Endpoint Manager

Tip:  You can set any profile as default profile in the 'Profiles' screen. See Edit Configuration Profiles for more details.

Note: Many Android profile settings have small information boxes next to them which indicate the OS and/or device required for the setting to work correctly.

For example, the following box indicates that the setting supports KNOX 2.0+ (Samsung For Enterprises) devices and tablets only.

AV scanning exclusion list

Text Field

Lets you add trusted apps.

Trusted apps are excluded from real-time, on-demand and scheduled antivirus scans run on the devices. You can add apps installed from the Google Play Store and apps installed through the EM App store.

• Enter the bundle identifier of the app that you want to exclude from antivirus scanning.

For more details on getting the bundle identifier for an app, see explanation given below this table.

Click the variables button to insert dynamic values. See Create and manage Custom Variables for more details on variables.

• Click  to add more 'AV scanning exclusions list' fields.

• Click the to remove an item from the 'AV scanning exclusion list ' field.
  

Automatically terminate malware process

Checkbox

If enabled, any malware found is stopped from running.

From this point it might be ignored (allowed to remain on the device) or uninstalled, depending on the settings in Android client antivirus settings.

To view these settings, click:

'Settings' > 'Portal Set-Up' > 'Client Settings' > 'Android' > 'Antivirus' 

Schedule scan

Checkbox

Select if you want to automate the process of antivirus scanning. Select the checkbox beside the day(s) that you want the scheduled scan to run.

Allow Device discovery via Bluetooth

Checkbox

Allows discovery of other devices via Bluetooth.

Allow Bluetooth Pairing

Checkbox

Allows users' devices to pair with other their devices via Bluetooth.

Allow Headset

Checkbox

Allows the use of bluetooth headsets connected with the device

Allow Hands Free

Checkbox

Allows to use the device with Bluetooth headsets and hands-free kits

Allow A2DP

Checkbox

Allows the transmission of stereo audio from the device to a set of Bluetooth headphones or stereo system.

Allow Outgoing Calls

Checkbox

Allows users to make calls using Bluetooth enabled devices (eg. hands-free devices)

Allow Bluetooth Tethering

Checkbox

Allows users to enable/disable Bluetooth tethering option.

Allow connection to Desktop or Laptop via Bluetooth

Checkbox

Allow users to enable/disable Bluetooth connection with Desktop or Laptop.

Allow data transfer

Checkbox

Allows data transfer between devices via Bluetooth.

Allow Pop-ups

Checkbox

Pop-ups in browsers will be allowed in the user devices.

Allow Javascript

Checkbox

Java scripts will be allowed on user devices.

Accept Cookies

Checkbox

Users will be allowed to modify Cookies settings on their devices.

Remember Form Data for later use

Checkbox

Users will be allowed to use Auto Fill settings on their devices.

Show Fraud Warning Settings

Checkbox

Users will be allowed to view Fraud Warning Settings on their devices.

Name

Text Field

Enter the label of the certificate.

Click the variables button  for more details on variables. See Create and Manage Custom Variables for more details on variables.

Description

Text Field

Enter an appropriate description for the certificate.

Data

Browse button

Browse to the location of the stored certificate and select the certificate.

Note: Only certificate files with extensions 'pub', 'crt' or 'key' can be uploaded.

Note: The feature is supported for Samsung for Enterprise (SAFE) devices only. This area allows administrators to configure email settings on devices.

Configure for Type*

Drop-down

Choose the protocol for incoming mail server from IMAP and POP.

Email address*

Text Field

Enter the email address of the user at the incoming mail server If the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

The email address of the users to whom the profile is associated are automatically added to the profile while rolling out the same to the devices.

See Create and Manage Custom Variables for more details on variables.

Account Display Name

Text Field

Enter a label to identify the user's email account at the incoming mail server, if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

The email address of the users to whom the profile is associated are automatically added to the profile while rolling out the same to the devices.

Set as Default Account

Checkbox

The email account is set as default for the users.

Mail Server Host Name (for Incoming Mail) *

Text Field

Enter the host name or IP address of the incoming mail server, if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

Mail Server Port Number (for Incoming Mail) *

Text Field

Enter the server port number used for incoming mail service for a single user.

For POP3, it is usually 110 and if SSL is enabled it is 995. For IMAP, it is usually 143 and if SSL is enabled it is 993.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

Login (for Incoming Mail)*

Text Field

Enter the username for the email account of the user at the incoming mail server if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

The email usernames of the users to whom the profile is associated are automatically added to the profile while rolling out to the devices.

