We were enrolling devices in Device Owner Mode option A (When prompted for a Google account during device setup, enter afw#meraki. This will automatically install the SM app.) And we encountered this issue described here. We were unable to deploy any apps on the managed phones due to that.   After several attempts, we tried enrolling devices using Device Owner mode option B (In the device's setup wizard, tap the screen 6 times then scan this QR code. The SM app will be auto-installed and auto-enroll the device in the default Network.) and this worked for us.   The issue seems to be related to the version of Play services on newer phones. ... View more

We are the same issue here. I have most of my apps set to NOT install automatically. Yet most of them do install with a new device setup. I just encountered this on a Samsung S9. ... View more

Check out this note from our AfW Deployment Guide - it would appear to be a mandatory step in AfW enrollment:   "Google requires that Android 5.0+ devices be encrypted when using AfW. This is important for both general device security as well as application specific data security. "   Source - https://documentation.meraki.com/SM/Deployment_Guides/Android_Enterprise_Deployment_Guide_(Android_for_Work)       ... View more