Last updated: August 14, 2026
Knox Configuration Profiles
Knox Configuration Profiles in ManageEngine MDM allow administrators to create and enforce policies and restrictions on managed Android Knox container devices. Profiles can be customized, versioned, and associated with any device or group at any time. This page provides an overview of available profile types — including Passcode, Restrictions, Email, and Exchange ActiveSync — and links to detailed configuration guides for each, helping IT admins tailor device management policies effectively.
You can create policies and impose restrictions on the managed mobile device. The following profile specifications can be customized and stored in specific versions and it can be associated with any devices/groups at any point of time. These profiles are tailored to customize the policies and restrictions for managing Android Knox containers.
- Passcode - Defines parameters for creating a password.
- Restrictions- Restrictions and permission related to device/container functionality like Bluetooth, camera, encrypting device data.
- Email - Configuring mail settings including mail server authentication and SSL.
- Exchange ActiveSync- Configuring ActiveSync settings to sync Exchange data with the client apps on device.
Frequently Asked Questions
- What configuration profile types are available for Samsung Knox devices in ManageEngine MDM? ManageEngine MDM supports Knox configuration profiles including Passcode, Restrictions, Email, and Exchange ActiveSync for managed Samsung Knox container devices.
- Can Knox configuration profiles be applied to non-Samsung Android devices? Knox configuration profiles are specifically designed for Samsung devices with Knox container support. They may not apply to non-Samsung Android devices.
- Can Knox profiles be modified and re-distributed without removing them from devices first? Yes, Knox configuration profiles in ManageEngine MDM can be versioned and modified, with updates automatically applied to all associated devices or groups.