The available device commands vary depending on device manage type. For Android Legacy with Knox Workspace devices, you can select either the General or KNOX area to send the device command to.
Device
| Device command | Description |
| Apply Latest Profiles | Sends the latest profile and application information to the device and controls the device with the profile and information. |
|
Enable EAS (Samsung Email App Only) |
Allows using Exchange ActiveSync for Samsung Email application. |
|
Disable EAS (Samsung Email App Only) |
Disallows using Exchange ActiveSync for Samsung Email application. |
|
Lock Device |
Locks a device. You can enter a reason for locking the device and a phone number to contact when the device is lost. The entered information appears on the locked device screen. NOTE—
|
|
Unlock Device |
Unlocks a device. NOTE—
|
|
Lock Screen |
Locks the device screen. If the device's screen is password-locked, then the user needs to enter the password to access the screen again. |
|
Factory Reset |
Performs factory reset and changes the device status to Unenrolled. |
|
Power Off Device |
Turns off the device. NOTE— Android 10 (Q) devices are not supported.
|
|
Reboot Device |
Reboots the device. |
|
Reset Screen Password |
Resets the device’s screen lock password and creates a temporary password. After sending the device command, the temporary password that can be found on the device’s detailed information page will be delivered to the user. For more information, see the Knox password in Viewing the device details. NOTE—Android 9.0 (Pie) and later devices are not supported.
|
|
Reset SD Card |
Initializes the external SD card of the device. NOTE— For devices whose External SD Card policy is set to Disallowed in the profile, you cannot reset the SD card using the device command, because the policy takes a higher priority than the device command.
|
|
Reset Data Usage |
Resets data usage among the Android device’s inventory information.
NOTE—Android 10 (Q) devices are not supported.
|
|
Reset Number of Calls |
Resets the number of call(s) and number of missed call(s) among Android device’s inventory information.
|
Application
|
Device command |
Description |
|
Install or Update App |
Installs or updates applications on a device. In the “Request Command” window, select an application to be installed or updated. NOTE— The Application installation blacklist/whitelist policies take a higher priority than device commands.
|
|
Run App |
Runs applications on a device. In the “Request Command” window, select an application to be run. NOTE— The Application running blacklist/whitelist policies take a higher priority than device commands.
|
|
Stop App |
Stops applications on a device. In the “Request Command” window, select an application to be stopped. |
|
Delete App data |
Deletes data from applications. In the “Request Command” window, select an application to be deleted. |
|
Uninstall App |
Deletes applications from a device. In the “Request Command” window, select an application to be uninstalled. NOTE— The Application uninstallation prevention list setting policy takes a higher priority than device commands.
|
|
Apply Latest internal App Information |
Sends the latest internal application information and updates the device according to the information. |
Knox Manage
|
Device command |
Description |
|
Push Notification |
Sends an emergency message to the device. The message icon is shown on the status bar of the device. In the “Push Notification” window, enter the title and content of the message to send. You can also select between Notification and Pop up for the send type. NOTE—
|
|
Unenroll Device |
Unenrolls a selected device on the device list. |
|
Update License |
Updates the license of a selected device on the device list. |
|
Update Knox Manage |
Updates the Knox Manage agent on the device for a new patch or version. The agent information registered in the Knox Manage server is sent to a device. The device automatically selects the appropriate agent to request installation files from the server. |
|
Update User Information |
Updates the device user information such as the user activation status/username/user settings (Secure Browser website URL information, bookmark information) and license information. If the user is logged out from the enrolled device, you can send this device command to enable the user to log in to Knox Manage automatically. |
|
Lock Screen of Knox Manage agent |
Locks the Knox Manage agent. When the application is locked, the users have to enter the screen lock password which was configured during installation. If a user forgets the password of Knox Manage agent screen lock, you can send the Delete Account command and make the user logged out from the Knox Manage agent. Then, the user can set the password again upon login. |
|
Unlock Knox Manage agent |
Unlocks the Knox Manage agent. |
|
Delete Account |
Deletes the account registered in the Knox Manage agent. |
|
Collect Audit Log |
Collects the Knox Manage audit logs of the device. When the log size exceeds the maximum size, logs are automatically sent to the server, but the log file may be lost. For more detailed information, see Viewing audits. |
| Exit Kiosk | Exits the Kiosk mode without unenrollment. You can find the status of the Kiosk mode in the Security tab on the Device Detail page. |
|
Collect Device Log |
Collects the logs of devices. |
|
Collect Diagnosis Information |
Collects a device log to diagnose the cause of device lock. NOTE—Personally identifiable or sensitive information will be data masked.
|
Device Info.
|
Device command |
Description |
|
Collect current location |
Shows the current location of the device. To view the location of a device after sending a device command, navigate to Device, click the checkbox for the device, and then click Check Location. |
|
Sync Device Information |
Updates the inventory and application information on the device. To view the updated information after sending the device command, navigate to Device, click a device name or tag, and view the information on the “Device Detail” page. NOTE— For iOS devices, only the hardware status is updated.
|
|
Sync Installed App List |
Updates the information of installed applications. To view the list of installed applications after sending a device command, navigate to Device, click a device name or tag, and click the “Application” tab. |
|
Authenticate SIM Card |
Authenticates the SIM card on a device. |
|
Authenticate SD Card |
Authenticates the external SD card on a device. |
|
Attestation |
Checks if a device’s OS has been compromised. The result can be found from the device details. |
Container
Only the Workspace area of Knox Workspace is supported.
|
Device command |
Description |
|
Lock Knox Workspace |
Locks the Knox Workspace. Users cannot access the Knox Workspace unless you unlock it by sending this command. |
|
Unlock Knox Workspace |
Unlocks the Knox Workspace. |
|
Reset Knox Workspace Password |
Resets the Knox Workspace password. When the user forgets the Knox Workspace password, this command is sent to reset the password. NOTE— Depending on the Android OS version, the process to re-configure the new password may differ. For Android 8.0 (Oreo) or higher, the user will receive a temporary password after Knox Manage authentication. And then, the user can re-configure the new Knox Workspace password. For operating systems lower than Android 8.0 (Oreo), the user can re-configure the Knox Workspace password directly after Knox Manage authentication.
|
|
Uninstall Knox Workspace |
Deletes the selected Knox Workspace. Inventory information is updated on the server upon deletion. |
