Remote control without extra software
Knox Remote Support comes with Knox Manage: IT sees and controls a colleague's Android device live, sends files and records sessions. No separate remote-support tool to buy.
Details Official Samsung Knox Reseller
Knox Suite Essentials Plan: device management and remote support in one licence
The Samsung Knox Suite – Essentials Plan bundles Knox Manage device management, Knox Remote Support remote-control assistance, Knox Mobile Enrollment zero-touch enrolment and Knox Platform for Enterprise Galaxy policies – under a single licence key. This page shows exactly what the licence includes, what it doesn't, and when moving to the Enterprise Plan makes sense.
Deepest control on Galaxy devices; Android, iOS/iPadOS, macOS, Windows and ChromeOS devices from one console. Essentials licence, upgradable to Enterprise.
Our specialists help with choosing the licence, setting it up and running it.
Four Knox services, one licence key
Knox Manage
Cloud-based device management: settings, app deployment, policies, kiosk mode, locking or wiping lost devices – on Android, iOS/iPadOS, macOS, Windows and ChromeOS.
Knox Remote Support
Screen sharing and remote control of Android devices from the console, with file transfer, screen recording and role-based permissions.
Knox Mobile Enrollment
Galaxy devices registered by your reseller join management automatically the first time they are switched on.
Knox Platform for Enterprise
Galaxy-specific security and management policies beyond Android Enterprise basics, delivered through the Knox Service Plugin. The KPE Premium licence is free of charge.
Not part of the Essentials Plan: Knox E-FOTA, Knox Asset Intelligence, Knox Mobile Enrollment Advanced settings, Knox Capture, Knox Authentication Manager – these belong to the Enterprise Plan. → Detailed comparison
Six jobs the Essentials licence takes care of
Rules that apply themselves
Different policies in and out of working hours, on a given Wi-Fi network, on SIM change, roaming or inside a defined area. No manual intervention.
DetailsTablets and phones locked to one job
Build single- or multi-app kiosks with your own logo and wallpaper in the Kiosk Wizard. Users reach only the apps you choose.
DetailsGalaxy, iPhone and Windows in one console
Manage Android, iOS/iPadOS, macOS, Windows and ChromeOS devices from one cloud console. Windows and ChromeOS devices use the same licence.
DetailsOut of the box and straight into management
Galaxy devices registered by your reseller enrol in Knox Manage on first boot. No need to handle each one.
DetailsLost device: lock it, or wipe only company data
Remote lock or suspend, wipe the whole device or just the work profile, and view the last known location.
DetailsReferences
Knox Remote Support
Screen sharing and remote control from the console
The Essentials Plan includes Knox Remote Support, launched directly from the Knox Manage console. IT staff see the user's Android screen live, control it remotely, take screenshots and recordings, and transfer files.
Roles define who may start a session and with which rights: view only, or full control of the device during the session.
There is no separate remote-support tool to source and license. This is one of the bundle's biggest strengths, as other MDM vendors typically reserve mobile remote control for their pricier tiers.
Examples
- A driver's dispatch app won't start – IT connects from the console, checks and fixes it, with no site visit.
- On a new hire's first day, IT walks them through setup remotely.
- The issue is recorded for later analysis.
Good to know: Remote control is documented for Android devices; on non-Samsung devices the user must approve the session. Do not expect remote control of iOS devices.
Knox Manage
Event-based policies
In Knox Manage, policies can be tied to events: day and time, a specific app running, a Wi-Fi network (SSID), SIM change, roaming or a geographic area (geofence).
When the event occurs, the assigned policy takes effect automatically; when it ends, the default policy returns.
Rules therefore apply in context without manual supervision: stricter app restrictions after hours, camera disabled on a site, immediate lockdown on SIM change.
Examples
- Only work apps during working hours, personal use allowed in the evening – on the same device.
- Camera automatically disabled on the factory floor, available again outside the gate.
- On SIM change the device switches to restricted mode at once and the admin gets an e-mail alert.
Good to know: Day/time events also work on iOS; SIM change and geofence are Android only.
Questions about remote support or policies? We'll show you on your own devices.
Let's talk
Knox Manage Kiosk Wizard
Kiosk mode without development
With the Kiosk Wizard (Kiosk builder in the new console) you assemble a single- or multi-app kiosk by drag and drop: your own logo and wallpaper, folders, clock, calendar, banner, Knox Browser.
Users reach only the selected apps; the settings menu and status bar can be blocked, and apps needed in the background can be allowed separately.
No separate kiosk launcher to buy or build.
Examples
- An in-store tablet that shows only the product catalogue and a customer survey.
- A warehouse handheld with three company apps.
- An information display in a waiting area running a single app.
Good to know: Kiosk depth differs by platform (Android Enterprise, Windows 10/11, iOS/iPadOS app lock, ChromeOS, Wear OS); on Android 15+ the Bar colour cannot be changed.
Knox Manage
A mixed fleet in one console
Knox Manage handles Android (Samsung Galaxy and other brands), iOS/iPadOS, macOS, Windows, ChromeOS and Wear OS devices from one cloud console. Windows and ChromeOS devices register with the same Knox licence as mobile devices.
Apps are deployed from Managed Google Play, the App Store or in-house packages; password, encryption and network policies are set per platform.
The deepest, Galaxy-specific control – Knox Platform for Enterprise policies – is available on Samsung devices.
