We have loner iPads that get erased when returned, the issue we have is any user can erase the device.
We have activation lock on so if a user does erase the device it becomes worthless. But of course that locks out the return desk from setting up the device (they have no access to jamf to get the activation bypass code).
We will like to turn off activation lock, but lock down erasing a device with a passcode. Is this possible?

