Hi Mitch
When you get to this level of precise configuration requirements for hardware, the Android policy usually doesn't have the power to configure all device types.
In this case you need to use OEMConfig which is the Android Enterprise solution for device hardware configuration based on manufacturer.
By installing the Samsung KNOX Service Plugin app, on the devices, along with OEM Config parameters, you should be able to fix this.
Have a look at this doc and tell me if you need more information.
https://www.ibm.com/docs/en/maas360?topic=security-using-oemconfig-apps-apply-advanced-device-configuration-policies-in-maas360
------------------------------
Eamonn O'Mahony
Technical Client Success Manager
IBM Security
Dublin, Ireland
------------------------------