Product Documentation

Configuring Policies for Samsung SAFE Devices

Dec 21, 2015

Device Manager supports policy configurations for Samsung SAFE devices so that you can successfully manage your Samsung Android devices. Device Manager Samsung SAFE configurations are compatible with Samsung API Levels Version 2 and 3.

You can access all of the new Samsung configurations on the Policies tab. Under Android, click Configurations and then click New Configuration.

Restrictions Configuration
The Android Restrictions policy allows you to Allow or Disallow the following on Samsung device configurations:
  • Common Apps/App Store. YouTube, Browser, Google Play Marketplace, Non-Google Play App Install
  • Hardware controls. Factory reset, backup, OTA, clipboard, camera, power off, screenshot capture, SD card, and so on.
  • Network settings. Bluetooth, BT tethering, WiFi, WiFi tethering, cellular data , roaming, and so on.
  • USB settings. Debugging, mass storage, tethering, and so on.

In the New Samsung restriction configuration dialog box, you configure settings on the following tabs:

  • General. On this tab, you enter a name and description for the configuration.
  • Applications. This tab allows you to block or allow specific apps and app marketplaces. When you select an option, the app or app store will be allowed on the device. You clear the option if you do not want the device user to be able to access these apps or app stores.
  • Hardware controls. This tab allows you to block or allow user control of specific hardware settings on the device. When you select an option, the device user will be able to change the hardware settings. You clear the option if you do not want the device user to be able to change these settings.
  • Network. This tab allows you to block or allow user control of specific network settings on the device. When you select an option, the device user will be able to change the network settings. You clear the option if you do not want the device user to be able to change these settings.
  • USB. This tab allows you to block or allow user control of specific USB controls on the device. When you select an option, the device user will be able to change the USB controls. You clear the option if you do not want the device user to be able to change these settings.
Exchange ActiveSync Control Configuration
The Samsung Exchange Active Sync control configuration allows you to remotely configure Exchange Email settings, such as server configuration and advanced mail server settings (SSL, synchronize contacts, synchronize calendar, make default email account).
Note: In order to push an ActiveSync policy to a SAFE device, you need a SAFE device that is running the XenMobile for Samsung agent.

In the Edit a Samsung Exchange ActiveSync configuration dialog box, you configure settings on the following tabs:

  • General. On this tab, you can define your Exchange Active Sync configuration you want your Samsung devices to use.
  • Advanced.On the Advanced tab, you can select or clear the following Exchange Active Sync settings:
    • Use SSL
    • Is default account
    • Synchronize contacts
    • Synchronize calendar
Firewall Configuration
The Samsung Firewall configuration allows you to remotely configure firewall settings for your Samsung devices.

In the Edit Samsung firewall configuration dialog box, you configure settings on the following tabs:

  • General. On this tab, you enter a name and description for the configuration.
  • Allow/Deny Hosts (Blacklisting/Whitelisting). The Allow/Deny Hosts tab allows you to enter IP addresses or host names you want to either allow (whitelist) or block (blacklisting) from allowing the device to access.
  • Proxy Configuration. Allows you to remotely configure proxy settings for the device.
  • Re-route Configuration. Allows you to configure proxy reroute configurations for your devices.
App Uninstall Configuration
The App uninstall configuration allows you to block or permit specific apps from being uninstalled from a Samsung device. You can choose from a prepopulated list of apps derived from all software inventories taken from all managed Samsung devices.

In the Edit Samsung App Uninstall Restriction dialog box, you configure settings on the following tabs:

  • General. On this tab, you enter a name and description for the configuration.
  • Application. The list of apps that you are blocking or allowing to be uninstalled from an Android device. Click New Application to add a new app to the list.
Password Policy
The Password Policy configuration allows you to optionally enforce a single device to use the same password for any user accessing the device plus complex flexible password parameters: numeric/alpha numeric restrictions, length requirements, expiration, wipe device after X number of failed attempts, plus encryption for device storage

In the Password policy configuration update dialog box, you configure settings on the following tabs:

  • General. On this tab, you enter a name and description for the configuration.
  • Password complexity. This tab give you great flexibility in configuring password complexity parameters for Android devices.
  • Encryption. You can choose to enable encryption on the Android devices storage.
    Note: Available for Android 3.0 and later. The Android 3.0 encryption operation will prompt the user to accept the action. It also requires the device to be plugged in and the device will not be usable for up to an hour while the encryption operation takes place. This is a function of the Android 3.0 encryption capability.
  • Samsung SAFE. This setting allows you to set a single password for multiples users on a device.
Silent App Un-Installation Configuration

The Silent App UnInstall configuration allows you to initiate software un-installation without requiring user intervention. You can choose from the list of apps derived from all software inventory of all managed Samsung devices in your network. When you deploy the policy, the apps selected will be uninstalled quietly and seamlessly.

Selective Wipe for SAFE Devices
You can use Selective Wipe on Samsung SAFE devices to remove email data, document data, and application data.