[GUIDE] Kg State Locked Bypass

Search This thread

faw_wal

Member
Feb 11, 2015
44
40
Damascus
Hello i was have issue with my deivce and i searched a lot to solve it on internet some of people just sold their phone to this problem and some replace the motherboard
Finally i was able to solve it the problem is that you have kg state locked and when you try to flash any file it give this message: all binaries are not allowed to be flashed due to kg locked even you can't flash stock rom like image

51573677-779957445692252-369314170379698176-n.jpg


requirement :
1- usb cable
2- pit file for your deivce
3- combination rom for you device

So How to solve :
1- get pit file for your device
2- open odin go to pit tab and and select pit file
3- go to options tab and uncheck auto reboot
4- press start when finish go to recovery this is important
5- in recovery menu select reboot to bootloader
6- flash combination rom
7- go to settings check oem options from developer options
8- enjoy your problem is solved :fingers-crossed:

Don't Forget to hit thanks :p ;)
 
Last edited:

weberdantas

New member
Dec 5, 2012
2
0
Did not work

I tried to do this process using a Galaxy s20 but it didn't work. Could you explain a little more detailed how it works?
 
Feb 19, 2019
6
0
Not working for A9

Hello i was have issue with my deivce and i searched a lot to solve it on internet some of people just sold their phone to this problem and some replace the motherboard
Finally i was able to solve it the problem is that you have kg state locked and when you try to flash any file it give this message: all binaries are not allowed to be flashed due to kg locked even you can't flash stock rom like image

51573677-779957445692252-369314170379698176-n.jpg


requirement :
1- usb cable
2- pit file for your deivce
3- combination rom for you device

So How to solve :
1- get pit file for your device
2- open odin go to pit tab and and select pit file
3- go to options tab and uncheck auto reboot
4- press start when finish go to recovery this is important
5- in recovery menu select reboot to bootloader
6- flash combination rom
7- go to settings check oem options from developer options
8- enjoy your problem is solved :fingers-crossed:

Don't Forget to hit thanks :p ;)

Oops, I tried to do this method for my a9 that started showing this message after rooting the device. It appears that the binaries are blocked because of the blocked KG, any alternative?
 

nevillehn

New member
Feb 14, 2017
1
0
Hello i was have issue with my deivce and i searched a lot to solve it on internet some of people just sold their phone to this problem and some replace the motherboard
Finally i was able to solve it the problem is that you have kg state locked and when you try to flash any file it give this message: all binaries are not allowed to be flashed due to kg locked even you can't flash stock rom like image

51573677-779957445692252-369314170379698176-n.jpg


requirement :
1- usb cable
2- pit file for your deivce
3- combination rom for you device

So How to solve :
1- get pit file for your device
2- open odin go to pit tab and and select pit file
3- go to options tab and uncheck auto reboot
4- press start when finish go to recovery this is important
5- in recovery menu select reboot to bootloader
6- flash combination rom
7- go to settings check oem options from developer options
8- enjoy your problem is solved :fingers-crossed:

Don't Forget to hit thanks :p ;)

Thankyou your solution worked for me
 

icotynato

New member
Jul 11, 2016
4
0
"So How to solve :
1- get pit file for your device
2- open odin go to pit tab and and select pit file
3- go to options tab and uncheck auto reboot
4- press start when finish go to recovery this is important
5- in recovery menu select reboot to bootloader
6- flash combination rom
7- go to settings check oem options from developer options
8- enjoy your problem is solved :fingers-crossed: "

1. PIT FILE IS INSIDE CSC.TAR?
6. HOW to create or download "COMBINATION ROM" ?
 

eder92

New member
Sep 10, 2021
1
0
Hola, tuve un problema con mi dispositivo y busqué mucho para resolverlo en Internet, algunas personas simplemente vendieron su teléfono a este problema y algunas reemplazaron la placa base.
Finalmente pude resolverlo, el problema es que tienes el estado kg bloqueado y cuando intentas flashear cualquier archivo, aparece este mensaje: no se permite flashear todos los binarios debido a kg bloqueado, incluso no puedes flashear stock rom como imagen

51573677-779957445692252-369314170379698176-n.jpg


requisito:
1- cable usb
2- lima de hoyo para tu deivce
3- rom combinada para tu dispositivo

