Android Samsung - Impossible to enable Dual Messenger feature or Secure Folder

[gestionemobile]

hi to all,
all my users with devices enrolled with knox configure and knox mobile enrollment with Cobo configuration (device owner not with work profile) can't enable dual messenger option for IM with the error  ' Security Policy Restrict this actions' .
i looked inside my hw restriction profile or the security configuration by i don't found where is this restriction.
what i must disable for permit that feature ?

thanks

[J4yJ4y]

Did you find a solution for this?
Having the same issue here....

[gestionemobile]

[RESOLUTION REPORT]

Type of Resolution : Technical Guide

¦ Resolution Details :
1) Secure Folder : Not support for DO
Secure Folder is persnal device solution. so it's not support to DO mode.

2) Dual Massenger : Support for DO (need to set DISALLOW_ADD_MANAGED_PROFILE to false)
You must allow ' add managed profile'  to use the dual massenger function.
This feature must be allowed in MDM for using Dual Messenger.
ex) DevicePolicyManager.clearUserRestriction(ComponentName, DISALLOW_ADD_MANAGED_PROFILE);

Current setting of your device.
com.airwatch.androidagent/com.airwatch.agent.DeviceAdministratorReceiver:
     no_add_managed_profile

https://developer.android.com/reference/android/os/UserManager#DISALLOW_ADD_MANAGED_PROFILE
Specifies if a user is disallowed from adding managed profiles
... For users with a device owner set, the default is true...
Constant Value: ' no_add_managed_profile'

¦ Follow-up actions :
* This SEAP site focus on the Knox SDK Support.
If you have problem for samsung device or feature, please contact to ' www.samsungknox.com'

[J4yJ4y]

Where should the configuration be made to allow the add_managed_profile?

[SumitVedi]

Could you please provide more details about the solution. Where exactly do need to configure add_managed_profile?

[J4yJ4y]

I've been figuring this out and my conclusion is that dual messenger is not possible for Android Enterprise Work Managed devices, at this stage.
The page Valentino's post is pointing at is an Android developer site with some custom code to enable it, but haven't seen any support for this by VMware WS1.

[SumitVedi]

Thanks Johan for the info... Is it possible to manage dual messenger through COPE Mode? Any Idea?

[J4yJ4y]

COPE I have not checked, but these I have:

Here are some options/alternatives to the dual messenger:

With AE Work profile WhatsApp messenger can be installed on the personal side and dual messenger can be enabled.
Meaning unmanaged.

On an AE Work profile enrollled device, it IS possible to run the same App (WhatsApp) on both personal side and managed side (in the Work profile). This can be twice the same WhatsApp or twice WhatsApp for Business.
Also possible to run WhatsApp and WhatsApp for Business, one on either side (personal/work).

On an AE Work managed device WhatsApp & WhatsApp for Business can run on the same device,
one App on the Personal (non managed) side, and the other one on the Managed/Work side.

[tiri73]

Hi there,

I am facing the same problem here, and according to my Airwatch provider it is a Google restriction for work Managed profile. I have some other devices enrolled as legacy and it is working right. I have not been able to find more information related to this.

Best regards

[ralphzipper]

Hello

[ralphzipper]

There are two types of resolution, the first is Secure Folder and the other is Dual Messenger. The "Secure Folder" is made for personal device solutions that do not support the DO MODE. On the other hand, the Dual Messenger supports DO MODE after allowing managed profile and setting up DISALLOW_ADD_MANAGED_PROFILE to false.

[saim1231]

I am facing the same problems for 1 month more I searched many of times but if the solution doesn't find please post a simple way to a solution for this matter.Lulubox