Device camera and home button access blocked by Knox security policy

Environment

• Knox Enrollment Services
• Knox Platform for Enterprise
• Knox Service Plugin

Overview

When device users are attempting to open their camera app or use their device’s home button, they may receive the following pop-up message:

Knox security policy restricts this action

However, when IT admins check their Unified Endpoint Management (UEM) system, they find no Android Enterprise or Knox Service Plugin policy configurations that would cause this restriction.

Cause

An outdated Knox Enrollment Service agent may have caused these restrictions to be applied during device enrollment.

Resolution

To resolve the issue, you can either:

1. Factory reset and re-enroll the affected devices.
2. Update your Knox Enrollment Service agent:
   1. On your device, go to me.samsungknox.com.
   2. Tap Next > Update.
   3. After you finish updating your device, tap Cancel to exit. This updates the Knox Enrollment Service agent and prevents your device from unnecessarily re-enrolling into your EMM.