I have Galaxy Tab A7 enrolled using Samsung Knox and I created an OEM customization profile for Samsung Knox and deployed it. I was able to lockdown all the settings, but I haven't been able to selectively allow things, like if I want them to be able to turn blue tooth on and off, or sound on and off. Right now it just says everything is locked down. What am I missing where?