Back to top
Home / Knox Mobile Enrollment / How-to guides / Android Enterprise (Advanced) profiles /

Create an advanced profile

Last updated September 18th, 2023

Advanced profiles offer supplementary features that provide additional controls to conditionally allow automatic device enrollment locking and information theft protection.

Important

If you apply an advanced profile to a device that was enrolled without an active Knox Suite license, the additional features provided by the advanced profile won’t be available. In other words, you will be able to apply the advanced profile, but none of the advanced features will function.

You can create an advanced profile in a process similar to that for regular profiles:

  1. On the Knox Mobile Enrollment console, go to Profiles, then click Create Profile.

  2. Click Android Enterprise (Advanced) as the profile type.

    select profile type

  3. Enter the Android Enterprise (Advanced) profile settings for the advanced profile. For more information, repeat steps 1–3 in Android Enterprise profiles.

  4. Click Continue to configure the profile settings page. To set the EMM configuration and device settings, repeat steps 4–9 in Android Enterprise profiles.

  5. Click Continue to configure advanced settings:

    1. The Lock unenrolled devices feature allows you to automatically lock a device if it isn’t enrolled in an EMM within a window of time specified in the Lock device field and prevent device users from bypassing enrollment. This feature is turned on by default.

    2. Set a time window in the Lock device field by setting the time window to be 1–30 days (default is 7 days) after a profile is pushed to a device. The enrollment status is checked once per day, until the time window is reached.

    3. Click Immediately lock a device to immediately lock a device if it becomes rooted or starts running unofficial firmware.

    4. (Optional) Enter a Lock Message to show to the device user when the device is locked.

    5. Enter a 10-digit phone number that the device user can contact you on, if the device is locked. The number must contain hyphens (-) separating the number sequences. For example, 408-555-1234 is a well-formed phone number.

    advanced prof locking

  6. Click Create to finish creating the profile.

Congratulations! You have successfully created an advanced profile, and it’s now available in the list of profiles on the Profiles page. The Profile Type column marks it as Android Enterprise (Advanced).

To learn how to assign the profile to an uploaded device, see assign advanced profiles. Furthermore, to learn how to monitor the profile and its settings, see monitor advanced profiles.

Is this page helpful?