Android single-app kiosk setup for tablets: black remote view and exit prompt issuesSolved

Participant
Discussion
1 month ago Sep 20, 2026

I’m preparing a batch of Android Enterprise tablets for single-app kiosk mode in Hexnode. We already use Android scanners with different policies, so I wanted to set up the tablet policy before enrollment.

The goal is to run one app from Managed Google Play in kiosk mode, with the option to add supporting/background apps later if needed. A few things confused me during setup:

– When adding the app from Managed Google Play, I could see permissions, but I wasn’t sure where app parameters/configurations are set.
– Our default Android enrollment profile is mainly for scanners. I wasn’t sure whether tablets need a separate enrollment profile or just a separate device group.
– The tablets are Samsung devices, so I wasn’t sure whether Samsung Knox should be activated during enrollment.
– After enrollment, Remote View showed a black screen with a message that app content was hidden for security.
– On the device, tapping the build number to enable Developer Options showed “Action not allowed.”
– I also couldn’t get the kiosk exit password prompt by tapping the screen after reboot.

What is the correct way to set this up and troubleshoot these kiosk issues?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
1 month ago Sep 20, 2026
Marked SolutionPending Review

Hi @boris,

For this setup, you can prepare most of the configuration before the tablets arrive.

For the app:

  1. On Hexnode UEM portal, go to Apps > Add Apps > Managed Google Apps.
  2. Search for and approve the required Play Store app.
  3. Navigate to Policies > New Policy > Android.
  4. Use the App Permissions policy to pre-configure runtime permissions such as Camera, Storage, Location, etc. These can usually be set to Allow, Deny, or Prompt.
  5. Use the App Configuration policy only if the app developer supports Android Managed Configurations. If the app does not expose managed configuration keys, there may be no app parameters to configure in Hexnode.

For the kiosk policy:

  1. On Hexnode UEM console, go to Policies > New Policy.
  2. Open Android > Kiosk Management > Single App.
  3. Configure the kiosk with the approved Managed Google Play app.
  4. Review the available kiosk settings, including status bar, peripheral controls, exit options, and app launch behavior.
  5. Save and associate the policy with the tablet devices or a tablet device group.

For separating scanners and tablets, you do not necessarily need a separate enrollment profile. If your Hexnode plan and workflow allow multiple enrollment profiles, you may create one, but it is also fine to enroll the tablets using the existing Android Enterprise enrollment flow and place them into a separate device group. Then associate tablet-specific policies with that group.

For Samsung tablets, activate Samsung Knox during enrollment if prompted. This allows Hexnode to apply Samsung-specific management capabilities on supported devices.

The black screen during Remote View can happen on Android 15 and later due to Android’s screen sharing protection mechanisms. Certain system screens, app content, or sensitive UI elements may be hidden from remote viewing for privacy and security.

To access the relevant Android setting, Developer Options must first be allowed on the managed device. Android Enterprise enrollment can block users from enabling developer settings by default. Under Policies tab, navigate to Android > Advanced Restrictions > Allow Settings., and enable Developer Mode. After that, exit kiosk mode temporarily if required and enable Developer Options on the tablet. Then open Settings > Developer options and look for the screen sharing protection setting. On many devices, it appears under the Apps section as “Disable screen share protections,” but the exact name can vary by manufacturer and Android build.

Once that protection is disabled, Remote View should be able to display app content that was previously hidden. However, some secure system screens, including parts of Developer Options or other protected settings pages, may still appear blank during a remote view session because Android blocks capture of secure content.

Regards,
Sienna Carter
Hexnode UEM

Save