Entonces, ¿cómo resolverlo?
1- obtenga un archivo de pozo para su dispositivo
2- abre odin, ve a la pestaña de boxes y selecciona el archivo de pit
3- vaya a la pestaña de opciones y desmarque el reinicio automático
4- presione iniciar cuando termine ir a recuperación esto es importante
5- en el menú de recuperación, seleccione reiniciar al cargador de arranque
6- rom combinada flash
7- vaya a la configuración, verifique las opciones de oem desde las opciones de desarrollador
8- disfruta tu problema está resuelto: dedos cruzados:

No olvides pegar gracias :pag ;)
buenas noches, una pregunta como puedo conseguir el pit, o de donde lo puedo sacar?
 

LudwikHardy

New member
Feb 28, 2018
1
0
When uploading the combination file I get a message "please get the approval to use factory binaries (pit)"
Samsung SM-A516B
 

doctorgadget

Member
Jun 28, 2015
5
0
Cluj Napoca
Hello i was have issue with my deivce and i searched a lot to solve it on internet some of people just sold their phone to this problem and some replace the motherboard
Finally i was able to solve it the problem is that you have kg state locked and when you try to flash any file it give this message: all binaries are not allowed to be flashed due to kg locked even you can't flash stock rom like image

51573677-779957445692252-369314170379698176-n.jpg


requirement :
1- usb cable
2- pit file for your deivce
3- combination rom for you device

So How to solve :
1- get pit file for your device
2- open odin go to pit tab and and select pit file
3- go to options tab and uncheck auto reboot
4- press start when finish go to recovery this is important
5- in recovery menu select reboot to bootloader
6- flash combination rom
7- go to settings check oem options from developer options
8- enjoy your problem is solved :fingers-crossed:

Don't Forget to hit thanks :p ;)

Please help me! How can I flash combination file with fastboot? because reboot to bootloader means entering fastboot mode. Thank you
 

jTunes

Senior Member
Nov 9, 2014
96
30
Cebu City
Hi to all, I just want to clarification about on my deviceI have Galaxy Z Fold 2 i use without any problembut when i try to boot it into ODIN there a line there KG State Prenormal
What the mean of this?
 

majajenej

New member
Aug 21, 2022
2
0
Hi, can you help?
When i start odin with that combination file, the proces will stuck at "set partition"
Any ideas?
 
Feb 7, 2023
12
1
Hello i was have issue with my deivce and i searched a lot to solve it on internet some of people just sold their phone to this problem and some replace the motherboard
Finally i was able to solve it the problem is that you have kg state locked and when you try to flash any file it give this message: all binaries are not allowed to be flashed due to kg locked even you can't flash stock rom like image

51573677-779957445692252-369314170379698176-n.jpg


requirement :
1- usb cable
2- pit file for your deivce
3- combination rom for you device

So How to solve :
1- get pit file for your device
2- open odin go to pit tab and and select pit file
3- go to options tab and uncheck auto reboot
4- press start when finish go to recovery this is important
5- in recovery menu select reboot to bootloader
6- flash combination rom
7- go to settings check oem options from developer options
8- enjoy your problem is solved :fingers-crossed:

Don't Forget to hit thanks :p ;)
Hey, since my device is locked, I can't unlock OEM. Can I still proceed?
 

Attachments

  • 20230207_194212.jpg
    20230207_194212.jpg
    1.1 MB · Views: 199

Emilson

Senior Member
Jun 6, 2012
260
110
POLAND
There is a way to bypass 'knox guard lock' kg lock, just by disabling main samsung launcher 'com.android.systemui' and instaling some alternative launcher.
 
Last edited:
  • Like
Reactions: coolpixs4

Emilson

Senior Member
Jun 6, 2012
260
110
POLAND
Managed other way to bypass kg lock inside locked system by using 'CCSWE app manager' Lycan mod.
This app allows to disable certain services inside the app without disabling the app itself.

i tested it on: Android 12
Security Patch Level: 1may 2022

✅ Advantages of Lycan Bypass Method:
•Modified systemui app still appears enabled
[kg security shouldn't reinstall app after reboot]
•screenshots works
•screen recording works
•screen cast/mirroring working,
•bluetooth devices battery info, etc.
•Wallpapers/themes
•notifications
•Android auto
•Google & Samsung Accounts are OK to use.

