VMware Workspace ONE Community
gestionemobile
Contributor
Contributor

Android Samsung - Impossible to enable Dual Messenger feature or Secure Folder

hi to all,
all my users with devices enrolled with knox configure and knox mobile enrollment with Cobo configuration (device owner not with work profile) can't enable dual messenger option for IM with the error  ' Security Policy Restrict this actions' .
i looked inside my hw restriction profile or the security configuration by i don't found where is this restriction.
what i must disable for permit that feature ?

thanks
Labels (1)
Reply
0 Kudos
36 Replies
J4yJ4y
Enthusiast
Enthusiast

Did you find a solution for this?
Having the same issue here....
Reply
0 Kudos
gestionemobile
Contributor
Contributor

[RESOLUTION REPORT]

Type of Resolution : Technical Guide

¦ Resolution Details :
1) Secure Folder : Not support for DO
Secure Folder is persnal device solution. so it's not support to DO mode.

2) Dual Massenger : Support for DO (need to set DISALLOW_ADD_MANAGED_PROFILE to false)
You must allow ' add managed profile'  to use the dual massenger function.
This feature must be allowed in MDM for using Dual Messenger.
ex) DevicePolicyManager.clearUserRestriction(ComponentName, DISALLOW_ADD_MANAGED_PROFILE);

Current setting of your device.
com.airwatch.androidagent/com.airwatch.agent.DeviceAdministratorReceiver:
     no_add_managed_profile

https://developer.android.com/reference/android/os/UserManager#DISALLOW_ADD_MANAGED_PROFILE
Specifies if a user is disallowed from adding managed profiles
... For users with a device owner set, the default is true...
Constant Value: ' no_add_managed_profile'

¦ Follow-up actions :
* This SEAP site focus on the Knox SDK Support.
If you have problem for samsung device or feature, please contact to ' www.samsungknox.com'
Reply
0 Kudos
J4yJ4y
Enthusiast
Enthusiast

Where should the configuration be made to allow the add_managed_profile?
Reply
0 Kudos
SumitVedi
Contributor
Contributor

Could you please provide more details about the solution. Where exactly do need to configure add_managed_profile?
Reply
0 Kudos
J4yJ4y
Enthusiast
Enthusiast

I've been figuring this out and my conclusion is that dual messenger is not possible for Android Enterprise Work Managed devices, at this stage.
The page Valentino's post is pointing at is an Android developer site with some custom code to enable it, but haven't seen any support for this by VMware WS1.

Reply
0 Kudos
SumitVedi
Contributor
Contributor

Thanks Johan for the info... Is it possible to manage dual messenger through COPE Mode? Any Idea?
Reply
0 Kudos
J4yJ4y
Enthusiast
Enthusiast

COPE I have not checked, but these I have:

Here are some options/alternatives to the dual messenger:

With AE Work profile WhatsApp messenger can be installed on the personal side and dual messenger can be enabled.
Meaning unmanaged.

On an AE Work profile enrollled device, it IS possible to run the same App (WhatsApp) on both personal side and managed side (in the Work profile). This can be twice the same WhatsApp or twice WhatsApp for Business.
Also possible to run WhatsApp and WhatsApp for Business, one on either side (personal/work).

On an AE Work managed device WhatsApp & WhatsApp for Business can run on the same device,
one App on the Personal (non managed) side, and the other one on the Managed/Work side.
Reply
0 Kudos
tiri73
Contributor
Contributor

Hi there,

I am facing the same problem here, and according to my Airwatch provider it is a Google restriction for work Managed profile. I have some other devices enrolled as legacy and it is working right. I have not been able to find more information related to this.

Best regards
Reply
0 Kudos
nishagomes
Contributor
Contributor

You can use the Messenger features on Samsung devices that are able to receive and send messages from multiple accounts on a single device. To do that, you need to modify the security settings of the device profile. Here's what you need to do to disable this restriction and allow Dual Messenger on Samsung devices that are enrolled with Knox Configure and Knox Mobile Enrollment.

Log into your Samsung Knox account and change the settings in the device profile for the devices that are being blocked.

Check the device profile settings for any security restrictions, such as app installation restrictions or app permissions restrictions. If any of these policies are enabled, disable them.

Find out whether any security policies that block the use of apps or restrict the management of apps are disabled.

Disable these policies or modify the settings to allow Dual Messenger to work on Samsung devices enrolled in Knox Configure or Knox Mobile Enrollment.

Install restrictions on apps that you want to install more than one instance of. If any such restrictions exist, disable them to enable the Dual Messenger feature. If there is a security restriction preventing you from running more than one app on the same device, remove it.

