Inherited a fleet of iOS devices that didn't have "Prevent Unenrollment" checked in the pre-stage enrollment. Have several hundred devices that have the ability to remove the MDM Profile. Is there a way to create a configuration profile to block users from having the ability to remove the MDM? I'm not seeing anything in the Configuration Profile settings to do that. Don't want to have to manually re-enroll the entire fleet.
