This capability is limited only to Samsung enrollments with a fully managed device profile.

Please navigate to the following profile options to configure this setting:

1. Go to Profile > Click on the Profile Name for the one you want to modify > Select Modify Policy
2. Select Samsung Knox
3. Select System
4. Navigate to OTA upgrade
5. Select Disallow in the drop-down menu
6. Select Save & Assign