Walk into most UK businesses and you won't find a single-brand mobile fleet.
Samsung Galaxy phones for most of the team. A few rugged devices from another manufacturer out in the warehouse. Android tablets left over from an older project. A handful of iPhones in the leadership team.
It's completely normal. It can also feel like four different problems to manage.
The good news is that Samsung Knox can look after far more of that mix than most people expect, and Android Enterprise ties the rest together.
Does Knox Only Work on Samsung?
No, and it surprises a lot of people.
Knox Manage, Samsung's cloud device management platform, supports other Android devices alongside Samsung. It also manages iPhones, iPads, Macs, Windows PCs, Wear OS watches and Chromebooks. Samsung confirms this in its own Knox Manage documentation.
Non-Samsung Android devices are managed through Google's Android Enterprise framework. Samsung devices get the same Android Enterprise management, plus the extra hardware-backed security and controls that only Knox can give.
One console. One set of policies. One support process for the whole fleet.
With Samsung devices getting the deepest level of control.
What Actually Manages Your Android Devices?
There are three layers, and they're often confused. It helps to pull them apart.
Android Enterprise is Google's management framework, built into modern Android. It decides how a device is enrolled, either as a company-owned device or as a personal device with a separate work profile, and which policies a device management platform can apply. Every certified Android manufacturer supports it.
Knox Platform for Enterprise sits on top of Android Enterprise, on Samsung devices only. It adds a much bigger set of policies, from finer control of hardware and network settings to stronger audit logging. Samsung now makes the Premium licence free, activated through your device management platform.
Knox Manage is the console that applies those policies, and it's part of Samsung's Knox Suite. It isn't the only option. Microsoft Intune and other platforms can use Android Enterprise and Knox Platform for Enterprise too, so choosing Knox doesn't lock you into one console.
How Do Devices Get Enrolled Without IT Touching Them?
This is where most of the time and cost savings sit. There are two routes, and the right one depends on the device.
Knox Mobile Enrollment is Samsung's own zero-touch service. Devices bought through an authorised Samsung partner are registered to your account, so they enrol themselves the first time they're switched on. If a device is factory reset, it re-enrols automatically. It can carry Wi-Fi details and it supports personal devices with a work profile. Some of the more advanced options need a Knox Suite licence.
Android zero-touch enrolment is Google's equivalent. It works across manufacturers, including Samsung devices running Android 9 or later, and suits businesses that want one enrolment method for every brand. It only covers company-owned devices.
Our advice is simple. Use Knox Mobile Enrollment for Samsung devices, because it gives you more control and survives a factory reset. Use zero-touch for devices from other manufacturers. And don't configure both on the same Samsung device, as Samsung doesn't support it.
What Extra Do You Get on Samsung?
Managing a mixed fleet through one console doesn't mean every device behaves the same.
Samsung devices add hardware-backed protection, including Knox Vault on recent Galaxy models. They re-enrol automatically after a reset. They let you decide when firmware and operating system updates land, through Knox E-FOTA. And they carry the full policy set from Knox Platform for Enterprise.
Other Android devices get what Android Enterprise allows. That still covers the essentials. Passcodes, encryption, app control, Wi-Fi and remote wipe.
Where Should You Start With a Mixed Fleet?
Not with a big switch. In our experience, the businesses that get this right take it in stages.
- Map the estate. List every device by manufacturer, model, age and owner. Most fleets turn out to be mostly one brand, with a handful of exceptions.
- Choose one console. Knox Manage, Intune or another Android Enterprise platform, based on what you already license and who supports it.
- Standardise enrolment. Knox Mobile Enrollment for Samsung, zero-touch for other Android devices and Apple Business Manager for iPhones.
- Set one baseline policy that every device meets, then add Samsung-only policies where they genuinely add value.
- Plan the refresh. As older non-Samsung devices reach the end of their life, replace them with Samsung models so more of the fleet gets full Knox protection.
This is exactly the ground an RVT360 Discovery covers. Security asks whether every device is properly controlled, protected and patched. Productivity asks whether people have what they need to do their best work. In 30 minutes we look at what you have, how it's managed and where the gaps are, before we recommend anything.
Why Does One Fleet Matter?
Because a fleet managed through one console, with one baseline policy, is easier to secure, quicker to roll out and cheaper to support.
A lost phone can be locked and wiped in minutes. A new starter gets a ready-to-use device on their first day. And IT stops running a separate process for every brand.
Knox gives you the deepest control on Galaxy devices. Through Android Enterprise, it brings the rest of your Android fleet under the same roof.
One fleet. One console. Fewer surprises.
If you'd like to go deeper on Knox itself, including Intune, BYOD and costs, our guide How to Deploy Samsung Knox for Enterprise takes you through it step by step. For smaller businesses, Mobile Device Management for UK Small and Medium Businesses looks at the wider choices.
Not sure what's in your fleet today? Book a free 30-minute RVT360 Discovery at rvt.tech/rvt360 and we'll help you find out.