Devices managed by Workspace ONE UEM and enrolled through the Apple Device Enrollment Program can receive security measures to protect end-user and corporate data when a device is lost or stolen.
Maximum App Passcode Attempts
You can configure your DEP devices to require the end user to enter a passcode to access
To configure the app passcode settings, navigate to Groups & Settings > All Settings > Apps > Security Policies in the UEM console.
For more information, see Complete the DEP Enrollment Profile.
Agent Unenroll Protection
If an end user attempts to unenroll a supervised DEP device through the AirWatch Agent, the device locks into Lost Mode. A device in Lost Mode can only be unlocked from the UEM console.
For more information, see Perform Remote Actions on All Devices.