Menu

Android Enterprise

The available device commands vary depending on the Android Enterprise manage types. For Fully Managed with Work Profile devices, you can select either Fully Managed or Work Profile to send device commands to.

Device

Device command Description

Apply Latest Profiles

Sends the latest profile and application information to the device and controls the device with the profile and information.

Enable EAS (Samsung Email App Only)

Allows using Exchange ActiveSync for Samsung Email application.

Disable EAS (Samsung Email App Only)

Disallows using Exchange ActiveSync for Samsung Email application.

Lock Device

Locks a device. You can enter a reason for locking the device and a phone number to contact when the device is lost. The entered information appears on the locked device screen.

Note— For non-Samsung Android devices, this policy supports only the devices with Android 8.0 (Oreo) and lower.

Unlock Device

Unlocks a device.

Note— For non-Samsung Android devices, this policy supports only the devices with Android 8.0 (Oreo) and lower.

Lock Screen

Locks the device screen. If the device's screen is password-locked, then the user needs to enter the password to access the screen again.

Factory Reset

Performs factory reset and changes the device status to Unenrolled.

Initialize SD Card when factory reset— Click the checkbox to initialize the SD card during a factory reset.

Deactivate Factory Reset Protection— This only appears when the profile is applied with the Factory Reset Protection policy or when you send a device command to multiple devices. Click the checkbox to perform a factory reset without the Factory Reset Protection policy.

Power Off Device

Turns off the device.

Note— Only Samsung Galaxy devices are supported except the devices with Android 10 (Q).

Reboot Device

Reboots the device.

Reset Screen Password

Resets the device’s screen lock password and creates a temporary password. After sending the device command, the temporary password that can be found on the device’s detailed information page will be delivered to the user. For more information, see the screen lock password in Viewing the device details.

Reset SD Card

Initializes the external SD card of the device.

Note— For devices whose External SD Card policy is set to Disallowed in the profile, you cannot reset the SD card using the device command, because the policy takes a higher priority than the device command.

Reset Data Usage

Resets data usage among the Android device's inventory information.

  • Wi-Fi transfer data (in/out)
  • Network transfer data (in/out)
Note— Only Samsung Galaxy devices are supported except the devices with Android 10 (Q).

Reset Number of Calls

Resets the number of call(s) and number of missed call(s) among Android device’s inventory information,

  • Number of call(s)
  • Number of missed call(s)

Delete a CA Certificate

Deletes certificates installed by Knox Manage. You can select a certificate to delete.

Delete a User Certificate

Deletes certificates installed by the administrator. You can select a certificate to delete.

Delete a User Install Certificate

Deletes all the certificates installed by the administrator.

Application

Device command Description

Install or Update App

Installs or updates applications on a device.

In the “Request Command” window, select an application to be installed or updated.

Note— The Application installation blacklist/whitelist policies take a higher priority than device commands.

Run App

Runs applications on a device.

In the “Request Command” window, select an application to be run.

Note—The Application running blacklist/whitelist policies take a higher priority than device commands.

Uninstall App

Deletes applications from a device.

In the “Request Command” window, select an application to be uninstalled.

Note— The Application uninstallation prevention list setting policy takes a higher priority than device commands.
Delete App Data Delete app-specific data from a device.

Apply Latest internal App Information

Sends the latest internal application information and updates the device according to the information.

Knox Manage

Device command Description

Push Notification

Sends an emergency message to the device. The message icon is shown on the status bar of the device.

In the “Push Notification” window, enter the title and content of the message.You can also select between Notification and Pop up for the send type.

Note—
  • If the device is locked, you must unlock it to view pop ups.
  • Pop ups may not appear on Work Profile (PO) devices with Android 10 (Q) or a higher version.

Unenroll Device

Unenrolls a selected device on the device list.

Update License

Updates the license of a selected device on the device list.

Update Knox Manage

Updates the Knox Manage agent on the device for a new patch or version.

The agent information registered in the Knox Manage server is sent to a device. The device automatically selects the appropriate agent to request installation files from the server.

Update User Information

Updates the device user information such as the user activation status/username/user settings (Secure Browser website URL information, bookmark information) and license information.

If the user is logged out from the enrolled device, you can send this device command to enable the user to log in to Knox Manage automatically.

Lock Screen of Knox Manage agent

Locks the Knox Manage agent.

When the application is locked, the users have to enter the screen lock password which was configured during installation. If a user forgets the password of Knox Manage agent screen lock, you can send the Delete Account command and make the user logged out from the Knox Manage agent. Then, the user can set the password again upon login.

Unlock Knox Manage agent

Unlocks the Knox Manage agent.

Delete Account

Deletes the account registered in the Knox Manage agent.
Upgrade License Upgrade a Knox Manage license to a Knox Suite license.

Collect Audit Log

Collects the Knox Manage audit logs of the device. When the log size exceeds the maximum size, logs are automatically sent to the server, but the log file may be lost. For more detailed information, see View the audit list.

Collect Device Log

Collects the logs of devices.

Collect Diagnosis Information

Collects a device log to diagnose the cause of device lock.

Note— Personally identifiable or sensitive information will be data masked.
Collect Bug Report

Collect a device's bug report (dumpstate logs).

The device user is then prompted to send the report, and they can choose whether to send it.

You can view the bug report by selecting the device and viewing its device log. Alternatively, you can go to History > Device Log and select the relevant device.

Device Info.

Device command

Description

Collect current location

Shows the current location of the device.

To view the location of a device after sending a device command, navigate to Device, click the checkbox for the device, and then click Check Location.

Sync Device Information

Updates the inventory and application information on the device.

To view the updated information after sending the device command, navigate to Device, click a device name or tag, and view the information on the “Device Detail” page.

Sync Installed App List

Updates the information of installed applications.

To view the list of installed applications after sending a device command, navigate to Device, click a device name or tag, and click the “Application” tab.

Authenticate SIM Card

Authenticates the SIM card on a device.

Authenticate SD Card

Authenticates the external SD card on a device.

Attestation

Checks if a device’s OS has been compromised. The result can be found from the device details.