iOS Device gets registered but Retirement keeps access, nothing is sandboxed.

Hi Ryan_Ternier 

On IOS you are not getting the same look and feel as on android with work folders(Sandbox). if you want something like that you can create a folder and push all apps in that specific folder, its not possible to get the little icon on the app.

As of the problem with retire, most of the time its because the devices is not good registered yet, can you try to wait a couple of hours? Also its normal that when you retire a device the apps are not wiped. The thing with the removal of the app its only working when the users is not longer in the group.

About the terms and conditions, you can set it up see : https://docs.microsoft.com/en-us/intune/enrollment/terms-and-conditions-create

Let me know if you have any further questions.