If the devices are in Apple School Manager or Apple Business Manager and are supervised, you can enable or disable Activation Lock via MDM. You can lock a supervised device with Activation Lock without requiring the user to sign in to their iCloud account on the device. This allows your organisation to benefit from the theft-deterrent functionality of Activation Lock, while preventing the user from removing the device from Activation Lock.
Additional Activation Lock features:
MDM solutions can generate a bypass code and lock a device remotely.
Activation Lock management can be enabled by an MDM solution at any time as long as the device is not currently under Activation Lock by the user.
The user can’t disable Activation Lock because it is not linked the user’s iCloud account. You must use the MDM bypass code to disable Activation Lock.
You can also disable the Managed Activation Lock directly on the device by using the Device Manager’s credentials.
If the devices are in Apple School Manager or Apple Business Manager, are supervised and enrolled in an MDM solution, you can enable or allow Activation Lock.
Enable Activation Lock
When you enable Activation Lock, your organisation benefits from its theft-deterrent functionality without users being able to disable it. On a supervised device, it happens without requiring the user to sign in to their iCloud account with their Apple ID on the device, so they can’t disable it. You must use the MDM bypass code to remove the device from Activation Lock.
Allow Activation Lock
You can use an MDM solution to allow Activation Lock on a supervised device. This lets your organisation benefit from its theft-deterrent functionality, while still letting you bypass the feature if a user is unable to authenticate with their Apple ID.
Your MDM solution can retrieve a bypass code and permit the user to enable Activation Lock on the device based on the following:
If Find My is turned on when your MDM solution allows Activation Lock, Activation Lock is enabled at that point.
If Find My is turned off when your MDM solution allows Activation Lock, Activation Lock is enabled the next time the user activates Find My.
Note: You can’t choose both Enable Activation Lock and Allow Activation Lock. You must select one or the other. The first Activation Lock takes precedence.