Home

iOS Prevent Reset / Profile Removal

%3CLINGO-SUB%20id%3D%22lingo-sub-915999%22%20slang%3D%22en-US%22%3EiOS%20Prevent%20Reset%20%2F%20Profile%20Removal%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-915999%22%20slang%3D%22en-US%22%3EHi%20All%3CBR%20%2F%3EI%20hope%20you%20are%20all%20well.%3CBR%20%2F%3EAnyway%2C%20just%20to%20confirm%2C%20can%20the%20following%20be%20implemented%20on%20iOS%20%2F%20DEP%20%2F%20Apple%20Configurator%3A%3CBR%20%2F%3E%3CBR%20%2F%3EPrevent%20management%20profile%20removal%3CBR%20%2F%3EPrevent%20factory%20reset%3CBR%20%2F%3EInfo%20appreciated%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-915999%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Frequent Contributor
Hi All
I hope you are all well.
Anyway, just to confirm, can the following be implemented on iOS / DEP / Apple Configurator:

Prevent management profile removal
Prevent factory reset
Info appreciated
5 Replies
Highlighted

@Stuart King  Yes, to prevent the removal of the MDM profile ensure that Locked Enrollment is enabled for the enrollment profile you create for your DEP devices in Intune. The erase all content and settings option on the device can be blocked in the General section of an iOS restrictions profile (requires supervised iOS devices).

Highlighted

@eglockling 

 

Superb, thanks, and what about Location Services? Can the users be prevented from turning this OFF?

 

Info appreciated

Highlighted

@Stuart King  Not to my knowledge.

Highlighted
Hmmm, not the answer I was expecting.

Scenario I seen lately:

Phone is managed, user turns location services off, user then reports phone lost and gets irrate when IT can't locate it.

So, I guess the question is, what can be done, especially via DEP / Configurator to ensure that the phone can always be located?

Info appreciated
Highlighted

@Stuart King  This setting cannot be managed by an MDM. Apple has not made it available.