I have a device supported by Android for Work (Samsung Note 4, Android 6.0.1) but the security policy will not install saying "there is a custom OS installed". Device security status is "Official", but the KNOX counter is on 0x1. From what I can see, the bootloader and firmware are all official, standard region and non-rooted.
Is there any way I can create a security profile that will still work with a 0x1 KNOX counter? What is the relation of KNOX with Android for Work?