Due to Samsung's policy changes starting with Android 15, remote control via Knox is now restricted to MDM-based setups. This means customers must configure remote control access through their MDM to continue using TeamViewer’s unattended remote support features. This setup ensures compatibility with Samsung’s enhanced privacy and security requirements.
Note: This guide uses the Microsoft Intune dashboard as an example. The process should be similar for other MDM dashboards.
This article applies to all TeamViewer users using Samsung Knox devices running Android 15 (or newer).
How to set up remote control for your Samsung Knox devices
To set up remote control for your Samsung Knox devices, please follow the instructions below:
1. Create a new Android Device configuration in your MDM.
2. Under Platform, select Android Enterprise.
- For Profile type, select Templates.
- Under Template name, choose OEMConfig.
- Click Next.
3. Set a configuration name and, for OEMConfig app, select Knox Service Plugin. Click Next.
4. In the configuration designer, set a name for your configuration.
5. Choose the correct setup depending on your device type:
- For fully managed devices
- For Work Profile (private device)
- Click Configure next to Device Wide Policies.
- Set Enable device policies controls to true.
- Click Configure next to Application management policies.
- Set Application management controls to true.
- Set Add applications for accessing the Knox SDK to true.
- Click Configure next to Work profile policies.
- Set Work profile policies to true.
- Click Configure next to Application management policies.
- Set Application management controls to true.
- Set Add applications for accessing the Knox SDK to true.
6. Click Configure next to Add applications for accessing the Knox SDK.
7. On the left pane, click the three dots next to Add applications for accessing the Knox SDK, and click Add setting.
8. Set the Package name to either
com.teamviewer.host.market (for Host app)
com.teamviewer.quicksupport.market (for QuickSupport app)
Then, add REMOTE CONTROL to the Scope.
{
"appSeparationPolicy": null,
"doPolicy": {
"advancedRestrictionPolicy": null,
"advancedWifiPolicy": null,
"apnSettingsPolicy": null,
"applicationPolicy": {
"mAppUsbDeviceAccessConfigMap": {},
"mAuthorizeSDKAccess": [
{
"packageName": "com.teamviewer.host.market",
"scopes": [
"authorization_remote_control"
],
"signature": ""
}
],
"mAutoLaunchApp": null
"mBatteryOptWhitelist": null,
"mBlacklistPackageToInstall": null,
"mBlacklistSignatureToInstall": null,
"mClearCacheBlocklist": null,
"mClearDataBlocklist": null,
"mDisableApp": null,
"mDisableHeatManagement": null,
"mDoAppUpdate": null,
"mEnableAppUsbDeviceAccess": null,
"mForceStopBlacklist": null,
"mInstallApp": null,
"mIsAccessSDKEnabled": true,
"mIsEnabled": true,
"mIsSpecialPermissionEnabled": null,
"mNotificationsBlocklist": null,
"mNotificationsWhitelist": null,
"mWhitelistPackageToInstall": null,
"mWhitelistSignatureToInstall": null,
"mWidgetBlacklist": null,
"mWidgetWhitelist": null
},
"auditLogPolicy": null,
"bannerPolicy": null,
"batteryOptimizationPolicy": null,
"bluetoothPolicy": null,
"certificatePolicy": null,
"clientCertificateManagementPolicy": null,
"dateTimePolicy": null,
"deviceAccountPolicy": null,
"deviceAdminWhitelistPolicy": null,
"deviceCustomizationPolicy": null,
"dexPolicy": null,
"dualDARPolicy": null,
"firewallPolicy": null,
"firmwareUpgradePolicy": null,
"isEnabled": true,
"keyMappingPolicy": null,
"messagingPolicy": null,
"networkModePolicy": null,
"nfcPolicy": null,
"npaPolicy": null,
"passwordPolicy": null,
"peripheralPolicy": null,
"restrictionPolicy": null,
"roamingPolicy": null,
"settingsPolicy": null,
"ucmPolicy": null,
"vpnPolicy": null,
"wifiPolicy": null,
"ztnaPolicy": null
},
"mKpePartnerLicenseKey": "",
"mKpePremiumLicenseKey": null,
"mProfileId": "",
"mProfileName": "hostRemoteControl",
"mSchemaVersion": "41.0.0",
"mTransactionTs": "",
"mVerboseMode": true,
"poPolicy": null
}
{
"appSeparationPolicy": null,
"doPolicy": null,
"mKpePartnerLicenseKey": "KLM09-6HWK4-*****-*****-ERUMV-B3DM9",
"mKpePremiumLicenseKey": null,
"mProfileId": "",
"mProfileName": "Knox profile",
"mSchemaVersion": "41.0.0",
"mTransactionTs": "",
"mVerboseMode": true,
"poPolicy": {
"advancedRestrictionPolicy": null,
"applicationPolicy": {
"mAppUsbDeviceAccessConfigMap": {},
"mAuthorizeSDKAccess": [
{
"packageName": "com.teamviewer.host.market",
"scopes": [
"authorization_remote_control"
],
"signature": ""
}
],
"mAutoLaunchApp": null,
"mBatteryOptWhitelist": null,
"mBlacklistPackageToInstall": null,
"mBlacklistSignatureToInstall": null,
"mClearCacheBlocklist": null,
"mClearDataBlocklist": null,
"mDisableApp": null,
"mDisableHeatManagement": null,
"mDoAppUpdate": null,
"mEnableAppUsbDeviceAccess": false,
"mForceStopBlacklist": null,
"mInstallApp": null,
"mIsAccessSDKEnabled": true,
"mIsEnabled": true,
"mIsSpecialPermissionEnabled": null,
"mNotificationsBlocklist": null,
"mNotificationsWhitelist": null,
"mSpecialPermissionList": null,
"mWhitelistPackageToInstall": null,
"mWhitelistSignatureToInstall": null,
"mWidgetBlacklist": null,
"mWidgetWhitelist": null
},
"auditLogPolicy": null,
"certificatePolicy": null,
"clientCertificateManagementPolicy": null,
"cmfaPolicy": null,
"containerConfigurationPolicy": null,
"deviceAccountPolicy": null,
"deviceAdminWhitelistPolicy": null,
"dualDARPolicy": null,
"firewallPolicy": null,
"isEnabled": true,
"keyMappingPolicy": null,
"npaPolicy": null,
"passwordPolicy": null,
"rcpPolicy": null,
"restrictionPolicy": null,
"ucmPolicy": null,
"vpnPolicy": null,
"ztnaPolicy": null
}
}
Note: The JSON configurations are preconfigured for the TeamViewer Host app. If you plan to use QuickSupport instead, make sure to replace the package name with com.teamviewer.quicksupport.market within the JSON file.