I'd just like to point out this is a very poor implementation of a feature.   Where is the ability to not enable activation lock by default?   Where do you specify which AppleID gets used for the activation lock?   When a device is factory reset without clearing the activation lock, the MDM profile does not push until the lock is cleared. Meaning there is no option to view a bypass code in Meraki for that device any longer, making the bypass code field pointless.   This has somehow defaulted to using the Apple ID for our DEP master account, which I can not give out the password for in these cases, and there appears to be no option in Meraki to set the activation lock account to a different Apple ID.   I really expect this kind of overzealous security f*** up from Apple direct, but am pretty disappointed to see it coming from Meraki this time. ... View more