Profile Manager and Remote Management

I manage to enroll all non DEP resellers iPads to ASM using AC 2.5.

i am not using any third party MDM solution i only using profile manager to manage 350 over ipads in school .

i still having issues to lock Remote Management profile in Device management.

any one (students ) can remove the profile in anytime.

any solution how to lock the DEP profile in Profile manager.