❌Not working:
•Nav bar
•status bar
•volume bar
•AOD-always ON Display
•screen lock (pattern, pin, fingerprint, face recognition)
❗Do not use build-in system Lock screen, its broken because of bypass method, otherwise system will stuck in startup screen.
☆Needed to install an alternative apps for missing Interface.
●install 'Alliance Shield X' Using Qr Code in Qr Setup Wizard.

●Get the 'Splashtop Add-on' & 'Lycan app manager'.
☆Optional
Open phone browser
(thru Aliance Shield X, or "Accesibility Trick")
Type shortened xda link: t.ly-SQT and download 'Splashtop Add-on' & 'Lycan app manager' from "Download" tab directly to your phone storage.

●install 'Splashtop Add-on'.

●run Splashtop Add-on and grant 'knox permissions' only, and leave. (internet Connection needed)

●Disable 'klms agent' (com.samsung.klmsagent) thru Alliance Shield X app.

●Uninstall Splashtop Add-on.

●Install 'Lycan Ccswe App Manager', grant device admin permissions.

●Find on the Lycan app Manager List:
'systemUi' app (com.android.systemui)

●Inside System Ui, open 'services' tab and find:
'KeyguardService' - Disable it.
'SystemUiService' - Disable it.

●Reboot Your phone, using Power button.

●Finish Setup Wizard.

●Install missing Interface Apps (posted an example interface apps below).
●Get Acces to ADB

●Install Splashtop Add-on
adb install -r --user 0 "C:\ADB Folder\Splashtop.apk" *write your "path and apk name", if apk is placed in Adb folder, path isn't needed.

●Start Splashtop Add-on
adb shell am start -n com.splashtop.streamer.addon.knox/.ConfigActivity
•grant 'knox permissions' only, and leave. (internet Connection needed)

●Disable KLMS Agent
adb shell pm disable-user --user 0 com.samsung.klmsagent

●Uninstall Splashtop Add-on
adb shell pm uninstall --user 0 com.splashtop.streamer.addon.knox

●Install LYCAN ccswe app manager
adb install -r --user 0 "C:\ADB Folder\Lycan.apk" *write your "path and apk name", if apk is placed in Adb folder, path isn't needed.

●Start LYCAN app manager
adb shell am start -n com.splashtop.streamer.addon.knox/com.ccswe.appmanager.activities.StartupActivity
•grant device admin permissions.

●Find on the Lycan app Manager List:
'systemUi' app (com.android.systemui)

●Inside System Ui, open 'services' tab and find:
'KeyguardService' - Disable it.
'SystemUiService' - Disable it.

●Reboot Your phone, using Power button.

●Finish Setup Wizard.

●Install missing Interface Apps (posted an example interface apps below).
•install app 'Alliance Shield X' Using Qr Code in QR Setup Wizard.
•disable 'systemUi'(com.android.systemui) thru 'Aliance Shield X'.
•Reboot Your phone.
•Finish Setup Wizard.
•Install missing Interface Apps (posted an example interface apps below).
☆You can uninstall 'Alliance Shield X' after everything is completed (deactivate device owner & device administrator in app settings)
☆Do not uninstall 'Lycan Ccswe App Manager', Risk of Kg reLock.
☆it's not an unlock, it's a BYPASS.
☆After Wipe Data/Factory reset everything goes back to stock setting, so reLock as well.








iphone look screen lock, stronger protection, pin security
thanks for @NoltsTechs

3Button navigation bar

Gesture navigation bar
+
☆You can create 'recent apps' button in your 'Navigation bar' app selecting 'Shortcut maker' as 'shortcut' button.
•that will open 'Shortcut Maker' app, so choose 'activities' option in it.
•Search there for: 'One UI Home' app.
•Select first action:
'com.android.quickstep.RecentsActivity'
•create shortcut(you can customize it)
☆'shortcut' button may be a premium/paid option in some 'navigation bar' Apps.
☆ ''Accesibility trick''
When phone is offline, tap 'accesibility button' on setup wizard screen.
Go to: 'installed apps' -> 'Live Transcribe' app -> 'open Live Transcribe' -> Open Settings -> tap 'back button' in the upper corner -> 'Phone Settings Page' -> open 'Apps' page -> run app you need.

