Unenrolling from removable MDM/device management
How common it is: not established. Apple documents that profiles delivered by an MDM service can be removed through unenrollment depending on deployment/enrollment configuration.
Detection
MDM console reports unenrollment or loss of check-in; managed profiles/settings disappear.
Fix (technical)
Use an enrollment/supervision model appropriate to the desired tamper resistance. Verify the actual removal policy in the MDM documentation. There is no single Screen Time toggle that makes arbitrary …
Fix (relational)
Enterprise-style management can be disproportionate for ordinary family conflict. Use it only where the assurance need justifies the reduction in device autonomy.
Residual risk
Device-management enrollment modes differ; recovery, ownership transfer and administrator errors can still disrupt management.
Sources
-
apple-mdm-profiles
-
apple-configurator-restrictions