Secure Folder restriction: Ensure there is no security policy that prevents you from creating or using Secure Folders on your Samsung devices. If you see any such restrictions, disable them. If the policies are enabled, remove them.

Apply specific policies that limit the ability to run apps and manage applications, like allowing people to install different apps on the same device for different reasons. Disabling any security policies that restrict these features will result in your devices not being able to communicate with other Samsung devices.

Save the changes that you made to your profile and push them to the affected devices. This will enable the Dual Messenger feature to work on devices enrolled with Knox Configure and Knox Mobile Enrollment.

Push an updated device profile on your Samsung devices. Test that the Dual Messenger feature is enabled on the device before doing this.

If these steps fail to resolve your problem, you may need to review the Samsung Knox documentation or get help from Samsung Support. It is possible that Samsung support can help you configure the policies that allow you to enable the Dual Messenger feature on devices that are paired with Knox Configure and Knox Mobile Enrollment.

Nisha Gomes
Fm Whatsapp
Reply
0 Kudos
johnbracket
Contributor
Contributor

If you are encountering an issue with enabling the Dual Messenger feature or Secure Folder on Samsung Android devices enrolled with Knox Configure and Knox Mobile Enrollment, it appears that a security policy is restricting these actions. To resolve this, you will need to modify the security configuration settings.

To disable the restriction and allow the Dual Messenger feature and Secure Folder, you can try the following steps:

  1. Access the Knox Configure portal or Knox Mobile Enrollment console.
  2. Navigate to the security policy or restriction profile applied to the devices.
  3. Review the policy settings and look for any restrictions related to Dual Messenger or Secure Folder.
  4. Disable or modify the settings that are restricting these features.
  5. Specifically, you should look for any policies related to application management, secure folder access, or restrictions on multi-messaging applications. By adjusting these settings, you should be able to enable the Dual Messenger feature and Secure Folder on the devices.

If you are unable to locate the specific restriction or policy that is causing the issue, it may be helpful to reach out to Samsung support or your device management solution provider for further assistance. They can provide guidance on the exact steps and settings required to enable these features in your specific environment.

pikashow for pc -- download

Reply
0 Kudos
clark999
Contributor
Contributor

On Samsung Android devices registered with Knox Configure and Knox Mobile Enrollment, it appears that a security policy is blocking your ability to enable the Dual Messenger functionality or the Secure Folder. You must change the security configuration settings in order to fix this.

You can try the following methods to remove the limitation and enable the Dual Messenger functionality and Secure Folder: 

Access the Knox Mobile Enrollment console or the Knox Configure portal.

Navigate to the restriction profile or security policy set up for the devices.

Look through the policy settings for any limitations pertaining to Dual Messenger or Secure Folder.

Change or disable the settings that are preventing you from using these features.

Picasso for android

Reply
0 Kudos
ee7
Contributor
Contributor

The error message "Security Policy Restrict this actions" is typically related to a security policy set on the device. To enable the Dual Messenger feature or Secure Folder on Samsung devices, you may need to adjust your Knox Mobile Enrollment (KME) or Knox Configure settings. Here are some steps to resolve this issue:

Check Security Policies: Review the security policies applied to your devices through KME or Knox Configure. Ensure that there are no policies restricting the use of Dual Messenger or Secure Folder. Look for any settings related to app permissions or restrictions.

Update Knox Policies: Make sure you have the latest Knox policies and profiles applied to your devices. Samsung periodically updates their policies to provide more granular control over device features. Updating your policies may resolve this issue.

App Whitelisting: Sometimes, restrictive policies might include app whitelisting or blacklisting. Ensure that the messaging apps you want to use with Dual Messenger are not blacklisted.

Permissions: Verify that the necessary permissions for the Dual Messenger or Secure Folder features are enabled in the security policies. For Dual Messenger, this may include permissions for messaging apps.

Consult Samsung Support: If you can't identify the specific policy causing the issue, consider reaching out to Samsung Enterprise Support. They can provide guidance on configuring Knox policies and resolving policy-related issues.

Test with a Test Profile: Create a test profile with less restrictive policies to check if the issue persists. This can help identify whether a specific policy is causing the problem.

Documentation and Resources: Review Samsung's official documentation and resources related to Knox policies and restrictions. They may provide insights into which policies could be causing the error.

Policy Review: Consider reviewing your hardware restriction profile and security configurations with a fine-toothed comb. Sometimes, restrictions that seem unrelated can inadvertently affect certain features.

