- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Open API reference
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program

Knox White Paper
Advanced App Management
Enterprises need a strong Mobile Application Management (MAM) strategy to deploy apps effectively, manage app licenses, secure apps, optimize app usage, and handle app data safely. The Knox platform provides comprehensive app management capabilities that allow IT admins to control all aspects of apps installed on a device. These capabilities can also be extended inside the Work profile to provide a safe haven for sensitive apps and data.
Enterprises use EMM solutions to centrally configure and remotely manage apps. Knox provides a full complement of management functions, providing IT admins with the ability to:
- Install, uninstall, update, enable, disable, start, stop, or wipe data for an app
- Allow or block the following:
- apps that can be installed
- apps that can auto-update
- apps that can use the Clipboard
- apps that can be started and stopped by users
- apps that can access the USB port
- app accounts, permissions, and notifications
- Disable or enable other apps like Google Play, Google Chrome, Voice Dialer, and YouTube
- Get info like the app code size, cache size, data size, total size, notification mode, and restrictions
- Get statistics like app launch count, component state, app focus state, CPU usage, data size, memory usage, and network stats
Unique advantages of Knox App Management
What sets the Knox platform apart from other mobile platforms are the advanced app management features not found in other solutions, providing additional advantages that enable enterprises to be fully efficient and productive.
App control
- Clear cache data — Remove cache memory for an individual or list of apps to help optimize space and have complete control over your data.
- Set default apps by intent — Set an app as the primary app for a given task. For example, ensure your solution only uses a certain Internet browser or force your SMS service to comply with your strict company policies.
- Admin privilege — An admin can prevent the activation of another admin's app, unless the app is part of the allowed apps.
Advanced app blocking and allowances
- Clipboard access — Prevent access to the native Android clipboard within an app. If an app tries to use the clipboard, the content is deleted.
- USB access — Prevent user permission for one or more USB devices to be used by an app.
- Per-app notifications blocking — Prevent status bar notifications for an app and choose to block either text, sound, or both.
- App widgets — Allow only approved widget packages into your Work container, and view them in launcher mode on a Samsung device.
Granular app control
- Silent app side loading — Silently install any app without user interaction or permission.
- Disable app components — Enable or disable a specific package component such as the activity, receiver, service, or provider class.
- Battery optimization — Allowlist apps from Google's Doze mode, app standby or power saving mode.
- App force stop and launch — Force stop any app including background processes and system apps.
- App focus — Monitor any app and receive a notification if a user leaves the window of an allowed app.
- Change app name or app icon — Change an app's package name and icon.