The client which I am supporting only has device admin type enrollment enabled for Android devices. We have recently modified the default device restriction policy and updated the Android device admin manufacturer as 'Samsung' which will allow only Samsung device to be enrolled on Intune. This policy has already been assigned to "All users" group. However, I could see one of the Google pixel 6 got enrolled to Intune post this implementation. FYI, we have blocked the device manufactures in the below provided format in the restriction policy. Hope someone will hear me and help me out. We have tried to remove the spaces after the commas but it seems to be the the default spacing convention(Comma followed by space).