Remote administration - prevent profile removal

Hi @All 

I noticed that our iPhone users can simply remove the DEP profile on the device using the device code.
So the whole administration is of course useless. Have I missed a step ?

  • Hi  

    You can reset Apple DEP information stored in Sophos Mobile. Please check this link for more information and see if it helps. 

  • In reply to Shweta:

    Thank you for your response @Shweta but that did not helped at all ! How can I make it impossible for the Users to leave the remote management. The reason behind the deployment of such services is to be able to have a certain control over the appliances right? Why should the Users have the opportunity  to leave ? Can I disable this option ?


    Best Regards


  • In reply to dazor:


    You can only protect configuration profiles with a password. Unfortunately, there is no way to apply this protection to the MDM enrollment profile (bootstrap). It is due to a limitation of the MDM protocol by Apple.