Configure Android Enterprise settings

Last updated April 29th, 2026

Once you register Knox Manage on the Google Admin Console, you can configure additional Android Enterprise settings for your tenant.

Click your profile icon then click Settings. Then, navigate to the KNOX MANAGE section and click ANDROID ENTERPRISE. You can configure your Android Enterprise settings on the following tabs:

  • Account
  • App settings
  • Block enrollment

Account

You can view and manage details about your Android Enterprise account on the Account tab.

The details you can view include your domain or business name, organization ID, and the Google account email associated with your Android Enterprise account.

A screenshot of the Account tab.

You can change or unlink your Android Enterprise account from Knox Manage. Your devices stay enrolled in Knox Manage even if you change or unlink your account. You can also update your admins on Google Play settings.

Google connection status

Click TEST AND SYNC to get the latest Android Enterprise account information. Perform a sync after updating admins on Google Play settings to ensure Knox Manage has the latest admin account information.

Zero-touch account

Set up ZERO-TOUCH ACCOUNT to provision Android devices with zero-touch enrollment.

App settings

On the App settings tab, configure settings for app updates and Google Play Store layout:

A screenshot of the App settings tab.

Default Automatic App Updates

Choose how apps auto-update once they’re assigned to groups. You can set apps to only update over Wi-Fi, use any network for updates, let the device user choose how apps update, or never auto-update apps.

Auto-update schedule

Force apps to update at a specific time and for a certain duration. Set the Start time and Duration.

Reset to default managed Google Play Store layout

Click RESET to reset the managed Google Play Store layout on your devices.

Block enrollment

On the Block enrollment tab, you can set rules for which devices can enroll to Knox Manage. On the dropdown, select one of the following options to restrict device enrollment:

A screenshot of the Block enrollment tab.

  • Don’t block enrollment — Allows devices to enroll with no restrictions.
  • Devices with certain device IDs, models, or other specifications — Specifies which device IDs, models, or OS versions can enroll to Knox Manage. The Set device specifications page opens automatically if you click this option. Click ADD to set your specifications, then click DONE.
  • Fully managed devices — Specifies groups that can only enroll fully-managed devices. The Set groups page opens automatically if you click this option. Click ADD to set your groups, then click DONE.
  • Devices added through Knox Mobile Enrollment — Enrolls devices through Knox Mobile Enrollment only.

Is this page helpful?