Google is finally supporting Samsung devices through Android Zero Touch. In this case go away from Knox Mobile Enrollment and set up with Android Zero Touch.   https://documentation.meraki.com/SM/Device_Enrollment/Android_Zero-Touch_Enrollment   I don't think Meraki will put any more effort in this, because you can set up the whole Android Enrollment through Android Zero Touch regardless the manufacturer   I tried different ways with KME and SM, but I keep stucking on the Enrollment Code. It wants me every time to put it in manually.   Best regards ... View more

Thank you.  Yes it does prevent creating new users. but it also prevent creating sync accounts so it's not very granular.   Also the Samsung Tab E has a built in guest account out of the box.  You are still able to switch over to the guest and back to the regular profile.   BUT They just pushed out Android 7.1.1 update from our carrier.  In the previous android 6.0.1 you could not remove or disable the guest account.  In the new Android you can remove the Guest and once removed the device owner restriction now prevents you from enabling the guest account again.  So a combination of this restriction and the upgrade to Android 7.1.1 and manual removal of guest does prevent additional user profiles.  Unfortunately it does appear you must manually remove the guest user on each device.   ... View more

Have you considered getting 4G tablets - so that users ever need to change any settings? ... View more