Granular Device Management

Knox Platform's granular device management features are specifically curated – from surveying our customers – to help solve some of the most common frustrations enterprises face when mass deploying devices. These unique policies provide device flexibility and customization beyond any other device provider on the market. Granular device policies help organizations save money, time, and administrative overhead.

Read more conceptual information about Granular device Management in the Knox White paper.

Kiosk mode

Kiosk mode provides a variety of extended options to lock down or configure your device according to your business needs. Often it is used to create a single purpose device– for example, a point of sale kiosk.

The example below shows the settings required to lock a device to single app. The screen in the example below is available in Knox Manage AE Kiosk mode only. Once the package is uploaded, a variety of device restriction options are available. In this use-case, we have disabled all of the hardware buttons except the volume up and down. This prevents users from leaving the app or restarting the device.

age AE 

Custom boot banner

Samsung Knox is the only device provider that allows an enterprise to natively change the device boot logo. In many industries, such as government or defense, this is a mandatory security feature required to reach compliance.

In this example below, a message to return the device to IT displays every time the device boots up.

Samsung DeX

Samsung DeX is a new user experience that extends the functionality of your Android device to a desktop environment. Simply connect a compatible device to an HDMI monitor with the Samsung DeX Station or DeX pad, and it automatically launches. Read more about DeX management in the Knox White Paper.

Here is an illustration of this process when launched.

Knox can control DeX features such as:

Developer mode

Knox allows you to disable developer mode. This prevents access to settings on the phone that may be able to disrupt your MDM agent or policies (e.g - enable USB debugging). In this example below, we have turned off access to only a few of the developer mode features – background process limit, quit application upon killing activities and mock location.

If developer mode is disabled, the user sees a prompt similar to this when they try to access it.