☆if you need nav buttons during the installation, go to 'settings' -> 'accesibility' -> 'interaction and dexterity' -> turn on 'assistant menu'.

☆App Links:
-Alliance Shield X in Play Store
-Aliance shield X Free Registration link.
-Splashtop Add-on in Play Store.
-SamFw Tool - for pc, to acces locked ADB, etc.
-Minimal ADB and Fastboot Tool for pc, classic adb command prompt.
-Adb App Control - for pc, with pretty nice interfece that allow to enable/disable/install/uninstall apps thru Adb.
-Uninstaller - helpful in removing the splashtop add-on app in some cases. thanks to @fitrockx
-NotifiCon - notification sound manager app, fixes missing nottifications sound, thanks to coolpix4
-Net Guard to block app from the internet access.

☆Optional:
Disable those Apps after Kg Lock bypass to:

●Unlock Adb/Mtp or Phone Calling:
-'Device Services' (com.samsung.android.kgclient)
-'Knox Enrolment Service' (com.sec.enterprise.knox.cloudmdm.smdms)

●Disable Android Firmware Updates/Notifications:
-'Software Update'¹ (com.sec.android.soagent)
-'Software Update'² (com.wssyncmldm)

You can try to disable them thru 'Lycan ccswe app manager' or Alliance shield x'.

If you cant disable them thru phone app, you can download SamFw Tool for pc and use 'disable knox' option, that should disable all knox apps (incuding 'Device Services' & 'Knox Enrolment Service').
Or You can use Adb 'disable' commands(if You have adb acces)

To acces adb you need to enable 'adb debug' option in phone settings developer options.
Or if you cant do this, tap 'Phone' app and type *#0*# when using SamFw Tool, to unlock adb.

☆Optional Adb commands:
Open Android Settings
adb shell am start com.android.settings

Disable Device Services
adb shell pm disable-user --user 0 com.samsung.android.kgclient

Disable Knox Enrolment Service
adb shell pm disable-user --user 0 com.sec.enterprise.knox.cloudmdm.smdms

Disable Software Update¹
adb shell pm disable-user --user 0 com.sec.android.soagent

Disable Software Update²
adb shell pm disable-user --user 0 com.wssyncmldm

❗️if You Locked Your screen by Build-in System Screen Lock (even when I wrote NOT TO DO IT...) You can unlock it thru adb(if You have adb acces):
adb shell locksettings clear --old 1234
If it's a pattern, dots are numbers:
1● 2● 3●
4● 5● 6●
7● 8● 9●
 

Attachments

  • samsung before grant.jpg
    samsung before grant.jpg
    33.4 KB · Views: 385
  • Screenshot_20230322-214523_CCSWE App Manager.jpg
    Screenshot_20230322-214523_CCSWE App Manager.jpg
    477.9 KB · Views: 400
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    I felt that they might release an security update for May that will screw up everything.

    Btw. Knox enrolment,
    I don't remember why I decided to block the 'knox enrolment' app, probably because of the first guides about kg bypass that i found on YT.
    But to be honest, now i have 'knox enrolment' app enabled (other knox apps as well) and nothing happens.

    To prevent KG Locking acces to adb/mtp (not sure about phone calls) i disabled just one function in 'Device Services' (com.samsung.android.KgClient)
    -Receivers: 'systemIntentReceiver'

    When i triggered KG Lock by enabling systemui services back, phone still have access to adb.
    Actually enabling knox apps fixed my problem with acces to permissions in apps like location,storage,camera, etc. so maybe it will be helpful in fixing other isues.

    View attachment 5903151
    Can you capture your device, which apps did you disabled / uninstalled please !?
    How can I enable Device services with only SystemIntentReceiver blocked? Manually enable/disable one by one thru Lycan app ?
    Other system interface app such as status bar, lockscreen, .... Can be used after that ?

    For thoes who missing notification sound for apps
    => Please, install this below app then enable it solved
    3
    I felt that they might release an security update for May that will screw up everything.

    Btw. Knox enrolment,
    I don't remember why I decided to block the 'knox enrolment' app, probably because of the first guides about kg bypass that i found on YT.
    But to be honest, now i have 'knox enrolment' app enabled (other knox apps as well) and nothing happens.

