Knox Guard 24.09 release notes

New

Ability to restrict Android Debug Bridge

Starting with the Knox Guard 24.09 release, you can restrict Android Debug Bridge (adb) for enhanced security. To do so, request for the permission to block ADB on your Knox Guard enabled devices with Android 15 and higher. With the permission granted, the IT admin can enable and disable adb per device or for multiple devices in bulk. For detailed instructions, see Block and unblock adb command.

Updates

Restricted Android Enterprise provisioning

Previously, you could enroll Knox Guard activated devices into Android Enterprise as managed devices. With the Knox Guard 24.09 release, Knox Guard activated devices manufactured with Android 15 and higher OS can’t be enrolled into Android Enterprise and managed with a UEM. This blocks IT admins from enabling fully managed and work profile device provisioning. The Fully managed device provisioning mode — also known as device owner (DO) provisioning mode — provides full device management control to the MDM app. The Work profile device provisioning mode — also known as profile owner (PO) provisioning mode — allows personal devices to be enrolled as managed devices.

To manage devices with Android Enterprise, you must unblock device provisioning in Knox Guard. Only select partners can submit a request to Samsung admins for Android Enterprise provisioning permissions. For detailed instructions, see Block and unblock Android Enterprise provisioning.

Enhancements to apps available on the lock screen

Previously only a single app was allowed on device lock screen. Starting with the Knox Guard 24.09 release, you can display up to five apps on the lock screen when using the Knox Guard Advanced license. For more information, see Lock screen.

Back to release notes