Issue with Restricting Configuration Profile Removal in Intune (iPhone)

Question

Hi everyone,

I’m facing an issue with setting up a restriction to prevent the removal of a configuration profile on an iPhone using Microsoft Intune.

Here’s the situation:

1. I enroll the device (iPhone) using Apple Configurator — everything works fine.
2. In Intune, I create a policy via Settings Catalog, where I enable the option to require a password for removing profiles.
3. According to Intune monitoring, the policy is successfully applied to the device.

The problem: When I try to remove the configuration profile on the device, it gets deleted without asking for a password, even though the policy should prevent this.

Question: What might I be missing in the setup? Are there any additional steps or settings required to enforce the password prompt when removing the profile?

I’d appreciate any advice or guidance!

Answer 1

@Daniil Zybailo,Thanks for posting in Q&A.

Based on my research, the removal password is for individual device configurations not for the enrollment profile. It’s supposedly for the individual configurations but it’s not fully developed yet either. So, actuality it may serves no purpose.

https://www.reddit.com/r/Intune/comments/17q950r/ios_profile_removal_password_help_please/

Non-official, just for reference.

At the same time, I find that someone has post the same question in the Apple forum. In this post, it provided a method that create a password protected profile in Apple Configurator.

https://discussions.apple.com/thread/7275348

Non-official, just for reference.

Hope it can help you.

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.