Password (for Incoming Mail)*

Text Field

Enter the password for the email account of the user at the incoming mail server if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

The email passwords of the users to whom the profile is associated are automatically added to the profile while rolling out to the devices.

Use SSL Incoming

Checkbox

Communication between incoming mail server and devices is encrypted using SSL (Secure Socket Layer Protocol).

Accept All Certificates (for Incoming Mail)

Checkbox

The device automatically accepts all SSL certificates from the incoming mails.

Accept TLS Certificates (for Incoming Mail)

Checkbox

The device automatically accepts all secure certificates for TLS (Transport Secure Layer Protocol) from the incoming mails.

Mail Server Host Name (for Outgoing mail)*

Text box

Enter the host name or IP address of the outgoing (SMTP) mail server for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

Mail Server Port Number (for Outgoing Mail) *

Text box

Enter the server port number used for outgoing (SMTP) mail service, if the profile is for single user.

If no port number is specified then ports 25, 587 and 465 are used in the given order.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

Login (for outgoing Mail)*

Text Field

Enter the username for the email account of the user at the outgoing (SMTP) mail server if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

The email usernames of the users to whom the profile is associated are automatically added to the profile while rolling out to the devices.

Password (for outgoing Mail)*

Text Field

Enter the password for the email account of the user at the outgoing (SMTP) mail server if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

The email passwords of the users to whom the profile is associated are automatically added to the profile while rolling out to the devices.

Use SSL (for Outgoing Mail)

Checkbox

Communication between outgoing mail server and devices is encrypted using SSL.

Accept All Certificates (for Outgoing Mail)

Checkbox

The device automatically accepts all SSL certificates from outgoing mails.

Accept TLS Certificates (for Outgoing Mail)

Checkbox

The device automatically accepts all secure certificates for TLS (Transport Secure Layer Protocol) from outgoing mails.

Sender Name

Text Field

Enter the name that should appear in the 'From' field of the sent emails from the device if the profile is for a single user.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

Set Signature

Text Field

Enter the signature and other details that appears at the end of the mails sent from the device.

Click the variables button to insert dynamic values if the profile is for several users.

See Create and Manage Custom Variables for more details on variables.

Prevent Moving Mail to other Accounts

Checkbox

The user cannot move sent or received mails to another account.

Always Vibrate on New Email Notification

Checkbox

The device vibrates in addition to sound alert when a new email is received.

Vibrate on New Email Notification if device is silent

Checkbox

The device vibrates when a new email is received, when the device is in silent mode.

Note: Please make sure users are not  blocked from using the email client on their devices in Native App Restriction.

Email Address *

Text Field

Click the 'Variables' button  and click  beside '%u.mail' from the User Variables' list. The email address of the users to whom the profile is associated are automatically filled. For more details on variables, see Create and Manage Custom Variables.

User Name *

Text Field

Click the 'Variables' button  and click  beside '%u.login' from the User Variables' list. The username of the users to whom the profile is associated will be automatically filled. For more details on variables, see Create and Manage Custom Variables.

Domain *

Text Field

Enter the domain name in the field.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables. 

Server Address *

Text Field

Enter the server address of the ActiveSync.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables. 

Password *

Text Field

Leave the field blank. The user need to enter the password while configuring the email account for the first time. After it is validated, the users can access the email account without entering the password.

Account Display Name

Text Field

 Enter a label to identify the user's email account at the exchange server.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables. 

Email Signature

Text Field

 Enter the signature and other details that appears at the end of the mails sent from the device.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Sync Emails

Drop-down

Choose the period for which the emails are to be kept synchronized between the device and the exchange server from the recent past, from the drop-down.

Sync Calendar

Drop-down

Select the period for which the calendar events are to be synchronized between the device and the exchange server, from the drop-down.

Use SSL

Checkbox

 Communication between the device and the exchange server is encrypted using SSL (Secure Socket Layer Protocol).

 As default account

Checkbox

 The email address is used as default for sending out emails.

 Accept all certificates

Checkbox

 The device automatically accepts all SSL certificates.

Can sync contacts

Checkbox

 Allows synchronization of user contacts between device and exchange server.

 Can sync calendar

Checkbox

 Allows synchronization user created calendar events between the device and the exchange server.

 Can sync tasks

Checkbox

 Allows synchronization of user scheduled tasks between the device and the exchange server.

 Manual roaming sync

Checkbox

 The user can use the sync feature manually while away from the home network.

