SkieCan students create a work profile on a managed tablet?
No. Skie blocks creating a work profile with Android's add-managed-profile restriction, and it is on by default. A work profile is a separate space with its own apps and accounts, so keeping it out means all activity happens in the one space that your policy governs.
A work profile is an Android feature that places a second, separate set of apps on a device, marked with a briefcase badge. It was built for companies, and it is useful there. On a school tablet, someone could install a profile manager app and create a space where chosen apps run, away from the main one.
Skie sets the DISALLOW_ADD_MANAGED_PROFILE restriction as the device owner. Android then refuses to create a managed profile, whether the request comes from Settings or from an app that tries to set one up. The protection is default on and appears under the hardening section as its own switch for work profiles.
It sits next to two newer switches that cover Android's other profile types. Clone profiles arrive in Android 14 and private spaces in Android 15, and each has its own entry. Skie enforces whichever applies to the device's version, so one policy covers a mixed fleet of Android 12 and newer tablets.
What the admin sees is a single state per device, read back from Android after each apply and rolled into the compliance score. If you ever need to see a profile switch, the effective policy view shows what the device ends up with after all levels combine.
Practical tip: if your organisation uses its own work profile setup for staff, talk to Skie before enabling it on a group. The default is designed for student and hostel devices.