How do we prevent users from resetting supervised devices?

Question

Level 1

4 points

How do we prevent users from resetting supervised devices?

Our organization has a fleet of iPhones, and I'm required to supervise them so that we may unlock and wipe them in the future as some of our members leave the organization without a chance to be present for their credentials when its time to wipe or reset their devices.

One thing I'd realized, however, was that supervising phones using Apple Configurator 2, doesn't prevent users from resetting the phones to factory defaults. And it doesn't even reset it to a supervised mode, it's a fresh and clean reset.

Is there a way to prevent this?

Posted on Feb 17, 2017 10:09 AM

Reply

Answer 1

Feb 17, 2017 2:30 PM in response to TK_Bane

There is actually a setting in Apple Configurator 2 to block access to the RESET feature on a managed phone.

Go into the profile, on the general set to NEVER automatically remove the profile.

on Restrictions remove the checkmark for allowing access to reset the phone. (I am not at the configurator now and cannot remember the feature name)

Reply