- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Open API reference
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Workspace
configuration
IT admins—and device users, if granted requisite rights at the policy level— can customize Workspace configuration on target devices. This feature offers IT admins the ability to grant or revoke device users' rights to:
- Rename Workspace and Personal tabs
- Install apps from the Personal space on their device to the Workspace
The following sections provide detailed examples for these tasks.
1. Rename Workspace and Personal tabs
In certain cases, device users may prefer to customize the Work and Personal tabs on their device to better represent their use and available features. The following example describes the process to change the device configuration policy to allow changing tab names.
- In your UEM console, open the Device Configuration Profile that is associated with your target devices, and then on the middle navigation menu, click Properties. The Device Configuration Policy Properties page opens.
-
On the Properties page, in the Settings list, click
Configured. The OEMConfig page for the Device Configuration
Policy opens.
- On the OEMConfig page, next to Work profile policies, click Configure. The Work profile policies (Policy Owner) page opens.
- On this page, next to the Work profile configuration title, click Configure. The Work profile configuration page opens.
- On this page, next to the Enable work profile configuration controls title, click True to enable work profile configuration controls and apply these changes to your target devices.
- In the Customize work profile tab name field, enter CorporateTasks.
- In the Customize work profile tab name field, enter CorporateTasks.
- Click OK. The new tab names are deployed to target devices based on your deployment settings.
2. Install apps from the Personal space to the Workspace
Depending upon your IT security policies, IT admins may want to restrict device users from installing personal—or more specifically, non-work related apps—in the Workspace. Installing apps that are not specific to your organization or that are not approved for use within your network may compromise the security of the apps and data in the Workspace on the device. The following example describes the process to restrict users from installing personal apps in the Work profile.
- In your UEM console, open the Device Configuration Profile that is associated with your target devices, and then on the middle navigation menu, click Properties. The Device Configuration Policy Properties page opens.
-
On the Properties page, in the Settings list, click
Configured. The OEMConfig page for the Device Configuration
Policy opens.
- On the OEMConfig page, next to Work profile policies, click Configure. The Work profile policies (Policy Owner) page opens.
- On this page, next to the Allow adding apps from personal space to work profile title, click False.
- Click OK. The new installation restriction is deployed to target devices based on your deployment settings.