Examples
- The field team's Galaxy phones and management's iPhones in one inventory.
- Company Windows laptops receive baseline settings from the same console.
- Knox policies on Galaxy devices; standard Android Enterprise rules on other Android brands.
Good to know: The new Knox Manage console handles Android devices only; non-Android devices are managed in the original console, and settings stay in sync between the two.
Running a mixed fleet? We'll check what the Essentials licence covers for you.
Request a licence quote
Knox Mobile Enrollment
Zero-touch enrolment for Galaxy devices
The standard version of Knox Mobile Enrollment is part of the Essentials Plan (and also available in the free Base Plan).
An authorised reseller uploads the purchased Galaxy devices to Knox; on first boot, during initial setup, each device enrols in Knox Manage automatically and receives its assigned profile and apps.
IT does not have to unpack and configure devices one by one, and every device starts from the same baseline.
Examples
- Twenty new Galaxy phones arrive – once switched on, they all get the company profile.
- A device shipped straight to a branch and switched on there.
- New purchases get the same settings as the existing fleet.
Good to know: Samsung Galaxy devices bought through an authorised reseller only. Enforced enrolment (locking a device that doesn't enrol within a set time) is a Knox Mobile Enrollment Advanced settings feature – not part of Essentials, only of the Enterprise Plan.
Knox Manage
Lost or stolen device: lock, suspend, selective wipe
Lock or suspend a lost or stolen device remotely from the console, and wipe the whole device or – with a work profile setup – only the work profile, leaving the user's personal data untouched.
The device's last known location can be viewed.
For leavers, the same selective wipe allows a quick, clean handover.
Examples
- Phone left in a taxi: lock it, then wipe the work profile; personal photos stay.
- Company data removed from a leaver's phone in one click.
- The last known location tells you whether it's lost or simply left at home.
Good to know: Commands differ by platform; selective work-profile wipe requires an Android Enterprise work profile setup.
Ready to roll out? We'll prepare a licence quote based on your device count.
Request a licence quoteWhat's in Essentials, and what's Enterprise only?
The table below shows the composition of Samsung Knox Suite plans based on the manufacturer's current licensing documentation. It is indicative; we confirm the exact contents with your quote.
| Service | Base Plan (free) | Essentials Plan | Enterprise Plan |
|---|---|---|---|
| Knox Platform for Enterprise (Galaxy policies, Knox Service Plugin) | Included | Included | Included |
| Knox Mobile Enrollment – standard (zero-touch enrolment) | Included | Included | Included |
| Knox Manage (device management, kiosk, policies, app deployment) | Not included | Included | Included |
| Knox Remote Support (screen sharing, remote control) | Not included | Included | Included |
| Knox Mobile Enrollment – Advanced settings (enforced enrolment) | Not included | Not part of Essentials | Included |
| Knox E-FOTA (firmware/OS version control, scheduled updates) | Not included | Not part of Essentials | Included |
| Knox Asset Intelligence (fleet diagnostics, battery, apps, security patch level) | Not included | Not part of Essentials | Included |
| Knox Capture (camera barcode scanning) | Not included | Not part of Essentials | Included |
| Knox Authentication Manager (biometric sign-in on shared devices) | Not included | Not part of Essentials | Included |
- 1 Knox Configure is licensed separately and is not part of any Knox Suite plan.
- 2 The table is based on the manufacturer's licensing documentation; plan contents may change.
Essentials is enough if…
you need device management, kiosk mode, policies, remote support and zero-touch enrolment, and don't need to pin or schedule OS updates centrally on your Galaxy devices.
Choose the Enterprise Plan if…
you want to pin the firmware version of your Galaxy fleet and schedule updates (E-FOTA), need fleet-wide battery, app and security-patch diagnostics (Asset Intelligence), or want to enforce enrolment (KME Advanced).
Not sure which plan you need?Let's talk
Trial and upgrade
Free trial licence
The Samsung Knox Suite trial runs for 3 months on up to 30 devices. It includes the full Enterprise Plan, so every Essentials component can be tested. After purchase, the trial's settings and enrolled devices are kept. We help you request the trial.
Upgrade without data loss
The Essentials Plan can be switched to the Enterprise Plan by SKU change – for example if you later need firmware control – and the tenant's settings and devices are kept.
One licence, many platforms
Windows and ChromeOS devices register with the same Essentials licence as mobile devices.
Frequently asked questions
Essentials in practice
All posts
Rolling out Knox Suite Essentials step by step: which tasks it covers, and where Enterprise begins
Task list, component mapping and rollout order – a practical guide to deploying the Essentials Plan.
Read more
Uniform settings on every company phone: enrolment and profiles with Knox Suite Essentials
More than 400 phones, each set up differently – how Knox Mobile Enrollment and Knox Manage create one consistent baseline.
Read more
Locking down and remotely managing in-store tablets: kiosk mode with the Essentials licence
Based on Tchibo's in-store tablets: how a shop tablet can be locked down and managed remotely with the Essentials Plan.
Read more
Restricting driver phones across a large fleet: what does Knox Suite Essentials actually cover?
Mobile data gone in days, changed settings, manual app updates – we map the tasks from the Waberer's case against what the Essentials Plan contains.
Read moreRequest a licence quote for the Knox Suite Essentials Plan
Get in touch: our specialists help you choose the right licence, set it up and run it.
UBIK365 Kft. – Samsung Knox reseller, Budapest.