IBM Security MaaS360

 View Only
  • 1.  Samsung Devices

    Posted Tue October 27, 2020 08:23 AM
    Hi,

    Please can someone provide some advice?

    We deploy all our Samsung mobiles (various models) using Android Enterprise manager in DO mode. 

    We've had lot's of issues with various Samsung system apps missing. i.e. Clock, Camera Etc. For all of these apps I've had to go into the policy and add the list of APK's to the whitelist.  On some devices that have Bixby, I've never managed to get these to appear on the mobiles.

    Why can't I deploy devices using Android Enterprise but allow ALL the preinstalled Samsung Apps that come with the mobile?  I'd rather blacklist apps that I don't want to appear.

    Am I missing something?  Is there an easier way to do this?  How do others with Samsung devices manage this please?

    Thanks
    Andy


    ------------------------------
    Andy Flatman
    ------------------------------


  • 2.  RE: Samsung Devices

    Posted Tue October 27, 2020 08:24 AM
    And just to add something.

    I deployed a new Samsung A21s last week and now the user tells me they have no 'Sound' option in the settings app so can't change their ringtone. Please can someone help me with what's going on here?

    Kind regards
    Andy

    ------------------------------
    Andy Flatman
    ------------------------------



  • 3.  RE: Samsung Devices

    Posted Wed October 28, 2020 05:47 AM
    Hi Andy
    The settings that control (and configure) these apps can be found in your Android policy, under the Android Enterprise settings section, in App Compliance. 
    The first section on this page is 'System apps to be whitelisted' and if you check the initial box you see the list of native apps for Google apps in Android. 
    Just in case these are Samsung-specific apps you could locate these settings in a similar place under KNOX Settings (doesn't have System Apps section here, you would need to get the App ID's in this case from a device where they are installed, and put them into the Whitelisting section). 
    Please test and confirm. 
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM
    Dublin
    ------------------------------



  • 4.  RE: Samsung Devices

    Posted Thu October 29, 2020 05:16 AM
    Hi Eamonn,

    Thanks for the info. I already have the Android Enterprise, App Compliance section configured in the policy. This is where I've whitelisted the Samsung Apps where I already know the AppID.  The option for (google) system apps is ticked.  

    We aren't a user of the KNOX enrolment programme so I don't see a separate KNOX app configuration option - Should I be able to configure this somewhere? It would be good to allow all Samsung system apps.

    Thanks
    Andy

    ------------------------------
    Andy Flatman
    ------------------------------



  • 5.  RE: Samsung Devices

    Posted Fri October 30, 2020 07:14 AM
    Hi Andy
    While it is true that many policy settings in Android policy are relevant to the KNOX container, there are still some options that you can use in the KNOX section of the policy. Just raise a Support ticket asking them to switch on KNOX in the back end on your portal. 
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 6.  RE: Samsung Devices

    Posted Tue November 10, 2020 05:48 AM
    Thanks Eamonn - Will give that a go.

    ------------------------------
    Andy Flatman
    ------------------------------



  • 7.  RE: Samsung Devices

    Posted Sat November 14, 2020 04:39 AM
    Hi Andy,

    If your enrolling devices using a QR code provisioning then check the Leave All system Apps Enabled option while creating a QR code.

    Try this on one of your test devices.


    ------------------------------
    mohanraj
    ------------------------------



  • 8.  RE: Samsung Devices

    Posted Thu November 26, 2020 04:41 AM
    Hi Mohanraj,

    I was enrolling using the manual MaaS360 QR Code,  I switched to the method you list above and now this works perfectly. All the system apps are installed but I can still block certain apps in the Android Enterprise policy. This is exactly what I want. 

    Thanks for everyone's help.

    Andy.


    ------------------------------
    Andy Flatman
    ------------------------------



  • 9.  RE: Samsung Devices

    Posted Tue December 08, 2020 05:33 PM
    Hi Andy,

    I would just like to add that there is a setting within the AE Settings policy (sorry, I am not at my desk so cannot point you to the exact location) that defaults to 'MUTE MASTER AUDIO / VOLUME'. This caused me quite a headache when testing a Cypher Labs demo unit and caused a discussion amongst the community with Google developers and IBM. It might be worth just checking this out. Why on earth would this setting be defaulted to OFF? I believe this to be an error.

    Steve.

    ------------------------------
    Steve Birkett
    ------------------------------