We're looking at rolling out 100+ android devices and would like to lock them down to managed profiles. This is mainly to prevent excessive data usage (youtube and the like) - Android for work allows us to whitelist apps, set policy etc; but this is in addition to the standard user account.
This is cost sensitive, so is there a solution out there that will allow us to lock the phone down to only the managed work profile so that additional applications cannot be installed?