Restricting SD card usage in Knox

Expand all | Collapse all

Configure SD card restrictions to control usage of SD cards on the user's Samsung device that supports Knox.

To restrict SD card usage on a mobile device:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select Android and go to the Samsung Knox settings section.
4. On the Device feature restrictions card, click Settings.

   The Device feature restrictions window opens.

5. Enable the settings using the Device feature restrictions toggle switch.
6. In the SD card settings section, specify the required restrictions:
   • Prohibit access to SD card

     This setting applies to devices with Android 5-12.

     Selecting or clearing this check box specifies whether access to the SD card is disabled or enabled on the device.

     This check box is cleared by default.

   • Prohibit writing to SD card

     Selecting or clearing this check box specifies whether writing to the SD card is disabled or enabled on the device.

     This check box is cleared by default.

   • Prohibit moving apps to SD card

     Selecting or clearing this check box specifies whether the device user is allowed to move apps to the SD card.

     This check box is cleared by default.

7. In the Additional settings section, you can specify any additional restrictions:
   • Prohibit sending crash reports to Google

     This setting applies to devices running Android 11 or earlier.

     If the check box is selected, Kaspersky Endpoint Security for Android blocks sending crash reports to Google.

     If the check box is cleared, sending reports is allowed.

     This check box is cleared by default.

   • Prohibit developer mode

     This setting applies to devices running Android 11 or earlier.

     If the check box is selected, the device user is not allowed to enable developer mode on the device.

     If the check box is cleared, the user is allowed to enable developer mode on the device.

     This check box is cleared by default.

8. Click OK.
9. Click Save to save the changes you have made.

Mobile device settings are changed after the next device synchronization with Kaspersky Security Center. SD card settings are now configured.