I've got an Android "Work Profile" on my phone, kind of setup [as explained here](https://blogs.vmware.com/euc/2017/12/android-byod-how-i-use-the-work-profile.html) . It's trivial to access normal Android files. Plug a USB cable into my phone and PC, select "File Transfer" and my files show up in Windows Explorer. Is it possible to access my "Work Profile" files in the same manner? I don't see any path to them in Windows Explorer when connected (to Android 11) via USB. I'm guessing this access may not be possible.

So, as you might know, Android 10 supports Multi-User feature (for reference - [this thing](https://www.howtogeek.com/333484/how-to-set-up-multiple-user-profiles-on-android)) I have some apps from F-Droid, installed while on Owner profile. But most of the apps are only visible to Owner (I suppose those are User apps, as the universally visible are System apps). But how can I make some of these apps visible to other profiles so I can use them with all the features provided with separate user accounts (e.g. compartmentalized app data)? Preferably using only one device, without ADB connection to PC, and without re-installation. There are similar questions on this topic ((https://android.stackexchange.com/questions/96026/if-the-owner-installs-an-app-can-a-secondary-profile-use-it) , (https://android.stackexchange.com/questions/51132/a-specific-app-works-fine-with-tablet-owner-account-but-crashes-for-other-users ), (https://android.stackexchange.com/questions/33470/is-it-possible-to-make-admin-user-apps-available-on-other-user-accounts)) , but the answers are outdated. The newest one is 7 years ago.

(solved) I need to run an app in Genymotion that is used for data entry and upload of the entered data into 3rd party sites. The logins to 3rd party sites are stored in this application (probably encrypted). The application will store multiple logins for my different customers of who need to have the data uploaded into the 3rd party sites. The data into the app will then be entered by other people to whom I outsource the data entry. So I created Genymotion appliance, installed the app and in this application I entered logins for sites such as ebay. I am looking for suggestions on what can I do to secure the appliance to prevent the data being copied out from it. I want to prevent the person to whom I outsource data entry to be able to install and load 3rd party other apps, modify system settings, install other apps, copy the system directory, copy the login and password information saved by the application. Let's assume the worst possible case here when application is well written but the passwords mentioned above (for the ecommerce sites like ebay) is saved in plain text in this application in the internal application directory. What I know about the application is it doesn't support access to SD Card, only can read and write data to the internal memory. What can I do in Gennymotion to improve the security of my appliance. Genymotion virtual machines are rooted. So I looked at following steps already: 1. Setup restricted user on Android 2. Set restriction for the restricted user to only be able to use the one application. Disable anything else (including disabled browser, email, youtube etc..) 3. Try to get the restricted user loading on boot of Android. When Android restarts, however, it doesn't allow choice to login into the restricted user or the admin user, sort of like a Windows or MacOS login menu. To get the appliance to always start with restricted user by default, I need to add a script and the scripted will need to start using Tasker or MacroDroid. However, how do I prevent the user from installing 3rd party apps? Is it good enough to disable all user apps (except that one used for data entry) from the restricted user? Is there any other way the user could abuse the access to the virtual appliance and load something there? Are there any system android apps I need to disable for the restricted user to prevent the user to be able to do anything bad with it? The application used for data entry can not download any application or data, however, I believe it does use the webview because it loads sites like ebay and fills the forms on those sites. It only interacts with select websites only like Ebay to enter data into Ebay forms.. Is there anything I can do to secure Genymotion appliance any other than what I already mentioned. I would like to send the link to the Genymotion SaaS Android to people who will do data entry for me into Ebay and other sites. So I need to make sure the virtual appliance is secured as much as possible from tinkering with it. I need to make sure somebody doesn't get hand on the stored login details. Just to clarify for the login credentials: I am not sure how the user credentials are stored and I will find it out, however, for now, I go from the worst case scenario when the credentials are stored in plain text in the app settings. The user name and password is stored in the application with exception for Ebay because the many other sites do not have API key or any webservices interface, so the application would access those sites simply via a webview, and when it goes to login there it will do that by filling in the login information on the login form (simulates keystrokes). The user name and password is entered into the login form for the site. That's why the login info is stored in the application itself. This question is not about how to secure the specific application I will be using, but how to secure the actual whole Android appliance from tinkering with. I am aware I will the risks here, just want to do as much due diligence as I can. Update: Done some digging so this cannot be done. Neither Genymobile or Appetize or other online Android emulators can offer fine-tuning in terms of user access. The closest is Genymobile because at least allows adding and removing access of users to individual appliances. That is however not resolving the issue with Android and in particular rooted Android, since all online emulators run rooted Android and I am not sure how that is secured against potentially malicious actors who receive access link. The only easy way to solve it, kind of in a mickey-mousy way is to install Kiosk mode application. That kiosk app will run at every boot and it only shows the specific application. There is always risk of course the malicious user would do something to crash the application and the Kiosk app, but if the application is not a web browser or email client or similar it should be relatively safe. There are plenty of Kiosk mode apps for Android but none of them is free (don't try to look, no chance to find one), the cheapest cost about 7 USD one-time purchase, the more expensive ones cost 20 per month per device or more and come with remote control etc... Not cheap but kiosk mode apps are almost exlusively used by businesses so that's why there is lack of free apps. Anyhow I believe this is the closest as I could get to deal with this. ---- Sources for Genymotion restricted user setup .. https://android.stackexchange.com/questions/176827/how-to-set-restricted-user-as-default-user-on-reboot https://docs.genymotion.com/paas/10_Using_root_access/

