I'd just like to point out this is a very poor implementation of a feature. Where is the ability to not enable activation lock by default? Where do you specify which AppleID gets used for the activation lock? When a device is factory reset without clearing the activation lock, the MDM profile does not push until the lock is cleared. Meaning there is no option to view a bypass code in Meraki for that device any longer, making the bypass code field pointless. This has somehow defaulted to using the Apple ID for our DEP master account, which I can not give out the password for in these cases, and there appears to be no option in Meraki to set the activation lock account to a different Apple ID. I really expect this kind of overzealous security f*** up from Apple direct, but am pretty disappointed to see it coming from Meraki this time.
... View more