KNOX-07-012900 - The Samsung Android 7 with Knox must implement the management setting: Disable Admin Remove.

Information

DoD policy requires DoD mobile devices to be managed via a mobile device management service. If Admin Remove is not disabled the mobile device user can remove the administrator (MDM) from the device.

SFR ID: FMT_SMF_EXT.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Samsung Android 7 with Knox to Disable Admin Remove.

On the MDM console, deselect the "Allow Admin Remove" checkbox in the "Android Restrictions" rule.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Samsung_Android_OS_7_with_Knox_2-x_V1R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-91283r1_rule, STIG-ID|KNOX-07-012900, Vuln-ID|V-76587

Plugin: MDM

Control ID: 02f6db151ad3ad996f31944b9d04bd375acf6037f1bdc66e7f308ced6fedc06e