Activation Lock shows as disabled in Hexnode even though Find My is onSolved

I think its due to a restriction on the device, I remember seeing an option for activation lock under restriction policy. You can try that.

Hello @im_dany , 

The “Disabled” status in this scenario might be due to the fact that Hexnode UEM has not yet escrowed the Activation Lock Bypass Code for those devices. In Hexnode UEM, the portal status will only be displayed as “Enabled” once the server successfully captures this bypass key from Apple. 

To fix this and trigger the escrow process, navigate to Policies > iOS > Advanced Restrictions > Allow Security and Privacy Settings, check the box to enable Activation Lock, and associate the policy to your devices. Once the configuration lands, the end-users must briefly toggle Find My “OFF” and then “ON” again directly in their iPhone settings to force a fresh handshake with Apple’s servers, which allows Hexnode to fetch the code and update your portal status. 

Regards, 
Simon Scott 
Hexnode UEM 

Okay, but what happens if one of these employees leaves the company and the phone gets stuck on the Activation Lock screen?

If the device has been reset and is locked by a personal account, you have two options to regain access using the escrowed information:

• The Remote Command: If the iPhone is turned on and connected to a Wi-Fi or cellular network on the activation lock screen, go to Manage > [select the device] > Actions > Security > Clear activation lock. Hexnode UEM will signal Apple’s servers to release the hardware lock.
• The Manual Bypass Code: If the device is offline, note down the Activation Lock Bypass Code from Device Info > Activation Lock on the device details page. Then, on the iPhone’s Activation Lock screen, leave the Apple Account field blank and type the case-sensitive bypass code straight into the Password field to unlock the device.

Please feel free to reach out to us if you have any further queries or feedback.