Hello,
How can I make it so employees cannot delete the MDM profile and wipe their phones. I see in privacy & lock there is allow activation lock and allow MDM lock. I have checked them but when testing on my phone I can still erase my phone and remove the management profile. On some devices profiles, In MDM commands there is Activation Lock with enable/clear activation lock then show bypass code. On other device profiles this does not show up.
There have been some employees leaving the company and whipping there phones without giving us their icloud password, bricking the phones until Apple unlocks them. This is a big inconvenience.