Kiosk Mode Type

Drop-down

The two Kiosk modes are:

• Default mode - Run multiple apps in Kiosk mode. Users will not be able to run non-kiosk applications. Kiosk mode can only be exited by entering the admin bypass password.

• Single App mode - Users can only run the single application that you specify. Users will not be able to run non-kiosk applications. Kiosk mode can only be exited if the admin disables it in the EM console.

Restrictions on access to other device functions, such as task manager and the status bar, can also be configured for either mode.

If 'Single App' is selected as Kiosk Mode Type:

Enter ID of Kiosk Apps

Text Field

Enter the Package ID of the app that will run in Kiosk mode.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

See Obtain Bundle/Package Identifier for more details on Package ID.

If 'Default mode' is selected as Kiosk Mode Type:

Enter ID of Kiosk Apps

Text Field

Enter the ID of the apps that will run in Kiosk mode.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

See Obtain Bundle/Package Identifier for more details on Package ID.

Click  to add more 'App IDs.

Click the  button to remove an item from the list.

Block Multi-Window Mode

Checkbox

 Users cannot open multiple windows.

Block Task Manager

Checkbox

 Users cannot access task manager screen.

Hide Navigation Bar

Checkbox

 The navigation bar is not shown on the devices.

Hide System Bar

Checkbox

 The system bar is not shown on the devices.

SMS/MMS blocking

Checkbox

 All SMSs and MMSs to the device are blocked.

Block Keys

Drop-down

 This feature lets you selectively block touch keys and icons available on device screen.

 For example, if you do not want the device owners to use 'Caps Lock' key you can block it.

Click in the 'Block Keys' field:

Scroll down to view the full list and select the key.

Repeat the process to add more keys to the blocked keys list.

 The following features are visible if 'Default mode' is selected as Kiosk Mode Type:

Show messenger App

Checkbox

 Allows the messenger app on the device.

Show email App

Checkbox

 Allows the email app on the device.

Show dialer App

Checkbox

 Allows the phone dialer app on the device.

Show admin bypass button

Checkbox

 Adds the 'Admin bypass' button to the device screen. The user can tap the button and enter the password to exit from the Kiosk mode.

Admin bypass password

Text Field

Enter the password required to exit the Kiosk mode.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Allow Gmail

Checkbox

 Users can the access Gmail app.

Allow Email

Checkbox

 Users can the access the default email app.

Allow Browser

Checkbox

 Users can access the default Android browser on their devices.

Allow Gallery

Checkbox

 Users can access Gallery on their devices.

Allow Settings

Checkbox

 Users can change their device settings.

Allow Google Play

Checkbox

 Users can access Google Play on their mobile devices.

Allow YouTube App

Checkbox

 Users can access the YouTube app.

Allow Google Maps & Navigation

Checkbox

 Users can access Google Maps and Navigation app on their devices.

Allow Google and Voice Search

Checkbox

 Users can use Google and Voice Search services.

Allow Emergency Calls only

Checkbox

Allows users to make only emergency calls.

Allow Voice Roaming

Checkbox

Allows users to make/receive voice call during roaming.

Allow Sync during Roaming

Checkbox

Allows the use of Sync feature while roaming.

Allow Data Roaming

Checkbox

Allows users to enable 'Data Roaming' option on their devices to access data services during roaming.

Allow USB Tethering

Checkbox

Allows users to enable 'USB Tethering' option for sharing their data connection through USB tethering.

Allow Wi-Fi access point settings editing

Checkbox

Allows users to edit the Wi-Fi access point settings to create a Wi-Fi hotspot for sharing their data connection.

Wi-Fi Network Minimum Security Level

Drop-down

Select the minimum security level required for the user to access the Wi-Fi network. The options available are:

• Open

• WEP

• WPA

• 802.1x EAP (LEAP)

• 802.1x EAP (FAST)

• 802.1x EAP (PEAP)

• 802.1x EAP (TTLS)

• 802.1x EAP (TLS)

Allow SMS

Drop-down

• All - Allows both incoming and outgoing text messages.

• Incoming SMS only - Allows incoming text messages only.

• Outgoing SMS only - Allows outgoing text messages only.

• None - Both incoming and outgoing text messages are blocked.

Allow MMS

Drop-down

Allows multimedia messages as per the option selected:

• All - Allows both incoming and outgoing multimedia messages.

• Incoming SMS only - Allows incoming multimedia messages only.

• Outgoing SMS only - Allows outgoing multimedia messages only.

• None - Both incoming and outgoing multimedia messages are blocked.

Blacklisted SSIDs

Text Field

Specify the name (SSID) of the wireless network that should be blacklisted.

 Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Click the  button to add more 'Whitelisted SSID' fields.

Click the minus  button beside an SSID to remove it from the list.

Passcode Type

Drop-down

Select the type of passcode from the drop-down that the user should configure for unlocking screen lock. The options available are:

• No passcode enforcement

• Only letters

• Letters and numbers

• Only numbers

• Letters, numbers and a special symbol

• Requires some kind of password

Minimum Passcode Length

Drop-down

Select the minimum number of passcode characters that can be configured by the user. (4-16 characters).

Maximum Idle Time

Drop-down

Select the maximum time period that can be set as idle time out period for device screen lock, from the drop-down.

Maximum Failed Attempts for Wipe

Drop-down

Select the maximum number of allowed unsuccessful login attempts for device wipe (4-16). Set the value as '0' for unlimited.

If the number of failed attempts crosses this value, the data in the device will be automatically wiped off. This is useful to prevent the data from the device being stolen, if somebody, other than the user, tries to login to the device by entering guessed passcodes.

Maximum Failed Attempts for Sneak Peek

Drop-down

Note: If the device does not have a front camera, the rear camera will capture a photograph and forward to the EM server.

Maximum Passcode Age (days)

Text Field

Enter the maximum period in days for which a passcode can be valid. After the number of days specified in this field, the passcode will expire. The user needs to change the passcode before the current one expires.

Passcode History Requirements

Text Field

Allow Turn-off background Sync (Not supported on Android version 5.* and higher)

Checkbox

Select this to allow users to disable background synchronization setting on their devices.

Allow Turn-off background Sync

Checkbox

Select this to allow users to disable background synchronization setting on their devices.

Allow Bluetooth

Checkbox

Select this to allow users to enable/disable Bluetooth on their devices.

Allow Camera

Checkbox

Select this to allow users to use the camera

Disable Storage Encryption

Checkbox

Select this to enable users to use device without turning on the storage encryption feature. This feature is available for Android 3.0 and later versions only.

Allow to run Apps installed from unknown sources

Checkbox

Select this to allow users to run installed applications that were download from unknown sources.

Cellular Connection Control

Radio Buttons

Choose whether or not to allow the device to connect to the internet through a cellular network (2G/3G/4G):

• Cellular Connection on - Maintains the data connection through cellular network enabled, irrespective of user settings under 'Settings' > 'Wireless and Network settings' in the device.

• Cellular Connection off - Maintains the data connection through cellular network disabled, irrespective of user settings under 'Settings' > 'Wireless and Network settings' in the device.

• User Choice - The connection is enabled or disabled as per the user's setting under 'Settings' > 'Wireless and Network settings' in the device.

WiFi Connection Control

Radio Buttons

Choose whether or not to allow the device to connect to WiFi networks and hotspots from the options.

• WiFi Connection on - Always maintains the WiFi connection enabled, irrespective of user's setting under 'Settings' > 'Wireless and Network settings' in the device.

• WiFi Connection off - Always maintains the WiFi connection disabled, irrespective of user's setting under 'Settings' > 'Wireless and Network settings' in the device.

• User Choice - The connection is enabled or disabled as per the user's setting under 'Settings' > 'Wireless and Network settings' in the device.

Note: The feature is supported for only Samsung for Enterprise (SAFE) devices.

Configure for type

Choose the VPN connection type from drop-down. The options available are:

• L2TP

• PPTP

• L2TP/IPSec PSK

• IPSec, XAuth PSK

• IPSec XAuth RSA.

VPN Connection Name

Enter a label for the connection. This is shown on the device.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Host name of the VPN Server

Enter the IP address or host name of the VPN server.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Username / Password

Enter the login credentials for the device to connect to the VPN server.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

DNS Search Domains

Enter the IP address or hostname of the DNS server that devices will use for searching domain names.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

For L2TP

• Enable L2TP Secret

If enabled, the pre-shared L2TP should be entered in the next field L2TP Secret.

• L2TP Secret

If L2TP Secret is enabled, then the pre-shared key should be entered here by the user or selected from 'Variables'.

For PPTP

• Enable Encryption

If selected, the connection is encrypted between the devices and the VPN server.

For L2TP/IPSec PSK

• Enable L2TP Secret

If enabled, the pre-shared L2TP should be entered in the next field L2TP Secret.