My kids have restricted profiles on my Samsung Galaxy tablet. The settings are good and I like the ability to control which apps they have access to. However, they are unable to sign in to their Google accounts on YouTube, as this appears to be a limitation of a Galaxy restricted profile. They already have Gmail accounts. Each time they try to sign in, they get an error message: "This change isn't permitted by your admin". Since I am the admin, I would like to change this setting so that they can use their Gmail account to sign in to YouTube. Is there a way to access the settings to perform this change? Thanks!

We have a tablet for our four year old. We created a restricted user for him to limit his access but are running into an issue. We downloaded Duolingo ABC and I granted access to the restricted user. When we open the app it asks us to sign in with our Google account. This works fine for a non-restricted user, but when we try on his restricted account it errors out. Is there anyway to log into an app via Google from a restricted account on a tablet?

My boy is playing Scribblenauts on an Android 5.0 tablet, under the control of a restricted profile. He's done all the levels, and there is an IAP required to purchase the rest of the levels. Can't do the IAP from within the restricted profile, because no play store access. I've purchased the levels on the parent account, but they don't show up in his restricted profile. How can I get the new levels for him?

A while back I set a password for my work profile. For the life of me I cannot remember it (tried so many different combos). I want to access my phone but it's asking for the password, which I don't know. I tried quite a few times and it eventually said if I input the wrong password again my work profile would be deleted. This would be fine as I could gain access to my personal account and set up my work profile again.... but no, after inputting another incorrect password, it just says try again in 30 seconds. I can't even access my personal account as it's just asking for the password. I don't want to go "nuclear" option to factory reset my phone as not all my data is backed up. Is there anything else I can do to gain access to my phone?

I have Galaxy J1 smartphone with OneUI and I have to prohibit installing any applications on it. I tried disabling appropriate activity in PackageInstaller, but that can be bypassed with Factory Reset in settings. Installing any AppLock applications does not help, because then can be easily removed by just booting into "Safe Mode". Is there a way I can achieve my goal?

On a Samsung SM-T290 (Galaxy Tab A 8.0") with Android 10, there is regular user account and also a restricted profile for users to use in order to restrict what apps can be used. In previous versions of android, the restricted profile could unlock the tablet. However, in android 10, I can't seem to switch to the restricted profile user on the lock screen, unless the regular user account unlocks it first. Is there a way to allow the restricted user account to unlock the tablet, so the main user doesn't have to login/unlock it first?

