On Monday, August 12, 2019, important changes are coming to the way Systems Manager manages Apple's Activation Lock feature. These changes affect the default enrollment behavior on supervised Apple iOS devices only. After enrolling a supervised iOS device:
- Systems Manager will by default prevent devices from enabling Activation Lock when end users activate Find My iPhone/iPad. If a user activates Find my iPhone/iPad on a newly enrolled supervised device, the device should not prompt for a user's Apple ID credentials or a bypass code when it is factory reset.
- Systems Manager will no longer enable MDM Activation Lock by default when enrolling using Apple's Device Enrollment Program. A newly DEP-enrolled device should not prompt for an administrator's managed Apple ID credentials or a bypass code when it is factory reset.
After August 12, Dashboard administrators will also have the ability to manage the default behavior to enable MDM Activation Lock and/or allow Find My iPhone/iPad Activation Lock independently.
To maintain the existing behavior of enabling Activation Lock by default, create a "Privacy and Lock" configuration profile and enable the "Allow Activation Lock" option before August 12.
