Block and unblock DO provisioning

The Fully managed device provisioning mode — also known as device owner (DO) provisioning mode — provides full device management control to the MDM app. DO provisioning is blocked, by default, on all Knox Guard activated devices manufactured with Android 15 OS and higher.

With the DO provisioning blocked, company-owned devices can’t be used for work. Only select partners can request the Samsung super admin to enable DO provisioning for them. After the Samsung super admin grants permission, the IT admin can enable and disable DO provisioning per device or in bulk

Unblock DO provisioning

To unblock selected devices from DO provisioning:

1. Select one or more device checkboxes from the Devices page.

2. Select the ACTIONS drop-down menu from the Devices page and select Manage policy > Unblock DO Provisioning.

   

3. Read the Unblock DO Provisioning pop-up, and click Confirm. A message displays near the top of the screen verifying that the devices have been submitted.

Activation might take some time based on the device’s network.

Unblock DO provisioning in bulk

A standardized CSV template is available to select devices in bulk using their IMEIs. The maximum number of devices that can be selected in one CSV bulk upload is 10,000.

To bulk unblock devices:

1. Select BULK ACTIONS in the bottom of the left navigation pane.

2. Select the Download CSV template link from the top portion of the screen. For more information on how to create a properly formatted CSV file for bulk device acceptance, select Instructions for all bulk actions from the bottom left-hand side of the Bulk actions screen.

3. Select UNBLOCK DO PROVISIONING from the ADVANCED CONTROLS portion of the Bulk actions screen and enter the properly formatted CSV file on the Unblock DO provisioning screen.

   

4. Click CONFIRM to submit the devices. A message displays near the top of the screen verifying that the devices have been submitted.

Activation might take some time based on the device’s network.

Block DO provisioning

To block selected devices from DO provisioning:

1. Select one or more device checkboxes from the Devices page.

2. Select the ACTIONS drop-down menu from the Devices page and select Manage policy > Block DO Provisioning.

   

3. Read the Block DO Provisioning pop-up, and click Confirm. A message displays near the top of the screen verifying that the devices have been submitted.

Activation might take some time based on the device’s network.