Device Restrictions
A group of controls to allow or block specific operations on the user's device. Availability: Knox v2.7 or higher with a Standard license.
  • Enable device restriction controls
    Use this control to enable or disable restriction controls for the device. Enable these controls before changing any device restriction settings. If these controls are not enabled, any device restriction settings are ignored.
  • Allow microphone
    Use this setting to disable the microphone without user interaction. Disabling this control restricts the use of the microphone for recording purposes, but does not impact the use of the phone application on the device.
  • Allow WiFi
    Use this control to allow or restrict the device's ability to connect to Wi-Fi networks.
  • Allow WiFi Direct
    Use this control to allow or restrict the device's ability to connect to Wi-Fi Direct networks.
  • Allow Bluetooth
    Use this control to allow or restrict the device's ability to make Bluetooth connections.
  • Allow cellular data
    Use this control to allow or restrict the device's ability to use the cellular data connection.
  • Tethering controls
    A group of controls to configure the use of tethering technologies on the device.
    • Allow tethering
      Use this control to allow or block all types of tethering on the device. Enable this control before changing any other tethering settings. If this control is not enabled, any changes to other tethering settings are ignored.
    • Allow WiFi tethering
      Use this control to allow or block tethering on Wi-Fi. If the use of all tethering is disabled, changing these settings has no impact.
    • Allow Bluetooth tethering
      Use this control to allow or block tethering on Bluetooth. If the use of all tethering is disabled, changing these settings has no impact.
    • Allow USB tethering
      Use this control to allow or block tethering on USB. If the use of all tethering is disabled, changing these settings has no impact.
  • Allow USB media player
    Use this control to enable or disable the use of an external USB media player on the device.
  • Allow USB host storage
    Use this control to enable or disable the use of an external USB storage device, such as an external hard disk or a flash drive.
  • Setup USB exception list
    If the Allow USB host storage setting is enabled, use this control to configure the use of one or more classes of USB devices or USB composite device on the mobile device. If the Allow USB host storage setting is disabled, any settings in this section have no impact. A USB Composite Device is a peripheral device that supports more than one device class. If you use this policy to control a USB Composite Device, ensure that you add all supported classes in the exception list.
  • Allow USB debugging
    Use this control to enable or disable the device to enter into a USB debugging mode.
  • Allow developer mode
    Use this control to enable or disable the device to enter into a developer mode.
  • Allow Share Via option
    Use this control to enable or disable the Share Via option that presents User options to share data from one application to another application using one of the many available options.
  • Allow power saving mode
    Use this control to enable or disable the device from entering the Power Saver mode automatically.
  • Allow data saver mode
    Use this control to enable or disable the device from entering the Data Saver mode automatically.
  • Allow VPN connections
    Use this control to enable or disable VPN connections on the device.
  • Allow user to modify Settings
    Use this control to allow or restrict the user from changing the device settings.
  • Enforce external storage encryption
    Use this control to enable external storage (SD Card) encryption. Enabling this option prompts the user to start encryption. For security reasons, we recommend setting the policy to use an alphanumeric password.