Students can remove Hexnode MDM profile from iPads even though profile removal is disabledSolved

Hello,

Thanks for reaching out to Hexnode Connect.

For iOS and iPadOS devices, whether the MDM profile can be removed depends heavily on how the device was enrolled.

If devices are enrolled manually, users may still be able to remove the management profile from Settings, regardless of your policy configuration. To prevent users from removing the MDM profile, the devices must be enrolled through Apple School Manager (ASM) or Apple Business Manager (ABM) using Automated Device Enrollment (ADE). Once assigned and enrolled this way, the profile becomes non-removable.

(Note: Devices added to ASM/ABM using Apple Configurator have a 30-day provisional period where Apple allows the end user to remove management. After this period ends, the device becomes fully locked into management).

I hope this helps or resolves your issue. Feel free to reach out if you have any more doubts or need further assistance.

Best regards,
George,
Hexnode UEM

These devices were not in the Apple Configurator 30-day provisional period. They had already been in use, but students were still able to remove the Hexnode profile manually.

Hello,

In that case, the recommended fix is to wipe and re-enroll the devices strictly through Apple School Manager using Automated Device Enrollment.

Here is the exact workflow to lock them down:

1. Assign in ASM: Add or verify the devices in Apple School Manager and assign them to your Hexnode MDM server.
2. Sync with Hexnode: Run a sync in the Hexnode portal to fetch the latest ADE device assignments.
3. Configure the Profile: Ensure your Automated Device Enrollment profile in Hexnode has MDM profile removal explicitly disabled.
4. Wipe and Re-enroll: Factory reset the iPads. When they boot up and connect to Wi-Fi, they will automatically go through the Apple School Manager enrollment flow.

After completing this ADE enrollment through Apple School Manager, the option to remove the MDM/UEM profile from Settings will no longer be available to the students.

I hope this helps or resolves your issue. Feel free to reach out if you have any more doubts or need further assistance.

Best regards,
George,
Hexnode UEM