Just trying to think through options for you. How do you enroll a device to DEP? Are you forcing a username and password enrollment on the setup screens? Its possible if you dont have it set this way they are just wiping the devices and then re-setting up and never following the enrollment steps. Have you tried making your restrictions profile not removable? It sounds like you may already have all this locked out. It does not work I get the following error ' The profile “Device Manager” does not have the expected certificate for removal. MY thought process here being if you include a trust certificate in your DEP profiles for the managed Macs when they hook up a managed iPad with the same cert it would allow the profile to be manually deleted. I just double checked and my DEP profiles cannot be removed on teh device, and the profile cannot be manually removed via Apple Configurator 2 on a Mac that has the trust certificate that allows pairing. Step 2: Connect your iOS device like your iPhone to the PC, ensuring automatic synchronization of iTunes has been disabled before making this connection. So this combination is guarantee to work. 2066, isen-ng/dotnet-sdk-versions/dotnet-sdk8-preview, 23, 0. I am running on iOS 10, macOS Sierra, and iBackupBot 5.4.2. Just to be sure, have you double checked that your DEP profile(s) are set to not be allowed to be deleted? I believe this is by default with DEP. Step 1: Firstly, you have to download iBackupBot to your Windows or Mac-supported PC, then install and run the program. If you can’t remember your Restrictions Passcode for iOS, you can download iBackupBot, edit a preference file to include a new pin, restore from that backup, enter you new pin and it actually works.

Ibackupbot 2066