Jon Mullen
Nov 30, 2018
5:56 pm

User (Restricted profile)

I am trying to figure out how to prevent the user from appling a lock screen on the device.  I have disabled the Lock screen and Security settings, and I have disabled Multiuser support.  However, the user can go to Settings->Cloud and accounds->Users->Add user or profile->User (restricted profile)->Set up screen Lock. Once the screen lock is setup, every reboot will then query for the screen lock.  The restricted user profile can not be switched to or deleted because of the Security policy.  How do I prevent this?  Any help would be greatly appreciated.

Similar topics

No similar topics found.
Jenna S.Samsung SEAP Moderator
Dec 08, 2018
12:49 am

Hello Jon,

Could I please get a little more information to understand what is happening. What APIs are you using to disable the lockscreen, security settins, and multiuser support?

Best regards,

Jenna

Jon Mullen
Dec 10, 2018
3:26 pm

I used Knox Configure to turn off Multiuser, and I used the Knox Customization SDK to hide the lockscreen, security settings.

Comments

Hello Jon,

What are the exact names of the APIs? 

Best regards,

Jenna

Jenna S.Dec 12, 2018 at 11:42 pm
Jon Mullen
Dec 13, 2018
3:19 pm

The multiuser is disabled through the Knox Configure website.  Here is the code to hide the Lock Screen and settings.

CustomDeviceManager cdm = CustomDeviceManager.getInstance();
SettingsManager kcsm = cdm.getSettingsManager();

try
{
    Log.d(TAG, "Hide the lock screen settings");
    kcsm.setSettingsHiddenState(true, CustomDeviceManager.SETTINGS_LOCK_SCREEN);

    SharedPreferences settings = getSharedPreferences("Settings", 0);
    settings.edit().putBoolean("didTurnOnUnknownSources", true).commit();
}
catch (SecurityException e)
{
    Log.w(TAG, "SecurityException: " + e);
    DeactivateAdmin();
}

The problem is the security policy to prevent from adding a user doesn't seem to be honored when creating a User(Restricted Profile).