Not sure if this helps but I think I fixed our issue of Students being
able to turn the VPN off. Maybe it will help in your situation. We use
iBoss VPN and in our config profile I checked the option "Prohibit users
from disabling on-demand VPN settin...
