Assuming that no unauthorized Wifi configurations have ever been MANUALLY input on the devices of interest by any means after enrollment to AE work managed mode, you can then first add one single Wifi profile payload with the only Wifi SSID configurations (and password, certificate, etc. appropriate to the Wifi mode selected).  Then set the "Wifi Management" connectivity option of the feature-control profile payload to "none". 

Hi Dragomir,

Thank you for posting on SOTI Pulse!

I see that you have marked Raymond's answer as solution. Thank you so much for that! If you require any more assistance, please feel free to let us know.

Kind regards,

Technical Support Specialist | SOTI | +1 905.624.9828 | SOTI.net l Discussion Forum | Log a Case Online l Facebook l LinkedIn l Twitter