• L2TP Secret

If L2TP Secret is enabled, then the pre-shared key should be entered here by the user or selected from 'Variables'

• IPSec Pre-Shared Key

If IP Sec Identifier is enabled, then the pre-shared key should be entered here by the user or selected from 'Variables'

For IPSec Xauth PSK

• IP Sec Identifier

Enter the IPSec identifier in the field.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

• IPSec Pre-Shared Key

If IP Sec Identifier is enabled, then the pre-shared key should be entered here by the user or selected from 'Variables'.

Use for persistent connect

Forcibly maintains the VPN connection always at the enabled state, irrespective of user's settings through 'Settings' > 'Wireless and Networks' in the device. In order to enable this feature, the following conditions are to be satisfied:

• The profile should have been created already and rolled out to the devices. Hence the administrator will be able to enable this feature after rolling out the profile and then by editing the profile. See Edit Configuration Profiles for more details

• Suits to all VPN connections types, except PPTP

• The VPN server and the DNS server should have been specified by their IP addresses in IPv4.

SSID*

Text Field

Enter the Service Set Identifier (SSID), the name of the wireless network that a device should connect to.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Hidden SSID

Checkbox

If enabled, users will be able to access the hidden wireless network too. Users must know the hidden SSID details and the required credentials.

Wi-Fi Configuration Type

Drop-down

Select the type of encryption used by the wireless network from the drop-down. The options available are:

• Open

• WEP

• WPA / WPA2 - PSK

• EAP 802

The settings for each type is explained in the next table Wi-Fi configuration type settings.

Open

No password is required for accessing the Wi-Fi network by the user.

WEP

Encryption Key - Enter the password to access the Wi-Fi network.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

WPA / WPA2 - PSK

Encryption Key - Enter the password to access the Wi-Fi network.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

EAP 802

1. EAP Authentication Protocol - Select the EAP authentication protocol from the drop-down. Applicable for Samsung for Enterprise devices SAFE 1.0 + version.

• PEAP

• TLS

• TTLS

2. Phase 2 Authentication Protocol - Select the Phase 2 authentication protocol from the drop-down. Applicable for Samsung for Enterprise devices SAFE 1.0 + version.

• None

• PAP

• MSCHAP

• MSCHAPV2

• GTC

3. Certificate - Select the user certificate from the drop-down or upload it using the 'Add New' button.

4. CA Certificate - Select the CA certificate from the drop-down or upload it using the 'Add New' button.

5. Authentication Username - Enter the username for Wi-Fi authentication. Applicable for Samsung for Enterprise devices SAFE 1.0 + version.

6. Authentication Password - Enter the password for Wi-Fi authentication. Applicable for Samsung for Enterprise devices SAFE 1.0 + version.

7. Authentication Domain - Enter the details for RADIUS Server authentication. Applicable for Samsung for Enterprise devices SAFE 1.0 + version.

8. Anonymous Identity - Enter the username that can be used for anonymous access. Applicable for Samsung for Enterprise devices SAFE 1.0 + version.

9. Encryption Key -  Enter the encryption key  to access the Wi-Fi network.

Click the variables button to insert dynamic values. See Create and Manage Custom Variables for more details on variables.

Allow USB

Checkbox

Allows users to establish connections via USB ports.

Use Network Time

Checkbox

Allows users to enable/disable network provided values in Date & Time settings.

Allow Microphone

Checkbox

Allows users to use microphone. If this is disabled, users can use microphone for receiving and making calls only.

Allow Near Field Communication (NFC)

Checkbox

Allows devices to establish connection via NFC.

Use GPS satellites for Location Detection

Checkbox

Allows users to enable/disable GPS system for location detection.

Use Wireless Networks / Google's Location Service for Location Detection

Checkbox

Allows users to enable /disable Wireless Networks / Google's Location Service for location detection

Allow Mock Locations

Checkbox

Allows users to enable/disable 'Mock Location' in developer mode settings.

Allow SD Card

Checkbox

Users can use SD card on their devices.

Allow SD Card Write

Checkbox

Users can store data on the SD card.

Allow Screen Capture

Checkbox

Users can take screenshot of the device screen.

Allow Clipboard

Checkbox

Users will be allowed to use clipboard memory.

Backup my data

Checkbox

Users will be allowed to take a backup of data in their devices.

Visible Passwords

Checkbox

Allows users to enable/disable show password feature.

Allow USB Debugging

Checkbox

Allows users to enable/disable 'USB Debugging' option in developer mode settings.

Allow Google Crash Report

Checkbox

Crash reports will be sent to Google.

Allow Factory Reset

Checkbox

Allows users to reset the device to factory settings.

Allow OTA Upgrade

Checkbox

Allows devices to receive Over-the-air (OTA) upgrade for software updates.