Trial and Error: If you can't identify the exact policy causing the issue, you may need to experiment by temporarily relaxing policies to pinpoint the one causing the problem. Be cautious when doing this on production devices.

Remember to back up your device configurations before making any significant changes, and document the changes you make for future reference. This will help you troubleshoot effectively and ensure that your devices remain secure.

best Regards

CMFS

Reply
0 Kudos
frankywayne
Contributor
Contributor

Did the device manager try to sideload Dual messenger on Knox?

Source: Aeroinsta

Reply
0 Kudos
zeyan88
Contributor
Contributor

Samsung offers two useful features for managing multiple accounts or keeping sensitive data secure on Android devices: Dual Messenger and Secure Folder. Here's how to use both of these features:

1. Dual Messenger: Dual Messenger allows you to run two separate instances of a messaging app on the same device, each associated with a different account. This is useful for keeping personal and work accounts separate, for example. Here's how to set it up:

Open Settings: Swipe down from the top of the screen and tap the gear-shaped "Settings" icon to access your device's settings.

Advanced Features: Scroll down and select "Advanced Features." Depending on your device and Android version, this option may be found under different categories like "Apps" or "Biometrics and Security."

Dual Messenger: Look for the "Dual Messenger" option and tap on it.

Toggle Apps: You'll see a list of compatible apps. Toggle on the switch next to the app(s) you want to use with Dual Messenger. Note that not all apps are compatible with Dual Messenger.

Install Second Copy: Once you've toggled an app, a second copy of that app will be installed, and you'll be prompted to set it up. Follow the setup process for the second instance of the app, including signing in with your second account if necessary.

Access Dual Messenger: Now, you can access the second instance of the app from the home screen or app drawer with a small icon indicating it's a Dual Messenger version.

2. Secure Folder: 

Secure Folder is a feature that provides a separate, encrypted space on your Samsung device to store and run apps, photos, documents, and more. Here's how to set it up:

  1. Open Settings: Access your device's settings as described above.
  2. Biometrics and Security: Find and select "Biometrics and Security" or a similar option in your settings.
  3. Secure Folder: Look for "Secure Folder" and tap on it.
  4. Set Up Secure Folder: If you haven't set up Secure Folder before, you'll need to follow the on-screen instructions to set it up. This usually involves signing in with your Samsung account or creating one.
  5. Lock Method: Choose the lock method you prefer, such as a PIN, password, or fingerprint, to access Secure Folder.
  6. Add Content: Once Secure Folder is set up, you can add apps, files, photos, and other content to it by opening Secure Folder and using the "Add" or "Move to Secure Folder" options.
  7. Use Secure Folder: Access Secure Folder by tapping its icon or accessing it from the app drawer. You can run apps within Secure Folder separately from their counterparts outside the folder.

Hope this guide will help you for today.

Reply
0 Kudos
InstaThunder
Contributor
Contributor

Yes Samsung

Reply
0 Kudos
InstaThunder
Contributor
Contributor

YES Samsung

Tags (1)
Reply
0 Kudos
sude77
Contributor
Contributor

To resolve the issue of being unable to enable the Dual Messenger feature or Secure Folder on your Samsung device, ensure your device is compatible, update the software, and access these features through the device's settings; if the problem persists, contact Samsung support for device-specific guidance.

Thanks Chat: Reels Saver

Reply
0 Kudos
Jestin89
Contributor
Contributor

[RESOLUTION REPORT]

Type of Resolution: Technical Guidance

Resolution Summary:

  1. Secure Folder: Not supported for Device Owner (DO)

    • Secure Folder is designed as a personal device solution and is not compatible with the Device Owner mode.
  2. Dual Messenger: Supported for DO (DISALLOW_ADD_MANAGED_PROFILE must be set to false)

    • To enable the Dual Messenger function, ensure that 'add managed profile' is allowed. This feature requires permission in Mobile Device Management (MDM), and the restriction can be cleared using the following code:
      javaCopy code
      DevicePolicyManager.clearUserRestriction(ComponentName, DISALLOW_ADD_MANAGED_PROFILE);
    • The current setting on your device:
      bashCopy code
      com.airwatch.androidagent/com.airwatch.agent.DeviceAdministratorReceiver: no_add_managed_profile
      More information can be found here.

Follow-up Actions:

  • For any issues related to Samsung devices or features, please direct your queries to www.whatsappfm.com
  • This SEAP site primarily focuses on Knox SDK support.
Reply
0 Kudos
sallubro
Contributor
Contributor

Could you please provide more details about the solution. Where exactly do need to configure add_managed_profile? 10th SSC Board Result

Reply
0 Kudos