We're looking to manage some Samsung Galaxy Tab 4 devices. These are Samsung SAFE/KNOX devices, it works great to install/uninstall apps remote and also the possibility to restrict the device is good.

But when you set the option to " Modify Devices default Settings" in the profile restrctions to "Allow", then it's possible to add another user on the tablet with full user privileges (except for device settings, like Bluetooth orwifi). We would like to use these Samsung Tablet as a kiosk-like-mode and a little local manage to set their own Wifi settings. But we won't have the remote site have the ability to add a new admin user on the device.

Is there an solution for this, or maybe a work around? Yes; the other option is to restrict the " Modify Devices default Settings"-setting, but then it's not possible to change the wifi settings; which they need to communicate with MDM.