You should be able to enroll and manage them with Android+ (Device Administrator) and use the Lockdown option there. 

I enrolled one using the same rule as for my Galaxy Tab Active2 tablets but no profiles (Enterprise) are applied. I'm surely doing something wrong.

Have you successfully enrolled any device(s) of other brand/model as Android-Enterprise device on the same server?  If you haven't even tried, please do so and see if you encounter the same problem.

Yes, I have 120 Galaxy Tab Active2 working for a couple of years now. I think I understood what you said now. I have to create an Android Plus type profile rather than use the existing Android Enterprise - Work Managed Device type profile.

All I'm need now in an activation code from SOTI to enrol the devices.

Hello Vitor,

Thank you for your response, if this post has helped you in solving your inquiry, I would request you to mark the particular comment as "is solution", so others may benefit from this information.

Regards,

I wonder why his device (attached picture) shows it as device controlled by Organisation where as he enrolled it as Android Plus and pushed android push profile . Isn't it DA enrollment as per OP's description ?.