I was reading on the Knox platform enterprise documentation online and I came across a policy that takes an action upon OS tamper detection. Also on another site (Knox manage 24.09 release notes ) it just says that this option is recently introduced with the 24.09 update to the Knox manage client. So my question here is, Does this policy **only apply** or **take effect** if Knox manage client is installed?, assuming someone managed somehow to tamper with the OS and bypass the factory reset protection, and managed to flash a custom firmware or something else, will the device get locked down without Knox manage client installed?

My mdm (Ivanti/Landesk) requires to deploy an APK through NFC during the initial phone setup (and only during this setup, where you need to set the langage, time zone, google account, etc.) . This is part of the Android Entreprise Device Owner Mode process. ( Some mdm can follow this process with QR codes or afw#codes but mine don't .. ) The thing is the NFC card seems disabled by default at first boot (or after a factory reset), and I can't find a way to either enable it from top quick acess bar or settings pages. Is there an hidden way to enable some settings at this intial step ? I'm using Altice S61 in my tests, but I think this may apply to other devices as this is during the android standard setup wizard. ( Android version 8.1 ) Thanks in advance ! Regards

The organization I work at has added the option of using Android For Work (AFW) aka Android Enterprise (AE). Under this setup I have two profiles: private and work. These are completely separate spaces, so apps installed in one profile aren't available in the other, and files are kept separate. Even Android's _share_ functionality is separate, so I can't share a file I received at work to my private profile. The only thing that I've seen that is somewhat shared is the phone app. When I search for a contact, I get results from both work and private profiles. The question is, is there any way to view my work and private calendars together? While the profiles are separate, there is only one me, so I would like to be able to see all my schedule constraints in one place. Is there any way to do this?

We are attempting to present our progressive web application inside android for our end users who are seniors and would like to have special requirements met that I am not sure which approach we should move forward with. Help from the community would be much appreciated! We have developed a web application that we would like to run on top of in a sort of advanced kiosk mode on an android OS in a tablet device. Additionally we need to offer our users an interface to modify their wifi settings. These are our rough requirements and wonder if we can reach them using Android for Work or if the community has recommended solutions such as if a custom ROM is necessary: - boot into kiosk mode - initial boot screen is branded or customizable - remove the android header bar - expose via our interface connectivity settings like wifi, bluetooth, and cellular data - access to the device camera - access to power off function - access battery levels My research into current EMM provider solutions on the market shows that these solutions can really do a lot with the Android OS with the Device Owner permission. We are testing one option now. I'm just not sure if this would be the right approach. Your help is appreciated.