If "Allow other device administration apps" policy is not selected, activation will fail on Knox enrollment devices.

More...