Switching user & Double lock screens

[Chris Cushley]

Hi

I'm having an issue with a Samsung Tab A6 (SM-T280)

First Issue was that there was a switch user option that I couldn't get rid off. The problem here is This device is to be using in an enterprise environment and locked down to a seelct few apps by Airwatch as user can't be trusted to not install things they shouldn't. The switch user on the lock screen allow them to break out of the lockdown and give themselves full access to the system. This would also lead to the possibiliy of the device being stolen and just set up a new user via the lock screen and be used as normal. This just seams like the least secure "feature" of a mobile device.

To get round this issue I thught a 3rd party lock screen might do the trick but that then gives 2 lock screens, the 3rd party on, then when its unlocked it goes the the default android one (the one with the user switch "feature") to unlock again. There isn't any obvious way to disable this as there is no "none" option in the lock screen settings.

Am I missing something or is there a threat that I can't find on this?

Rooting is not an option as then it can't be controlled by Airwatch.

Thanks
-Chris

 

[BerryClever]

I do not need to worry about it, but never thought about adding a new user to get around everything. I played around with my settings and maybe this will help.

I used my main user (you can rename to "admin" or whatever) and used settings to add a password. I then created a restricted user account and used lock screen and security settings to add a pin.

When I went to the lock screen I could switch to admin but needed to enter the password before creating an account (though the option was shown) and when switched to restricted user it wouldn't allow me to add an account at all (just allowed me to switch back to admin, but to admin's password screen).

Maybe having an Admin account for you and a restricted account for the other user might be the best option? As a restricted user, you as the admin decide what apps they have access to and what apps they don't. No root required.

Hope that helps.

 

[Chris Cushley]

Never thought of doing it that way round, might try that tomorrow.

Thanks
-Chris

 

[radioactive70]

Not sure about the tab a I'd have to check my mom's but I have a s2 tab and there's no way around not having people get access to the tablet from the lock screen.you simply select guest account and your free to go and even download apps .until your able to delete the guest account which you can't your basically screwed.

 

[radioactive70]

I might also add that although its possible to set up a lockscreen for a guest or another user all you have to do from the lock screen is bring down the drop down the icon and delete guest and it's back to normal ,no password needed.this is a serious flaw and I hope samsung can rectify it.

Posted via the Android Central App

 

[BerryClever]

I might also add that although its possible to set up a lockscreen for a guest or another user all you have to do from the lock screen is bring down the drop down the icon and delete guest and it's back to normal ,no password needed.this is a serious flaw and I hope samsung can rectify it.

Posted via the Android Central App

That seems to the case. Searching the internet, it seems like its been a problem for a while. Surprised Samsung hasn't fixed that flaw yet... well looking at the 1990's looking S-note and waiting months and counting for the Marshmallow update on wifi only tablet- I guess I'm not that surprised.