Lock down Sophos Mobile Control app

Question

Hi, is there away i can lock the app down on apple iOS as a user took a phone to test and removed the sophos mobile control app so it lost its manageability. 
 Looked into restrictions etc but i cant see anything.

Andrew Mullins · Answer

you can disable unenroll via app but user can still delete the app, however this does not unenrol the device. the device profile installed at the time of onboarding will remain after the app is deleted maintaining manageability. only when this profile is removed is the device unenrolled from the server. 
 
 if you enrol the devices using DEP then you can restrict anyone from removing the management profile, but also make sure you disable factory reset. 
 
 there is no way to stop people from deleting the only the SMC app, you can restrict people from deleting any apps but you cant specifically target the SMC app alone.