I'm in a similar situation as OP. We've used device Admin for almost 2 years now as we encourage a work/life balance so your work phone is yours to use as you like. We have one additional wrinkle ...
See more...
I'm in a similar situation as OP. We've used device Admin for almost 2 years now as we encourage a work/life balance so your work phone is yours to use as you like. We have one additional wrinkle in that when travelling to the US, due to FIPA, we have to remove all work materials from the device. No problem under device admin, people just un-enroll and then re-enroll. This is not so easy under AE running a work managed device as an unenroll is a full factory wipe, pictures, SMS, all gone. A work profile is not sufficient for our security requirements either. Was thinking of using maybe a smartgroup to remove the corp email when the device is roaming, but that feels flimsy.