Prevent MDM integration removal

Introduction

If the goal is to ensure that Windows 10/11 devices remain in the system and the connection to Relution should be maintained, it is possible to prevent that the MDM profile is removed.

Configure Restriction

To accomplish this, a restriction must be set on the protected devices. By setting this restriction, the delete option will still be displayed but will no longer have any function.

  1. Allow removal of MDM connection from Relution - If disabled, this will ensure that end-users cannot disconnect connected devices from the MDM server.
  2. Allow factory reset by user - if disabled, prevents end users from performing factory reset on devices. This would delete the enrollment on the devices and the connection to the MDM server.

win_restrictions

Combine both options to secure MDM control of enrolled Windows 10/11 devices and any configurations and functional restrictions.