Lockdown & Kiosk: Samsung Knox Standard

A Lockdown & Kiosk: Samsung Knox Standard configuration disables certain features of Samsung Knox Standard devices and creates a Allowlist of apps that will be available to users in Kiosk mode.

Samsung KNOX Standard Configuration is deprecated and not supported on devices with Android 9 and later versions.

Lockdown settings

Setting

What To Do

Name

Enter a name that identifies this configuration.

Description

Enter a description that clarifies the purpose of this configuration.

Samsung Knox Lockdown Settings: Disable certain features on Samsung Knox devices only.

Disable Wi-Fi

Select to turn off access to wireless LANs.

Disable Camera

Select to turn off camera access.

Disable Bluetooth

Select to turn off Bluetooth features.

Allow Bluetooth Audio-only

Select to turn on Bluetooth audio features only.

Disable Mobile Data

Select to turn off exchange of data when one device touches another.

This cannot be disabled if Wi-Fi is disabled.

Disable GPS

Select to turn off GPS.

Disable Phone Dialer

Select to turn off the phone app.

Disable SD Card

Select to turn off SD card access.

Disable Google Backup

Select to turn off backups to Google servers.

Disable Copy/Paste

Select to turn off access to copy/paste functions.

Disable NFC

Select to turn off NFC (Near-field Communication) data exchange when the device touches another device.

Disable Microphone

Select to turn off app access to the device microphone.

Disable Screen Capture

Select to turn off the ability to use the device's built-in screen capture feature. Turning on this option does not allow screen captures of Go. Such screen captures are disallowed.

Disable Bluetooth Tethering

Select to turn off Bluetooth tethering as an option for using the internet connection of one device to provide internet access to another device.

Disable USB Debug

Select to turn off the USB debugging feature.

Disable USB Tethering

Select to turn off USB tethering as an option for using the internet connection of one device to provide internet access to another device.

Disable Wi-Fi Tethering

Select to turn off Wi-Fi tethering as an option for using the internet connection of one device to provide internet access to another device.

Disable Native Browser

Select to prevent users from accessing the Android browser.

Disable YouTube

Select to prevent users from accessing YouTube.

Disable Factory Reset

Select to prevent users from returning the device to factory defaults.

Disable OTA Upgrade

Select to turn off over-the-air upgrades of the device firmware.

Warning: Do not disable Disable Setting Changes if OTA Upgrade is enabled. Disabling Setting Changes when OTA Upgrade is enabled can result in a non-functional device because setting changes are required for upgrade.

Disable Voice Roaming

Select to turn off access to voice calls while the device is roaming.

Disable USB Media Player

Select to turn off the USB media player.

Disable Google Play

Select to turn off access to Google Play.

Disable Data Roaming

Select to turn off data exchange while the device is roaming.

Disable Unknown Sources

Select to disable installing apps from anywhere but the Google Play Store, except for the Go app.

Disable Device Admin Privileges Removal

Select to prohibit users from turning off device admin privileges from Go.

Disable Setting Changes

Select to turn off access to the device Settings app.

   

Warning: Do not disable Disable Setting Changes if OTA Upgrade is enabled. Disabling Setting Changes when OTA Upgrade is enabled can result in a non-functional device because setting changes are required for upgrade.

Kiosk Mode Settings: Kiosk Mode applies additional restrictions to the devices including limited access to apps via a customized launcher.

Applicable to Android versions up to 8.1. For Android versions 9.0, use Android Enterprise Managed Device Kiosk configuration.

Enable Kiosk Mode

Select to configure Kiosk Mode on Android devices.

Allow User to Access Wi-Fi Settings

Select to allow a  user to change Wi-Fi settings and access preferred wireless networks.

Allow User to Access Bluetooth Settings

Select to allow a user to change the Bluetooth settings and pair additional Bluetooth devices.

Allow User to Delay Application Updates

Select to allow a user to delay application updates.

GPS Location Settings

Select one of the following GPS location settings:

  • Disable Location
  • Enable Location
  • Allow User to Select

Kiosk Exit PIN

Enter the four-digit code that the end user must type in order to exit Kiosk Mode.

Create a Allowlist of apps: These apps will be available to users in Kiosk Mode by adding apps to the allowed apps list. Drag and Drop to arrange the apps in the order they should appear in the Kiosk Mode launcher.

Adding an application to the list of allowed apps will not install the app on device. Be sure to distribute each app to the appropriate users and user groups in the App Catalog.

Built-In Apps

Click +Add to include listed native apps in the group of apps allowed in Kiosk Mode.

If you have disabled Dialer or Camera in Lockdown settings above, they cannot be added to the Allowed Apps list.

App Catalog

Click +Add to included listed apps from the app catalog in the group of apps allowed in Kiosk Mode.

Other Apps

Click +Add to include the package name of an app that is not available on the Google Play Store.

Kiosk Mode Allowed Apps

Click X to remove an app from the group of apps allowed in Kiosk Mode. Drag and drop to change the order in which apps appear on kiosk devices.

 

 

Using Kiosk mode on Android 4.4 or supported newer versions, Samsung devices that support multiple users, will automatically lock down the multi-user feature while in Kiosk mode.

For more information, see How to create a configuration