Forum Discussion
How to Block Users Adding Personal Samsung Accounts
We are implementing fully managed Android enrollment on Samsung devices. InTune allows the disabling of adding google accounts, but nothing for Samsung accounts.
An employee can add their own personal Samsung Account to a device so when they are terminated, we can't wipe the device. We OWN these devices. We MANAGE these devices, yet we can't reuse them if we terminate an employee.
What do we do as admins to stop this from happening?
5 Replies
For corporate owned fully managed devices, consider implementing Intune with KME, per this link: How to setup Samsung Knox Mobile Enrollment with Microsoft Intune.
There seems to be some account blocking options shown here: How to block the addition of unmanaged accounts on devices.
Please like or mark this thread as answered if it's helpful, thanks!
- We have already enrolled over 55 cellphones too so we can't now have to wipe these.
- I'm assuming the Samsung Knox Mobile enrollment requires us to purchase Knox Enterprise which we don't own?
Samsung Knox has a few different levels, similar to Apple Business Manager. The free version is Knox Mobile Enrollment. That simply tells the devices, when you turn them on out of the box that they need to enroll in Intune or whatever MDM you have. Samsung Knox also has their own MDM which is a paid feature that you won't use.
