Hi everyone. I am running into a confusing issue with a few Samsung S23 devices enrolled via Hexnode for Work (Profile Owner mode). While hundreds of our other devices are working perfectly, one affected user cannot download work apps from the managed Google Play Store. It throws a permission error saying, “your administrator has not given access to this item.” The strange part is that we do not have any Android restrictions configured in our policies.
Additionally, this same user is stuck with Okta Device Trust showing as inactive. We have set up Okta Verify inside the work profile multiple times, but the user still cannot access work apps like Outlook and Teams. The Hexnode for Work app doesn’t show a “Setup Work Account” option either; it just opens to the normal home screen.
We’ve already tried opening the work Play Store to refresh it, manually syncing the work account in device settings, checking the Samsung battery optimization settings, and setting up Okta Verify again—but nothing is working, and the user is completely blocked. I’m really not sure what’s causing this underlying issue. At this point, would disenrolling and re-enrolling the device be the best way to clear this up?