Devices managed by AirWatch and enrolled through the Apple Device Enrollment Program can receive security measures to protect end-user and corporate data when a device is lost or stolen.
Maximum App Passcode Attempts
You can configure your DEP devices to require the end user to enter a passcode to access SDK apps on the device. You can also set a maximum number of attempts to enter the passcode correctly. If this feature is enabled, and a user exceeds the maximum device passcode attempts, the device locks into Lost Mode. A device in Lost Mode can only be unlocked from the AirWatch Console.
To configure the app passcode settings, navigate to Groups & Settings > All Settings > Apps > Security Policies in the AirWatch Console.
For more information, see Complete the DEP Enrollment Profile.
Agent Unenroll Protection
If an end user attempts to unenroll a supervised DEP device through the AirWatch Agent, the device locks into Lost Mode. A device in Lost Mode can only be unlocked from the AirWatch Console.
For more information, see Perform Remote Actions on All Devices.