NOTE: If disabled, all Bluetooth functionality is disabled. If Bluetooth scanning is disabled, the device declines location accuracy and does not allow apps and services to scan for and connect to nearby devices automatically via Bluetooth.

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean allow = false; // disallow Bluetooth scanning and Bluetooth access
     if (ekm.getAdvancedRestrictionPolicy().allowBLE(allow)) {
         Log.w(TAG, "Bluetooth scanning and Bluetooth access are not allowed");
     } else {
         Log.w(TAG, "Failed to set the policy.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean allow = false; // disallow firmware auto update
     if (ekm.getAdvancedRestrictionPolicy().allowFirmwareAutoUpdate(allow)) {
         Log.w(TAG, "firmware auto update not allowed");
     } else {
         Log.w(TAG, "Failed to set the policy.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

• It is strongly recommended to handle NoSuchMethodError when invoking this function as certain Knox SDK 3.10 devices may not support the Advanced intelligence features and the associated API. If NoSuchMethodError occurs, there are no security concerns since the Advanced intelligence features are unsupported in such cases.
• For devices that do not support Advanced intelligence features provided by Samsung, the policy will have no effect.

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     if (ekm.getAdvancedRestrictionPolicy().allowIntelligenceOnlineProcessing(false)) {
         Log.w(TAG, "Online processing of Advanced intelligence features by Samsung is disallowed successfully.");
     } else {
         Log.w(TAG, "Online processing of Advanced intelligence features by Samsung is not disallowed.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 } catch (NoSuchMethodError ne) {
     Log.w(TAG, "NoSuchMethodError: " + ne);
 }
 
  

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean allow = false; // disallow local contact storage
     if (ekm.getAdvancedRestrictionPolicy().allowLocalContactStorage(allow)) {
         Log.w(TAG, "Local contact storage is not allowed");
     } else {
         Log.w(TAG, "Failed to set the policy.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean enable = true;
     if (ekm.getAdvancedRestrictionPolicy().allowOnlySecureConnections(enable)) {
         Log.w(TAG, "Policy successfully set. Only VPN connections using IPSec or SSL/TLS are allowed.");
     } else {
         Log.w(TAG, "Policy not successfully set.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

Note: This API can be called only by Device owner or Profile owner.

 
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     if (ekm.getAdvancedRestrictionPolicy().allowRemoteControl(false)) {
         Log.w(TAG, "Remote Control is disabled successfully.");
     } else {
         Log.w(TAG, "Remote Control is not disabled.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 
   

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 AdvancedRestrictionPolicy advancedRestrictionPolicy = kcm.getAdvancedRestrictionPolicy();
 try {
     if (advancedRestrictionPolicy.allowRemoteControl(false)) {
         Log.w(TAG, "Remote Control is disabled successfully.");
     } else {
         Log.w(TAG, "Remote Control is not disabled.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean allow = false;
     if (ekm.getAdvancedRestrictionPolicy().allowUserSetAlwaysOn(allow)) {
         Log.w(TAG, "Policy was applied successfully and user changes on Always ON settings are blocked.");
     } else {
         Log.w(TAG, "Some error occured and the policy was not applied properly.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

NOTE: If Wi-Fi scanning is disabled, the device declines location accuracy and does not allow apps and services to scan for and connect to nearby devices automatically via Wi-Fi.

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean allow = false; // disallow Wifi scanning
     if (ekm.getAdvancedRestrictionPolicy().allowWifiScanning(allow)) {
         Log.w(TAG, "Wifi scanning is not allowed");
     } else {
         Log.w(TAG, "Failed to set the policy.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean enable = false;
     if (ekm.getAdvancedRestrictionPolicy().enableODETrustedBootVerification(enable)) {
         Log.w(TAG, " Enable ODE Trusted Boot verification not allowed");
     } else {
         Log.w(TAG, "Failed to set the policy.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean result = ekm.getAdvancedRestrictionPolicy().isOnlySecureConnectionsAllowed();
     if (result) {
         Log.w(TAG, "Only IPSec or SSL/TLS VPN connections are allowed.");
     } else {
         Log.w(TAG, "Any VPN connection is allowed.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     if (ekm.getAdvancedRestrictionPolicy().isRemoteControlAllowed()) {
         Log.d(TAG, "Remote Control is enabled");
     } else {
         Log.d(TAG, "Remote Control is disabled");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 AdvancedRestrictionPolicy advancedRestrictionPolicy = kcm.getAdvancedRestrictionPolicy();
 try {
     if (advancedRestrictionPolicy.isRemoteControlAllowed()) {
         Log.w(TAG, "Remote Control is enabled.");
     } else {
         Log.w(TAG, "Remote Control is disabled.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean result = ekm.getAdvancedRestrictionPolicy().isUserSetAlwaysOnAllowed();
     if (result) {
         Log.w(TAG, "Users are allowed to change Always ON configuration..");
     } else {
         Log.w(TAG, "Users are not permitted to change Always ON mode.");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }
 

 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 try {
     boolean enable = false;
     ekm.getAdvancedRestrictionPolicy().setCCMode(enable);
     Log.w(TAG, "Set CCMode is called.");
 } catch (SecurityException e) {
     Log.w(TAG, "Exception" + e);
 }