How to prevent users from unenrolling from device which is activated with ABM and Intune

Question

We have a case where we have linked abm and intune so whenever a new device is activated with apple configurator it will be activated in ABM and then retrieve and install the management profiles from our mdm which is intune. Everything is working as it is showed in documents and manuals. But after activation in our devices users hava an opportunity to unenroll the device

Answer 1

Hi,

With manual device enrollment, a 30-day provisional period begins once a device is activated. During that period, users can remove their devices from enrollment, supervision, and MDM.

https://www.apple.com/mx/business-docs/DEP_Guide.pdf