Disable MDM Un-Enrollment


#1

Morning all,

I am wanting to the pick the brains and discover strategies that have been implemented to stop users from un-enrolling their mobile device from the MDM and this includes being able to remove the MDM profile itself EXAMPLE:- iOS=Settings -> General -> MDM


#2

Hi EMMJunkie,

You want to use DEP to supervise your devices and lock the MDM profile removal.

It would also be good practice to block device erasure via a Restrictions profile, although if setup with agent-less enrolment during first boot (or after wiping) the end user would be forced to re-enrol into their MDM.

Resources

Also search for “supervised” here to see other profile options only available on supervised devices.