Activation Lock settings with Profile Manager
Activation Lock makes it difficult for someone else to use or sell an iPhone, iPod touch, iPad, Mac, or Apple Watch. Managing Activation Lock lets your organization benefit from its theft-deterrent functionality while simultaneously providing you the ability to turn off Activation Lock from devices your organization owns.
To learn more about Activation Lock, see Using Activation Lock in Mobile Device Management Settings for IT Administrators.
Set Activation Lock during enrollment
You can configure Profile Manager to automatically send certain Activation Lock commands to a device after it has been enrolled. By default, the command is only sent when a bypass code has been obtained from the device. You can perform these steps for any user or group.
In the Profile Manager
sidebar, select Groups.Select Everyone, then click the Settings tab.
Allow Activation Lock is a group setting because it lets an organization capture all users with supervised devices that configure Find My with their Apple ID. There is no “All devices” group. The Everyone group in Profile Manager is used to cover all authenticated user enrollments.
Click Save.
Allow Activation Lock
You can configure a device to allow Activation Lock outside of Enrollment Settings on a user or group by using the Allow Activation Lock command.
In the Profile Manager
sidebar, select Groups.Select Everyone, then click the About tab.
After devices are enrolled, you can choose the Allow Activation Lock command from the Action pop-up menu
to allow Activation Lock on the devices.Select the devices you want from the dialog that appears, then click Allow Activation Lock.
Use Activation Lock bypass code
You can use the Activation Lock bypass code in place of a password to unlock a device and erase it.
In the Profile Manager
sidebar, click Devices.Select a device, click the About tab, then click the Security triangle, and locate the activation lock bypass code.
Enter the bypass code in the password field of the Apple ID on the device you want to erase. Leave the Apple ID user name blank.
The device is erased and can be set up again. You must set up Activation Lock again and generate a new code.
Clear Activation Lock
You can clear the Activation Lock. You should do this only on a device, not on a user or group.
In the Profile Manager
sidebar, click Devices.Select a device, then select Clear Activation Lock from the Action pop-up menu
.The Activation Lock is cleared on the device.