I have 2 profiles setup on my device as shown here https://www.howtogeek.com/333484/how-to-set-up-multiple-user-profiles-on-android/ However the switching of accounts as shown here is cumbersome. Is there any app/ approach where I can enter something to unlock phone(separate pin) that will load the profiles appropriately.I sometimes hand over my phone to family and don't and switching profiles after unlocking takes too long.

We would like to have an already added restricted user account be the default when we restart our Samsung SM-T580 tablets. At current we have 2 accounts installed, Admin and User The User is a user with restricted access. The tablets are rooted Hope that someone has a solution for our question

# Background I want to prevent myself from viewing pornography on my cellphone. I do occasionally go to addiction support groups, but haven't yet done the Twelve Steps that they recommend. I'm hoping that, if I set up a sufficiently-good filtering setup, I can manage at least somewhat OK without doing these Steps. I used to use [the app locker formerly known as Smart AppLock](https://play.google.com/store/apps/details?id=com.sp.protector.free&hl=en) in order to try to prevent myself from installing the app which I normally use to view pornography. But the app locker had a bug in it which allowed me to bypass its protection. It's not an obvious bug. I guess I could have tried emailing the developers of the app locker; but I didn't know whether or not they'd actually care. I could have installed a different app locker and given the password to a friend. Or I could have used Pluckeye Lockbox or a similar service to store the password. But I'd rather not rely on third-party app lockers at all. I'd rather rely upon security code written by Google. So I'd like to rely upon Android itself and to make myself a restricted profile in the normal way. I don't want to [install a custom ROM and hope that it can help me](https://android.stackexchange.com/questions/92186/creating-restricted-accounts-on-phone-running-lollipop#95650) . I don't want to [play around with XML files](https://android.stackexchange.com/questions/119117/make-an-iap-in-a-restricted-profile#155761) and hope to achieve my goals that way. I don't want to make myself an [almost-restricted profile](https://android.stackexchange.com/questions/92186/creating-restricted-accounts-on-phone-running-lollipop#96141) . I just want to create an ordinary restricted profile in the ordinary way. # My question If I buy a cellphone running the newest version of Android, will I be able to create a restricted profile for myself in the same way that I could do so on a tablet? And, if so, how do you know? :)

I'm looking to configure some Android tablets for shared use in a work environment so they can be used as mobile terminals for an ERP system. In case it matters the test device right now is the Samsung Galaxy Tab A 2019 running Android 9 but I'm open to deploying other devices if there's options that work on other models. The tablets will need to connect to our restricted wifi network which is authenticated individually normally (we don't have shared devices currently) so I was thinking of connecting to the network with a shared/generic user on the admin account and then trying to restrict access to the wifi settings so that shared users of the device can't access the password. Unfortunately after creating a restricted user I couldn't see a way to restrict access to the wifi settings which has an option to present a QR code for others to be able to access the same wifi network with those same credentials and configuration. If I use the guest user they don't seem to have any way to open the application that we need and also once they log out all their session data is thrown away which would require a painful setup process on the business application we need to use each time and require a privileged user to intervene. I also explored pinning the application which does prevent users from directly accessing the wifi settings (and is probably what we'd want anyway as these would only be used for this application) but anyone with knowledge of the unlock credentials (eg swipe pattern/pin/password) for the user would still be able to unpin and access the wifi settings. Because these devices are being deployed across multiple sites this would cause issues as we'd need to expand the group of trusted people with knowledge of these credentials and thus access to the wifi password that would need rotating when any of those people left. Ideally, I'd like a way to be able to just use restricted profiles without access to the wifi settings/being able to read the wifi password because then we can leave that restricted profile as just swipe to unlock and there's nothing else sensitive on the device. Is there a way to do this? Am I missing a better option for shared Android devices?

