Since the MDM profile and management framework can be removed by users who have administrative access to their computers, how would one build in a failsafe and have machines automatically re-enroll/re-manage themselves if someone removed the profile or figured out how to remove the framework?
I'm sure this has been hashed out before, but I cannot find a discussion the explains it. If anyone has a link to a discussion with a solution, please share.