Hello
I have recently started a post where I have inherited some unmanaged iPads. They weren't originally purchased via DEP. We do have an existing JAMF subscription and Apple School Manager, which are both linked. I've also setup a basic Automated Device Enrolment profile on JAMF.
I have a Mac with Apple Configurator on it. I have set up the organisation & server, and have done the following:
1) Prepared the iPad on Configurator, enrolling into Apple School Manager during this
2) Logged into Apple School Manager, where I can then see the device has been enrolled
3) Edited the MDM Server and assigned to JAMF School
4) On JAMF, changed the device name and went to Automated Device Enrolment, where I could see the iPad listed. I've ticked it and assigned the Automated Device Enrolment Profile
In terms of our profile for restrictions etc, I've set up so users can't Erase All Content & Settings. However, even following the process above, there is nothing stopping the user from going into Settings --> General --> VPN & Device Management, then tapping the JAMF MDM Profile and tapping Leave Remote Management. When they do this, it erases all contents and settings and then they can go through the setup without it being picked up as supervised (i.e. they could set up as their own.)
Can anybody help as I've tried a lot of different ways to prevent this and am struggling.
Thanks