Can we create restricted user on phone running Android Lollipop? Seems that restricted users are not supported on mobile but only on tablet (mobile has only simple user no restricted user option). Reference: http://www.howtogeek.com/205301/how-to-use-android-5-lollipops-restricted-user-profiles-for-basic-parental-controls/

The organization I work at has added the option of using Android For Work (AFW) aka Android Enterprise (AE). Under this setup I have two profiles: private and work. These are completely separate spaces, so apps installed in one profile aren't available in the other, and files are kept separate. Even Android's _share_ functionality is separate, so I can't share a file I received at work to my private profile. The only thing that I've seen that is somewhat shared is the phone app. When I search for a contact, I get results from both work and private profiles. The question is, is there any way to view my work and private calendars together? While the profiles are separate, there is only one me, so I would like to be able to see all my schedule constraints in one place. Is there any way to do this?

I've worked at companies in the past where it was possible on Android to setup a "work profile" which remained totally separate from the personal profile. This meant separate apps for things like Gmail, Calendar, Docs, etc. that were totally isolated from each other. The benefit of this is that the company can delete the entire work profile if they need to without touching any of the personal apps and data on the device. If I go to setup a new Exchange account for a Microsoft domain, it asks me to give it full and _total_ control of my device and the ability to delete everything at the discretion of the IT administration of the organization. Is there a "work profile" mode for setting up a Gmail Exchange account or a way to do this with the Microsoft apps? I'm on Android 9 on an original Pixel 1.

I'm trying to find a way to disable or lock certain settings components for Android Tablet. We need to protect the tablets from out students pressing un-allowed settings. Kindly assist We need to hide: - Apps - Backups & Reset - Accounts - Accessibility - Developer options Screenshots attached to be more accurate, thank you in advanced?

I've set up a restricted profile on my Nexus to enable my children to have relatively controlled access to the device. Now one of them is asking for me to unlock a couple of features within an app via an IAP (Angry Birds Star Wars: Boba Fett Missions). I'm happy to do this, but can't find a way to do so. Before I'd set up the account I'd already purchased the "No Adds" IAP, and this is also purchased on the restricted profile, but purchasing the unlock on my account doesn't seem to have any impact on the state of the unlock on the Restricted Profile. Is there a reliable way to either: 1. Enable IAP's on a Restricted Profile? 2. Transfer/Share IAPs between a Main and it's Restricted Profiles?

I realize that 4.4.3 is a very old version at this point so let me explain my situation for context. I work as IT in a small trucking company, we are a client of another company called PeopleNet who provides us with units to track our trucks, take driver logs, provide GPS, etc. Recently we purchased some of their MS5 PeopleNet Connected Android tablet units from them, along with their application we also wanted drivers to use certain applications that railyards are beginning to regularly use for in-gating and out-gating loads. Obviously though, we don't want them to have access to much beyond those. PeopleNet wants us to send the tablets back for a 3 week period and pay 12$ a month to do this for us on a tablet system that was already 900$, which is ridiculous. Setting up a restricted user profile has pretty much provided everything minus one exception, the PeopleNet application (called PMobile) is not listed at under the applications for the restricted user at all. I was wondering if someone with much more knowledge of Android could tell me, is this application not showing because I know at version 4.4.3 that restricted user profiles were a fairly new feature (It is also impossible for me to update the tablet past this version.)? This application was also NOT installed through the Play Store, but through a USB stick, could that be the issue? The application also has a plethora of permissions it requires, does this make it unusable in a restricted user profile at all? If anyone could help me understand or even get the app to show so I can turn it on/off for the restricted user profile I'd greatly appreciate it. Thank you.

Having MIUI optimization enabled on a MIUI device (for me: Mi Max 2) makes it to take a long time (exactly 10 minutes) for each new app to be installed. Although I have not seen such behavior in the main profile/user, in a Work Profile (i.e. managed profile) with MIUI optimization enabled, each installing process takes exactly 10 minutes. However after turning off the MIUI optimization (under Developer options), this behavior does not happen. Has anyone notified of this behavior? What is wrong with the MIUI optimization? Can I get rid of this optimization without getting into trouble in other parts of system?