Have you checked your IT policy? When you re-send the IT policy, is it applied succesfully?
Take one of the devices and try to re-provision it and test it out if that works.
In extreme cases, I have seen my IT policy get corrupt. Good thing it is documented so when creating a new one, the settings are easy to apply.