@tommy soo Thanks for posting in our Q&A.
For this issue, I have done a lot of research. I find that this feature is only available in DEP. Currently, there is no other way to unable to remove the management profile.
At the same time, I find that someone has the similar requirement in the intune uservoice. This is a place to collect customers' requirements and problems. If you are interested in this feature, we suggest to feedback in it.
https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/8896672-add-a-policy-to-prevent-device-unenrollment-from-c
Thanks for understanding and have a nice day.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.