
Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1. When you add Group 1 to Knox E-FOTA, it will get the status Synced. Device A, however, will retain its Assigned status.
-
When an EMM group’s status changes from the initial Synced status into something else, all its members will follow the new status.
Example: Continuing the example above—if you assign Group 1 to Campaign B, all its members, including Device A, will also be assigned to Campaign B.
-
If an EMM group is explicitly unenrolled, all its members will also be unenrolled.
Example: Continuing the example above—if you unenroll Group 1, all its members, including Device A, will also be unenrolled.
-
When you add a device to Knox E-FOTA and then subsequently add its device groups (multiple groups) from an EMM to Knox E-FOTA, the device will follow the policy of the group with the higher priority. Group priority is set in Knox E-FOTA.
Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1 and Group 2. When you add Group 1 and Group 2 to Knox E-FOTA, they will both get the initial status, Synced. Device A, however, will retain its Assigned status (following the first policy above).
In this example, Group 1 has a higher priority than Group 2, so Device A will follow Group 1’s policy. If you enroll Group 2 and assign it to Campaign B, this change will not affect Device A. Since Group 1 is still in its initial Synced status, Device A will continue to retain its Assigned status.
When you enroll Group 1 and assign it to Campaign C, Device A will also be assigned to Campaign C (following the second policy above).