Unable to enroll device in a UEM

Environment

• Knox Guard
• Galaxy S25 devices and newer
• Android Enterprise

Overview

When enrolling a device into a UEM, you may encounter an issue where the enrollment fails with one of the following errors:

Work profile provisioning blocked

You can’t create or add work profiles to this device. Please contact customer name to use work profiles.

If the customer name isn’t available, the follow error is displayed instead:

Work profile provisioning blocked

You can’t create or add work profiles to this device.

Cause

Devices enrolled in a financing program using Knox Guard restrict Android Enterprise provisioning by default, and require consent from the financing program operator to proceed.

To check if Knox Guard is enrolled on your device:

1. On your device, tap Settings > About phone > Status information > Device Services.
2. Check if Knox Guard is enabled.

Resolution

To resolve the issue, please contact the customer mentioned in the error. If the customer name isn’t available, contact knoxguard@samsung.com.