We’re moving company-owned iPhones from another MDM to Hexnode using Apple Business. The devices are assigned to the Hexnode MDM server, then unenrolled from the old MDM, and enrolled into Hexnode using an email invitation with directory authentication.
The issue is that users can still remove the MDM profile from the iPhone, even though our Automated Device Enrollment profiles have “Allow MDM profile removal” unchecked. These devices need to be supervised, and we expected the Apple Business reassignment to apply the ADE restrictions without wiping the device.
Does a direct MDM server change in Apple Business still require a factory reset for supervision and non-removable MDM profile settings to take effect?