    To prevent KG Locking acces to adb/mtp (not sure about phone calls) i disabled just one function in 'Device Services' (com.samsung.android.KgClient)
    -Receivers: 'systemIntentReceiver'

    When i triggered KG Lock by enabling systemui services back, phone still have access to adb.
    Actually enabling knox apps fixed my problem with acces to permissions in apps like location,storage,camera, etc. so maybe it will be helpful in fixing other isues.

    Screenshot_20230503-190452_CCSWE App Manager.jpg
    2
    I should state however my phone is S20 FE with Android 11, One Ui 3.1 with November 2021 security patch level. At first I too did not have the "factory reset" option available in my recovery mode (I think its an option that can be disabled by whoever sets the MDM lock). I managed to fix that with Samfw frp tool using "softbrick fix" in download mode tab of the tool. This made my phone throw an error stating that it couldn't start due to missing files or something and that I needed to factory reset it. Also I've found the app "iLock" lock screen works great without being able to be easily bypassed, give it a go guys!.
    2
    In my case, doing this sends incoming screen off calls straight to mailbox. For the people having the same incoming screen off call issue, I would keep devices services disabled.
    I don't have calls locked, so its a different case where that one function disabled is enough.
    You probably have to disable little bit more.
    I prefer to disable as little as possible to keep functionality as much as possible.
    2
    I'm curious why Wolf OS's "Perseus kg bypass" method could disable MDM and KG BUT still retains the full system interfaces and ROM functionalities. They might moding System UI apk & disable the calling KG app inside and run as system app update dủing bypass process...?
    No, they're not modding the APK. They're doing basically the Alliance bypass, but with their own app loaded that can obtain the Knox license and do the necessary ADB commands at the appropriate times.
  • 10
    Hello i was have issue with my deivce and i searched a lot to solve it on internet some of people just sold their phone to this problem and some replace the motherboard
    Finally i was able to solve it the problem is that you have kg state locked and when you try to flash any file it give this message: all binaries are not allowed to be flashed due to kg locked even you can't flash stock rom like image

    51573677-779957445692252-369314170379698176-n.jpg


    requirement :
    1- usb cable
    2- pit file for your deivce
    3- combination rom for you device

    So How to solve :
    1- get pit file for your device
    2- open odin go to pit tab and and select pit file
    3- go to options tab and uncheck auto reboot
    4- press start when finish go to recovery this is important
    5- in recovery menu select reboot to bootloader
    6- flash combination rom
    7- go to settings check oem options from developer options
    8- enjoy your problem is solved :fingers-crossed:

    Don't Forget to hit thanks :p ;)
    9
    Managed other way to bypass kg lock inside locked system by using 'CCSWE app manager' Lycan mod.
    This app allows to disable certain services inside the app without disabling the app itself.

    i tested it on: Android 12
    Security Patch Level: 1may 2022

    ✅ Advantages of Lycan Bypass Method:
    •Modified systemui app still appears enabled
    [kg security shouldn't reinstall app after reboot]
    •screenshots works
    •screen recording works
    •screen cast/mirroring working,
    •bluetooth devices battery info, etc.
    •Wallpapers/themes
    •notifications
    •Android auto
    •Google & Samsung Accounts are OK to use.

    ❌Not working:
    •Nav bar
    •status bar
    •volume bar
    •AOD-always ON Display
    •screen lock (pattern, pin, fingerprint, face recognition)
    ❗Do not use build-in system Lock screen, its broken because of bypass method, otherwise system will stuck in startup screen.
    ☆Needed to install an alternative apps for missing Interface.
    ●install 'Alliance Shield X' Using Qr Code in Qr Setup Wizard.

    ●Get the 'Splashtop Add-on' & 'Lycan app manager'.
    ☆Optional
    Open phone browser
    (thru Aliance Shield X, or "Accesibility Trick")
    Type shortened xda link: t.ly-SQT and download 'Splashtop Add-on' & 'Lycan app manager' from "Download" tab directly to your phone storage.

    ●install 'Splashtop Add-on'.

    ●run Splashtop Add-on and grant 'knox permissions' only, and leave. (internet Connection needed)

    ●Disable 'klms agent' (com.samsung.klmsagent) thru Alliance Shield X app.

