Hi,

I have a problem with managing my Samsung Galaxy Tab S10  FE+ tablets on a fully isolated network. Following instructions, i could Enroll and manage my devices on my devices. The problem is that after Enrolling the device, everything is normal, and Profiles and restrictions are applied (for example restricting use of Camera, etc.). after i restart the device, it looks like Knox Permissions are revoked and i can't apply new policies or edit current policies. in addition to that when i try to Dissociate a policy, after Synchronization, the policy is removed from Device on MDM Web Console but the policies are still active on the device itself. 

here are my questions:

1) If Knox-related restrictions need a Knox Enterprise license then how are they being applied in the first place?

2) if MDM can restrict the device using Knox, then why can't it do that after a restart?

I'd like an urgent solution to my problem considering i can't set-up a free Entreprise setup from Knox Central Portal (because i can't let out my company info) and i can't use google related services. Is there a way to restrict my Samsung device using Android and not Knox?

I also attached my Agent Log. There you can see that the device got the profile the first time, and after a restart, Permission problems are appeared.

I setup my MDM Server for air-gapped Network:

ME MDM App Settings:

Communication Type: Periodic

Download MDM App from: Corporate Network (which led to download a 20MB Agent from servers and are now available for offline use).

How i enroll my devices:

1) Factory Reset my device.

2) install the agent using ADB (i found and installed the same agent downloaded from the Site Server while other versions like the one introduced in  Android Agent APK require Knox activation and will get stuck on ELM Activation).

3) Enroll my device using QR Enrollment.

4) Install apps and apply policies on device.

My Build version is: 11.2.2605.20

Thanks in advance.