Somehow our PreStage Enrollment profile was deleted and we didn't have the configuration settings recorded (won't do that again!) In trying to recreate the profile I'm having a hard time remembering how the Activation Lock should be configured. We don't want users locking the device to their personal iCloud accounts so I THINK I need to check "Prevent user from enabling Activation Lock" but we want to be able to prevent a lost phone from being used so then I need to check "Enable Activation Lock on the device (Apple School Manager, Apple Business Manager)". Is this correct?
Can someone explain the expected workflow of these two settings together given the situation that the phone is wiped or lost?
Other (unrelated to lock question) is what is the purpose of "Make MDM profile mandatory"? Is there a reason to not check this when you are doing Supervision?
Thanks