    ●Uninstall Splashtop Add-on.

    ●Install 'Lycan Ccswe App Manager', grant device admin permissions.

    ●Find on the Lycan app Manager List:
    'systemUi' app (com.android.systemui)

    ●Inside System Ui, open 'services' tab and find:
    'KeyguardService' - Disable it.
    'SystemUiService' - Disable it.

    ●Reboot Your phone, using Power button.

    ●Finish Setup Wizard.

    ●Install missing Interface Apps (posted an example interface apps below).
    ●Get Acces to ADB

    ●Install Splashtop Add-on
    adb install -r --user 0 "C:\ADB Folder\Splashtop.apk" *write your "path and apk name", if apk is placed in Adb folder, path isn't needed.

    ●Start Splashtop Add-on
    adb shell am start -n com.splashtop.streamer.addon.knox/.ConfigActivity
    •grant 'knox permissions' only, and leave. (internet Connection needed)

    ●Disable KLMS Agent
    adb shell pm disable-user --user 0 com.samsung.klmsagent

    ●Uninstall Splashtop Add-on
    adb shell pm uninstall --user 0 com.splashtop.streamer.addon.knox

    ●Install LYCAN ccswe app manager
    adb install -r --user 0 "C:\ADB Folder\Lycan.apk" *write your "path and apk name", if apk is placed in Adb folder, path isn't needed.

    ●Start LYCAN app manager
    adb shell am start -n com.splashtop.streamer.addon.knox/com.ccswe.appmanager.activities.StartupActivity
    •grant device admin permissions.

    ●Find on the Lycan app Manager List:
    'systemUi' app (com.android.systemui)

    ●Inside System Ui, open 'services' tab and find:
    'KeyguardService' - Disable it.
    'SystemUiService' - Disable it.

    ●Reboot Your phone, using Power button.

    ●Finish Setup Wizard.

    ●Install missing Interface Apps (posted an example interface apps below).
    •install app 'Alliance Shield X' Using Qr Code in QR Setup Wizard.
    •disable 'systemUi'(com.android.systemui) thru 'Aliance Shield X'.
    •Reboot Your phone.
    •Finish Setup Wizard.
    •Install missing Interface Apps (posted an example interface apps below).
    ☆You can uninstall 'Alliance Shield X' after everything is completed (deactivate device owner & device administrator in app settings)
    ☆Do not uninstall 'Lycan Ccswe App Manager', Risk of Kg reLock.
    ☆it's not an unlock, it's a BYPASS.
    ☆After Wipe Data/Factory reset everything goes back to stock setting, so reLock as well.








    iphone look screen lock, stronger protection, pin security
    thanks for @NoltsTechs

    3Button navigation bar

    Gesture navigation bar
    +
    ☆You can create 'recent apps' button in your 'Navigation bar' app selecting 'Shortcut maker' as 'shortcut' button.
    •that will open 'Shortcut Maker' app, so choose 'activities' option in it.
    •Search there for: 'One UI Home' app.
    •Select first action:
    'com.android.quickstep.RecentsActivity'
    •create shortcut(you can customize it)
    ☆'shortcut' button may be a premium/paid option in some 'navigation bar' Apps.
    ☆ ''Accesibility trick''
    When phone is offline, tap 'accesibility button' on setup wizard screen.
    Go to: 'installed apps' -> 'Live Transcribe' app -> 'open Live Transcribe' -> Open Settings -> tap 'back button' in the upper corner -> 'Phone Settings Page' -> open 'Apps' page -> run app you need.

    ☆if you need nav buttons during the installation, go to 'settings' -> 'accesibility' -> 'interaction and dexterity' -> turn on 'assistant menu'.

    ☆App Links:
    -Alliance Shield X in Play Store
    -Aliance shield X Free Registration link.
    -Splashtop Add-on in Play Store.
    -SamFw Tool - for pc, to acces locked ADB, etc.
    -Minimal ADB and Fastboot Tool for pc, classic adb command prompt.
    -Adb App Control - for pc, with pretty nice interfece that allow to enable/disable/install/uninstall apps thru Adb.
    -Uninstaller - helpful in removing the splashtop add-on app in some cases. thanks to @fitrockx
    -NotifiCon - notification sound manager app, fixes missing nottifications sound, thanks to coolpix4
    -Net Guard to block app from the internet access.

