Balancing Personal and Work Apps

In the dynamic landscape of device usage, individuals increasingly desire the convenience of having both personal and work apps on their devices. However, this presents a challenge for enterprises striving to protect corporate data while respecting user privacy and individual preferences. To address this, we offer a range of configurations that cater to unique use cases, providing a balance between enhanced security and personalized device experiences. Whether you require robust corporate work profiles or a flexible blend of personal and professional functionality, our configurations are designed to meet your specific needs.

COBO (Corporate Owned Business Only) is a device management mode where the enterprise retains full control over the device and prohibits the installation of personal apps. With the enterprise serving as the device owner through a UEM (Unified Endpoint Management) app, this model ensures strict control and protection of corporate assets without compromising security.

FMDWP (Fully Managed Device with a Work Profile) is a device management mode that allows enterprises to own the device while enabling users to install personal apps and securing work apps within a separate work profile. 

Separated Apps, exclusive to Samsung Knox devices and set up through the Knox Service Plugin (KSP), is another mode where enterprises own the device and allow users to install authorized third-party business apps in a securely separated folder. The enterprise retains full control over the device through a UEM app and can specify the apps allowed in the Separated Apps folder.

These different modes offer enterprises varying levels of control and flexibility to meet their specific needs for device management and app installation.

WP-C (Work Profile on Company-Owned Device) is a device management mode introduced in Android 11. In this mode, enterprises own the device, secure work apps in a work profile, and allow users to install personal apps. The enterprise uses a UEM app as the profile owner to control the work profile, providing a balance between user freedom and privacy protection.

Bring Your Own Device (BYOD) is a model where employees own the device and install work apps in a separate work profile for increased productivity. The enterprise uses a UEM app as the profile owner to manage work apps in the work profile.

These device management modes offer enterprises different approaches to device ownership and app management, catering to various needs and scenarios.

Knox-enhanced work profiles offer advanced management features for Android Enterprise work profiles on Samsung devices. IT admins have granular control over data transfer, container-only control settings, container configuration, password policies, and security measures to ensure the security and productivity of work profiles.

IT admins can manage the import and export of data between personal and work spaces, including apps, files, contacts, and more. They can also configure exclusive settings for the work container, such as Bluetooth, NFC, and USB access. Custom resources like work shortcuts and badges can be set to improve usability and identify work apps easily.

Password policies can be enforced, including complex passwords, two-factor authentication, and Active Directory authentication. IT admins can also lock the container in case of non-compliance or device loss to protect work data. These features provide enterprises with enhanced control and security for work profiles.