What policy do I use to block users from adding additional accounts on the device?


Samsung devices


You want to block adding accounts to the device, either in the Knox Workspace container or to the personal space.

Knox Workspace container:
You can block adding accounts from Mobile Device Policies > Samsung Knox Workspace Settings > Container Settings > Container Account Settings > Accounts in blocklist.  Wildcards can be used to block the creation of every account type.

Add the account you want to use to the allowlist, so that it is not be blocked.

Personal space:
You cannot block adding accounts to the personal space as per current design.