Deep Settings Customization
Last updated July 26th, 2023
The Deep Settings Customization feature is available on devices running Knox v3.4 and higher with a KPE Premium license.
1. Create and configure deep settings
The following example describes the process to create and configure a new policy that hides all notifications on the screen when the device is locked.
In your UEM console, open the Device Configuration Profile that is associated with your target devices. On the middle navigation menu, click Properties. The Device Configuration Policy Properties page opens.
On the Properties page, in the Settings list, click Configured. The OEMConfig page for the Device Configuration Policy opens.
On the OEMConfig page, next to Device and Settings customization profile, click Configure. The Device and Settings customization profile page opens.
On the customization profile page, next to the Configure values in settings menu title, click Configure. The Configure values in settings menu page opens to show a refreshed navigation menu to its immediate left.
On the refreshed navigation menu, click Configure values in settings menu > Add setting. The Configure values in settings menu page opens to show fields and controls that help you customize your device settings.
Do as follows:
In the Name of the setting item list, select Lock screen > Notifications > Hide content.
In the Set value for setting list, select On.
If you want to allow the device user to change this setting, in the Allow end-user modification of this setting field, click True.
Click OK. The new setting is created and you can now deploy it to your target devices. For information, go to: Deploy deep settings.
Repeat steps 5 to 7 for each type of deep setting you want to configure in your Device Configuration Profile.
The side key used to be a single purpose power key, but on newer devices you can program the side key to perform multiple functions depending on how it is pressed.
You can use this key to configure quick launch camera, open Bixby or open any app installed on the device. This can be done using Device key mapping.
It can be used to wake Bixby or open the power off menu on long press. Wake Bixby is currently supported only in Work Profile on Corporate owned (WP-C) devices and will be grayed out in other modes. Power Off is currently supported in both Device Owner (DO) and WP-C modes.
The Side Key press and hold can be configured in Device and Settings customization profile > Configure values in settings menu > Configure a setting menu item.
Configure the Side Key mapping as shown in the image. In Specify value field, IT admins can enter either 0 or 1. Set the value to 0 to wake Bixby and 1 to open the power off menu. Disable Allow end-user modification of this setting to disallow end-users to modify settings. The corresponding menu item on the UI is grayed out. Enable Configure to hide settings to hide this setting from the UI.
To configure deep settings that require specific values be set beyond simply enabling or disabling a specific control, go to Configure unique deep settings.
2. Configure unique deep settings
The following describes how to set specific deep settings that require configuration beyond simply enabling or disabling a specific control. This section will be periodically updated as unique deep settings requiring specific configuration values are added.
For information on the unique configuration controls available to the device Lockscreen, go to: Deep settings for Lockscreen policies. These deep settings include the configuration parameters required for the roaming clock, face widgets, notifications, language and input, system sounds and vibrations, display settings, and font utilization.
Refer to the Show notification icons controls to define whether all or some notifications display on the device. Notification setting, (battery percentage, icon display, etc.) adjustments are made within the Lockscreen customization policies section. Enter the notification icon display setting as one of the following numeric values:
- 0 — All notifications are received.
- 1 — Only the three most recent notifications are received.
- 2 — Notifications are turned off and none are received.
- 3 — Notifications are enabled, but only a defined number are received.
Set one of the following Language Shortcut values to configure how language shortcuts are utilized on the device. Language settings are configured within the Device settings policies section, while other language settings such as preferred speech engine, pitch and speech rate can be set within the Lockscreen customization policies section. Enter the Language shortcut setting as one of the following numeric values:
- 1 — shift+space
- 2 — ctrl+space
- 3 — shift+space & ctrl+space
- 4 — left alt+shift
- 5 — shift+space & left alt+shift
- 6 — ctrl+space & left alt+shift
- 7 — All
3. Deploy deep settings
The following example describes how to use the policy that hides all notifications on the locked device screen to automatically secure target devices in a group called High security devices.
After you have created a deep settings policy in your chosen Device Configuration Policy, go to Groups > All groups.
Within the All groups page, confirm the High security devices device group exists. Refer to your UEM console’s help documentation for information on creating a new, or editing an existing, device group.
Go to the Device Configuration Policy that contains the appropriate deep settings configuration > click Assignments > Include tab.
On the Include page, in the Assign to list, select High security devices, and click Save.
Depending upon the settings chosen for deploying Device Configuration Policy changes, the new settings are deployed on the devices in the High security devices group.
Is this page helpful?
Thank you for your feedback!