Morning all,
I am wanting to the pick the brains and discover strategies that have been implemented to stop users from un-enrolling their mobile device from the MDM and this includes being able to remove the MDM profile itself EXAMPLE:- iOS=Settings -> General -> MDM
Hi EMMJunkie,
You want to use DEP to supervise your devices and lock the MDM profile removal.
It would also be good practice to block device erasure via a Restrictions profile, although if setup with agent-less enrolment during first boot (or after wiping) the end user would be forced to re-enrol into their MDM.
Resources
Also search for “supervised” here to see other profile options only available on supervised devices.
You can use iActivate Software to disable MDM Enrollment on corporate iPad or iPhone