Removing a manually installed configuration profile on an unsupervised Apple device
How common it is: not established. Apple explicitly documents the removal property.
Detection
The expected configuration profile is no longer present; the associated VPN/filter/certificate disappears or stops operating. A genuine MDM deployment may also show the device no longer checking in.
Fix (technical)
Apple states that on an unsupervised iPhone or iPad, a manually installed profile can be removed by a user who knows the device passcode, even if removal was configured as “Never”. For a profile tha…
Fix (relational)
High-assurance device management changes the trust relationship substantially. If it is being considered because of repeated circumvention, explain what is monitored and why before deploying enterpris…
Residual risk
Supervision/MDM carries administrative and privacy implications and is not equivalent to ordinary family Screen Time.
Sources
- apple-mdm-profiles