    ☆Optional:
    Disable those Apps after Kg Lock bypass to:

    ●Unlock Adb/Mtp or Phone Calling:
    -'Device Services' (com.samsung.android.kgclient)
    -'Knox Enrolment Service' (com.sec.enterprise.knox.cloudmdm.smdms)

    ●Disable Android Firmware Updates/Notifications:
    -'Software Update'¹ (com.sec.android.soagent)
    -'Software Update'² (com.wssyncmldm)

    You can try to disable them thru 'Lycan ccswe app manager' or Alliance shield x'.

    If you cant disable them thru phone app, you can download SamFw Tool for pc and use 'disable knox' option, that should disable all knox apps (incuding 'Device Services' & 'Knox Enrolment Service').
    Or You can use Adb 'disable' commands(if You have adb acces)

    To acces adb you need to enable 'adb debug' option in phone settings developer options.
    Or if you cant do this, tap 'Phone' app and type *#0*# when using SamFw Tool, to unlock adb.

    ☆Optional Adb commands:
    Open Android Settings
    adb shell am start com.android.settings

    Disable Device Services
    adb shell pm disable-user --user 0 com.samsung.android.kgclient

    Disable Knox Enrolment Service
    adb shell pm disable-user --user 0 com.sec.enterprise.knox.cloudmdm.smdms

    Disable Software Update¹
    adb shell pm disable-user --user 0 com.sec.android.soagent

    Disable Software Update²
    adb shell pm disable-user --user 0 com.wssyncmldm

    ❗️if You Locked Your screen by Build-in System Screen Lock (even when I wrote NOT TO DO IT...) You can unlock it thru adb(if You have adb acces):
    adb shell locksettings clear --old 1234
    If it's a pattern, dots are numbers:
    1● 2● 3●
    4● 5● 6●
    7● 8● 9●
    4
    Some people used bypass with the latest firmwares, so probably it can be done.
    Just im not sure if software update triggers kg lock again or not.
    I haven't tried because i don't have a time to play with the phone right now in case it reLock phone again.

    Ps. I will update the bypass steps with stock interface working, but maybe next month, when I find some time for it.
    I already did it a few months ago, but i caught reLock few times so I just need to refine it.
    4
    I felt that they might release an security update for May that will screw up everything.

    Btw. Knox enrolment,
    I don't remember why I decided to block the 'knox enrolment' app, probably because of the first guides about kg bypass that i found on YT.
    But to be honest, now i have 'knox enrolment' app enabled (other knox apps as well) and nothing happens.

    To prevent KG Locking acces to adb/mtp (not sure about phone calls) i disabled just one function in 'Device Services' (com.samsung.android.KgClient)
    -Receivers: 'systemIntentReceiver'

    When i triggered KG Lock by enabling systemui services back, phone still have access to adb.
    Actually enabling knox apps fixed my problem with acces to permissions in apps like location,storage,camera, etc. so maybe it will be helpful in fixing other isues.

    View attachment 5903151
    Can you capture your device, which apps did you disabled / uninstalled please !?
    How can I enable Device services with only SystemIntentReceiver blocked? Manually enable/disable one by one thru Lycan app ?
    Other system interface app such as status bar, lockscreen, .... Can be used after that ?

    For thoes who missing notification sound for apps
    => Please, install this below app then enable it solved
    3
    I felt that they might release an security update for May that will screw up everything.

    Btw. Knox enrolment,
    I don't remember why I decided to block the 'knox enrolment' app, probably because of the first guides about kg bypass that i found on YT.
    But to be honest, now i have 'knox enrolment' app enabled (other knox apps as well) and nothing happens.

    To prevent KG Locking acces to adb/mtp (not sure about phone calls) i disabled just one function in 'Device Services' (com.samsung.android.KgClient)
    -Receivers: 'systemIntentReceiver'

    When i triggered KG Lock by enabling systemui services back, phone still have access to adb.
    Actually enabling knox apps fixed my problem with acces to permissions in apps like location,storage,camera, etc. so maybe it will be helpful in fixing other isues.

    Screenshot_20230503-190452_CCSWE App Manager.jpg